3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

114 CHAPTER 8: CONFIGURATION OF L2TP
Setting LAC to Function
as Client
Normally, the L2TP client is the host that dials to the LAC, where the connection
between the user and the LAC is always PPP connection.
If the LAC is functioning as the client, the connection between the host and the
LAC can be an IP connection allowing the LAC to forward the IP packets from the
host to the LNS. This is equivalent to creating a virtual PPP user associated with
multiple actual users on the LAC and maintaining a permanent connection for it.
The IP packets of all these actual users are forwarded to the LNS through this
virtual user.
To use the LAC as the client, you must add the following configurations in addition
to other LAC configurations:
■ Create a virtual template interface
■ Configure the parameters of the virtual template interface, including IP
address, PPP authentication mode, and username and password for PPP
authentication
■ Enable the LAC client to set up L2TP Tunnel
n
When the LAC is functioning as the L2TP client, you must set the L2TP session
idle-timeout timer to 0 or disable it, preventing the session of the virtual user is
disconnected when no data is transmitted or received.
Creating a virtual template interface
Perform the following configuration in system view.
Configuring the parameters of the virtual template interface
Perform the following configuration in virtual template interface view.
Tabl e 98 Start an L2TP Tunnel connection
Operation Command
Start an L2TP Tunnel connection start l2tp tunnel
Tabl e 99 Create/delete a virtual template interface
Operation Command
Create a virtual template interface interface virtual-template virtual-template-number
Delete a virtual template interface
undo interface virtual-template
virtual-template-number
Tabl e 100 Configure the parameters of the virtual template interface
Operation Command
Assign an IP address to the virtual
template interface
ip address { address mask | ppp-negotiate |
unnumbered interface interface-type
interface-number }
Configure a PPP authentication
mode
ppp authentication-mode { pap | chap }
Configure the username for CHAP
authentication
ppp chap user user-name
Configure the password for CHAP
authentication
ppp chap password { simple | cipher } password