3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

LAC Configuration 111
Perform the following configuration in L2TP group view.
By default, AVP is transferred in plain text.
Setting Hello Interval in
Tunnel
In order to check the connectivity of the Tunnel between LAC and LNS, LAC and
LNS send Hello packets to each other periodically and the receiver will respond
upon the receipt of the packets. If LAC or LNS does not receive response from the
peer end in a specified interval, it will resend Hello packet and will regard the L2TP
Tunnel connection has been disconnected if receiving no response after making
three transmission attempts. In this case, LAC and LNS need to set up a new
Tunnel connection.
This configuration is optional on LAC side.
Perform the following configuration in L2TP group view.
By default, Hello interval is 60 seconds. If this configuration is not performed on
LAC side, LAC will send Hello packet to the peer end at intervals of the default
value.
Setting Username,
Password and Local User
Authentication
If you have configured local authentication when configuring AAA authentication
on LAC side, you also need to configure local username and password on this side.
LAC performs user authentication to determine whether a user is a valid VPN user
by comparing remote dial-in username and password with usernames and
passwords registered at the local end. It originates Tunnel setup request only upon
successful authentication. Otherwise, the user will be diverted to other kinds of
services.
These configurations are compulsory on LAC side.
Configuring user name and password
Tab le 89 Set transfer mode of AVP data
Operation Command
Configure to transfer AVP data in the hidden
mode
tunnel avp-hidden
Restore default transfer mode of AVP undo tunnel avp-hidden
Tab le 90 Set Hello interval in a Tunnel
Operation Command
Set Hello interval in a Tunnel tunnel timer hello hello-interval
Restore the default Hello interval undo tunnel timer hello
Tab le 91 Configure a username and password
Operation Command
Configure a user name and password (in
system view)
local-user username
Delete the current setting (in system view) undo local-user username