3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

349
Description
Use the session idle-time command to set the L2TP session idle-timeout time and
enable the timeout disconnection function.
Use the undo session idle-time command to disable timeout disconnection.
By default, L2TP session never expires.
Example
# Enter L2TP group view.
[SecBlade VPN] l2tp-group 1
# Set the L2TP session idle-timeout time to 600 seconds.
[SecBlade l2tp1] session idle-time 600
start l2tp Syntax
start l2tp { ip ip-addr [ ip ip-addr ] [ ip ip-addr ] ... } { domain domain-name |
fullusername user-name }
undo start l2tp
View
L2TP group view
Parameter
ip ip-addr: Specifies the IP address of the peer end of the tunnel (LNS). Up to five
IP addresses can be set that provide LNS backup for one another.
domain-name: Domain name triggering connection requests, a string of 1 to 30
characters.
user-name: Full username triggering connection requests, a string of 1 to 32
characters.
Description
Use the start l2tp command to specify conditions triggering the local end to place
calls when it works as L2TP LAC.
Use the undo start l2tp command to delete the specified triggering conditions.
This command is used on LAC side to specify IP address of LNS; it can support
several connection request triggering conditions, specifically,
■ Initiating tunnel connection request according to the user’s domain name. For
example, if domain name of user’s company is 3Com.com, the user with this
domain name can be specified as a VPN user.
■ Specifying a user to be a VPN user by directly specifying full username.
For a VPN user, the local end (LAC) will send L2TP tunnel connection request to a
certain LNS according to the configured LNS priority or order. If receiving response