Configuring a LAC
To establish an L2TP tunnel between a LAC and an LNS, configuring the LAC, including starting an L2TP connection and setting tunnel parameters and an authentication mode for the LAC.
Usage Scenario
When an L2TP user goes online, a LAC sets up a tunnel with a remote LNS and sends the user packets to the LNS through the tunnel.
Figure 1 shows how an NetEngine 8000 F that functions as a LAC initiates an L2TP connection to an LNS when a user goes online.
Figure 1 Process of initiating an L2TP connection
| (1) The NetEngine 8000 F reads the domain name contained in the username. |
| (2) The NetEngine 8000 F reads the L2TP group name specified for the domain. |
| (3) The NetEngine 8000 F reads a specified LNS address in the L2TP group. |
| (4) The NetEngine 8000 F initiates a connection to the specified LNS. |
- Enabling L2TP
- To set up an L2TP tunnel between a LAC and an LNS, L2TP must be first enabled.
- Configuring an L2TP Connection on the LAC Side
- Configuring an L2TP connection on the LAC side is the prerequisite for establishing an L2TP tunnel.
- Configuring Tunnel Authentication
- An L2TP tunnel can be successfully established only after L2TP tunnel authentication succeeds.
- Configuring L2TP User Attributes
- L2TP user attributes include the tunnel type, tunnel source and destination IP addresses, and tunnel name and password. Note that the L2TP user attributes delivered by a RADIUS server takes precedence over the locally configured L2TP attributes.
- Configuring LAC-Side User Access
- This section describes how to configure LAC-side user access to implement control and accounting for each access host.
- (Optional) Configuring URPF for L2TP Users
- To prevent source address spoofing attacks, enable URPF for L2TP users.
- Verifying the LAC Configuration
- This section describes how to verify the configurations of the L2TP group, session information, and the tunnel on the LAC after the LAC is configured and users go online.