Manual

Layer 2 Tunnel Protocol Version 3
authentication
78
Cisco IOS Releases 12.0(29)S and 12.2(25)S
Examples The following example enables CHAP-style authentication for L2TPv3 pseudowires configured using
the L2TP class configuration named l2tp class1:
Router(config)# l2tp-class l2tp-class1
Router(config-l2tp-class)# authentication
Table 5 Compatibility Matrix for L2TPv3 Authentication Methods
PE1
Authentication
Configuration
PE2 Supporting Old
Authentication
1
1. Any PE software that supports only the old CHAP-like authentication system.
PE2 Supporting New
Authentication
2
2. Any PE software that supports only the new message digest authentication and integrity checking authentication system,
but does not understand the old CHAP-like authentication system. This type of software may be implemented by other
vendors based on the latest L2TPv3 draft.
PE2 Supporting Old and
New Authentication
3
3. Any PE software that supports both the old CHAP-like authentication and the new message digest authentication and
integrity checking authentication system, such as Cisco IOS 12.0(29)S or later releases.
None None None
New integrity check
None
New integrity check
Old
authentication
Old authentication — Old authentication
Old authentication and
new authentication
Old authentication and
new integrity check
New
authentication
— New authentication New authentication
Old authentication and
new authentication
New integrity
check
None None
New integrity check
None
New integrity check
Old and new
authentication
Old authentication New authentication Old authentication
New authentication
Old and new
authentication
Old authentication and
new integrity check
Old
authentication
and new integrity
check
Old authentication — Old authentication
Old authentication and
new authentication
Old authentication and
new integrity check