l2tp-user radius-force

Function

The l2tp-user radius-force command specifies the L2TP attributes delivered by the RADIUS server for the domain users.

The undo l2tp-user radius-force command cancels the L2TP attributes delivered by the RADIUS server for the domain users.

By default, domain users do not use the L2TP attributes delivered by the RADIUS server.

Format

l2tp-user radius-force

undo l2tp-user radius-force

Parameters

None

Views

AAA domain view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
l2tp	write

Usage Guidelines

L2TP attributes of domain users can be specified in L2TP groups or delivered by the RADIUS server. When the domain users use the L2TP attributes delivered by the RADIUS server, you do not need to specify L2TP groups in the domain. The specified L2TP group is also invalid.

The RADIUS server can deliver attributes such as the tunnel type (64), HW-Tunnel-Group-Name (HUAWEI-96) , LAC source address (66), LNS address (67), tunnel name (90), tunnel password (69), and tunnel ID (82). If the RADIUS server does not deliver L2TP attributes, the device considers the user as a common PPP user.

The priority of the L2TP attributes delivered by the RADIUS server is higher than the L2TP attributes configured in the local L2TP group. For example, if the LNS address is configured to 10.10.10.1 in the L2TP group lac1 on the device, and the RADIUS server delivers LNS address 10.20.20.1 and L2TP group name lac1, LNS address 10.20.20.1 takes effect. If the RADIUS server delivers only L2TP group name lac1, LNS address 10.10.10.1 takes effect.

Example

# Specify L2TP attributes delivered by the RADIUS server for the domain users.

<HUAWEI> system-view
[~HUAWEI] aaa
[*HUAWEI-aaa] domain huawei
[*HUAWEI-aaa-domain-huawei] commit
[~HUAWEI-aaa-domain-huawei] l2tp-user radius-force