renegotiation-lcp authentication-mode lac first

Function

The renegotiation-lcp authentication-mode lac first command configures an LNS to use the authentication mode delivered by the LAC preferentially in an LCP renegotiation process.

The undo renegotiation-lcp authentication-mode lac first command restores the default configuration.

By default, an LNS uses the first authentication mode configured in the virtual template view preferentially.

This command is supported only on the NetEngine 8000 F1A.

Format

renegotiation-lcp authentication-mode lac first

undo renegotiation-lcp authentication-mode lac first

Parameters

None

Views

L2TP group view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
l2tp	write

Usage Guidelines

Usage Scenario

To configure an LNS to use the authentication mode delivered by the LAC preferentially in an LCP renegotiation process, run the renegotiation-lcp authentication-mode lac first command.

Precautions

The renegotiation-lcp authentication-mode lac first command is effective only if the mandatory-lcp command is configured on an LNS. By default, an LNS does not perform LCP renegotiation.

If the LNS is configured to preferentially select the authentication mode delivered by the LAC, an insecure authentication mode may be selected, which poses security risks. You are advised to configure the LNS to use the secure authentication mode configured in the local virtual template view.

Example

# Configure an LNS to use the authentication mode delivered by the LAC preferentially in an LCP renegotiation process.

<HUAWEI> system-view
[~HUAWEI] l2tp-group h1
[*HUAWEI-l2tp-h1] renegotiation-lcp authentication-mode lac first