Network Router User Manual

Nortel Secure Router 8000 Series
Troubleshooting - VPN 1 L2TP troubleshooting
Issue 5.3 (19 January 2009) Nortel Networks Inc. 1-7
[Nortel-LoopBack0] ip address 100.1.1.1 255.255.255.255
[Nortel-LoopBack0] quit
As the terminal IP of the tunnel, the interface is responsible for decompressing the L2TP
header and preparing for the next forwarding.
4. Configure the attributes on the L2TP group to be consistent with those on the LAC side.
# Enable the L2TP.
[Nortel] l2tp enable
# Set the identifier of the domain to be the @ symbol.
[Nortel] l2tp domain suffix-separator @
# Create the L2TP group.
[Nortel] l2tp-group 1
# Configure the name of the local tunnel as LNS.
[Nortel-l2tp1] tunnel name LNS
# Specify the VT to negotiate with the user, and the remote name (you do not need to
configure the remote name if the L2TP group number is 1).
[Nortel-l2tp1] allow l2tp virtual-template 1 remote LAC
# Configure the tunnel authentication to be consistent with the LAC.
[Nortel-l2tp1] tunnel authentication
# Configure the password of the tunnel to be the same as the LAC.
[Nortel-l2tp1] tunnel password simple 12345
# Configure the destination number of the tunnel to be loopback 0.
[Nortel-l2tp1] tunnel destination loopback 0
[Nortel-l2tp1] quit
5. Create a domain and bind the virtual template and the corresponding address pool in the
domain.
[Nortel] aaa
[Nortel-aaa] domain nortel1.com
[Nortel-aaa-domain-nortel1.com] ip pool 8 8.1.1.2 8.1.1.10
[Nortel-aaa-domain-nortel1.com] quit
[Nortel-aaa] domain nortel2.com
[Nortel-aaa-domain-nortel2.com] ip pool 9 9.1.1.2 9.1.1.10
[Nortel-aaa-domain-nortel2.com] quit
6. Create two user names and passwords.
[Nortel-aaa] local-user [e-mail] password simple 11111
[Nortel-aaa] local-user [e-mail] password simple 22222
1.2.3 Diagnostic flowchart
Figure 1-4 shows the flowchart for diagnosing faults on L2TP.