R3166-R3206-HP High-End Firewalls VPN Configuration Guide-6PW101

98
Item Descri
p
tion
PPP
Authentication
Configuration
Authentication
Method
Select the authentication method for PPP users on the local end.
You can select PAP or CHAP. If you do not select an authentication
method, no authentication will be performed.
ISP Domain
Specify the ISP domain for PPP user authentication. You can:
• Click Add to enter the page for adding an ISP domain. For more
information, see Table 25.
• Select an ISP domain and click Modify to enter the ISP domain
modification page. For more information, see Table 25.
• Select an ISP domain and click Delete to delete the ISP domain.
Note the following:
• If you specify an ISP domain, the specified domain will be used for
authentication, and IP addresses must be assigned from the address
pool configured in the specified domain. For more information, see
the description on the User Address parameter.
• If you do not specify any ISP domain, the system will check whether
domain information is carried in a username. If yes, the domain will
be used for authentication (if the domain does not exist, the
authentication will fail); otherwise, the default domain (system by
default) will be used for authentication.
PPP Address
PPP Server IP/Mask
Specify the IP address and mask of the local end.
PPP Server Zone
Specify the security zone to which the local end belongs.
If you do not select a zone, the global address pool will be used.
User Address
Specify the address pool for assigning IP addresses to users on the
peer end, or assign an IP address to a user directly.
If you have specified an ISP domain in PPP authentication
configuration, the address pools in the ISP domain will be listed in the
User Address drop-down list. You can:
• Click Add to add an address pool. For more information, see Table
26.
• Select an address pool and click Modify to enter the address pool
modification page. For more information, see Table 26.
• Select an address pool and click Delete to delete the address pool.
Assign Address
Forcibly
Specify whether to force the peer end to use the IP address assigned by
the local end. If you enable this function, the peer end is not allowed to
use its locally configured IP address.
Advance d
Configuration
Hello Interval
Specify the interval between sending hello packets.
The intervals on the two ends of the tunnel can be different.
AVP Hidden
Specify whether to transfer AVP data in hidden mode.
This configuration does not take effect on an LNS.
Flow Control
Specify whether to enable flow control for the L2TP tunnel.
The L2TP tunnel flow control function is for control of data packets in
transmission. Data packets may arrive out of order and the flow control
function helps in buffering and adjusting out-of-order data packets.