TMS zl Management and Configuration Guide ST.1.2.100916

A-172
Command-Line Reference
L2TP User Context
hostswitch(tms-module-<slot ID>:ipsec)# exit
hostswitch(tms-module-<slot ID>:config)# l2tp local-user
l2tpuser
hostswitch(tms-module-<slot ID>:l2tp-user)# tunnel
10.100.1.1/24 user 10.100.1.80
hostswitch(tms-module-<slot ID>:l2tp-user)# auth group
l2tpusers protocol any
Password: ********
hostswitch(tms-module-<slot ID>:l2tp-user)# dns primary
10.1.2.100 secondary 10.1.2.80
hostswitch(tms-module-<slot ID>:l2tp-user)# preview
Preview L2TP Dial-in User
---------------------------------------------
User Authentication
User: l2tpuser
Password: ******
Policy Group Name: l2tpusers
Authentication Protocol: Any
Tunnel Configuration
Server IP Address/Mask: 10.100.1.1/24
User IP Address: 10.100.1.80
Primary DNS Server: 10.1.2.100
Secondary DNS Server: 10.1.2.80
Primary WINS Server: [not set]
Secondary WINS Server: [not set]
hostswitch(tms-module-<slot ID>:l2tp-user)# apply
hostswitch(tms-module-<slot ID>:l2tp-user)# exit
hostswitch(tms-module-<slot ID>:config)#
Example L2TP over IPsec VPN with RADIUS
Authentication
The following is the complete command set to create the L2TP over IPsec VPN
with the parameters detailed in Table A-46. In this example, L2TP users
authenticate an external RADIUS server. Note that these commands do not
include those for creating necessary routes or firewall access policies.