The tunnel radius-force command configures the forced tunnel authentication of RADIUS. If the RADIUS delivers the tunnel password attribute, the peer end will be authenticated.
The undo tunnel radius-force command deletes the forced RADIUS tunnel authentication.
By default, forced RADIUS tunnel authentication is not enabled in the L2TP group.
This command is supported only on the NetEngine 8000 F1A.
In forced RADIUS tunnel authentication, the attributes delivered by the RADIUS server determine whether to authenticate a tunnel. If the attributes delivered by the RADIUS server contain the tunnel password, the LNS or LAC authenticates the tunnel by using the password; otherwise, the LNS or LAC does not authenticate the tunnel.