VPDN Configuration command directory
¡¡
Setting VPDN group as LNS
accept-dialin
no accept-dialin
parameter:
none
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
The command sets VPDN group as LNS
Example:
The example below creates a VPDN and sets it as LNS
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#accept-dialin
Force-local-chap
Setting the domain name of LAC
domain domain-name
no domain domain-name
parameter:
domain-name, the maximum length is 255 characters
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
The command can only be executed on
LAC, the user is divided by the symbol @, after the symbol @ is the domain
name.
Example:
The example below creates a VPDN group and sets it as LAC and also
sets a domain name.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#request-dialin
router_config-vpdn#domain D-Link.com.cn
Setting LNS and re-authentication of CLIENT.
Force-local-chap
no Force-local-chap
parameter:
none
Default:
no Force-local-chap
Command mode:
Configuration mode of VPDN group
Explanation:
When PPP protocol interactive
starts, LAC will act as proxy for LNS to authenticate Client. The command is
used for setting a second authentication made by LNS to Client after the
channel is created. The command can only be executed on LNS.
Example:
The example below creates a VPDN group
and sets it as LNS and sets the re-authentication.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#accept-dialin
router_config-vpdn#force-local-chap
Setting the conceal of sensitive attribute
L2tp
hidden
no L2tp hidden
parameter:
none
Default:
no L2tp hidden
Command mode:
Configuration mode of VPDN group
Explanation:
The command
can only takes effect when the
tunnel password is configured in the router.
Example:
The example below creates a VPDN group and sets it as LAC,
configures channel authentication and password and sets the attribute hide.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#request-dialin
router_config-vpdn#l2tp tunnel authen
router_config-vpdn#l2tp tunnel password 123456
router_config-vpdn#l2tp hidden
Configuring the enable of tunnel authentication
L2tp
tunnel authen
no L2tp tunnel authen
parameter:
none
Default:
no L2tp tunnel authen
Command mode:
Configuration mode of VPDN group
Explanation:
When the tunnel is created, two parties can authenticate each other. If the channel authentication is configured, the password shall be set.
Example:
The example below creates a VPDN group on two routers separately, one is used as LAC, the other as LNS. They are all configured with channel authentication and the same password.
routerA>enable
routerA#config
routerA_config#vpdn-group 1
routerA_config-vpdn#request-dialin
routerA_config-vpdn#l2tp tunnel authen
routerA_config-vpdn#l2tp tunnel password 123456
routerB#config
routerB_config#vpdn-group 2
routerB_config-vpdn#accept-dialin
routerB_config-vpdn#l2tp tunnel authen
routerB_config-vpdn#l2tp tunnel password 123456
Setting the time interval of sending
HELLO packet
L2tp
tunnel hello hello-interval
no L2tp tunnel hello hello-interval
parameter:
hello-interval, numeric area ranges from 1 to the maximum value of
integer
Default:
60
Command mode:
Configuration mode of VPDN group
Explanation:
After the dialogue between LAC and
LNS is created, HELLO packet shall be sent periodically to detect whether the
link is normal.
Example:
The example below creates a VPDN group, the time interval of sending
HELLO packet is 10 seconds.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#request-dialin
router_config-vpdn#l2tp tunnel hello 10
Setting the size of sliding window for receiving
L2tp
tunnel receive-window receive-window-size
no L2tp tunnel receive-window receive-window-size
parameter:
receive-window-size£¬the numeric area is from 4 to 100.
Default:
4
Command mode:
Configuration mode of VPDN group
Explanation:
The command is used for designating
the size of BUFFER received by the local and informing the opposite terminal
the size at the same of L2TP tunnel negotiation simultaneously so as to enable
the opposite terminal to set the size of sliding window for sending the
corresponding packet according to the value.
Example:
The example below creates a VPDN group and sets the size of sliding
window received by it as 5.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#l2tp tunnel receive-window 5
¡¡
Setting the sensitive attribute hide
l2tp tunnel password password
no l2tp tunnel password password
parameter:
password, The maximum length of channel password
is 254 characters in non encrpytion text.
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
If
channel authentication is configured, the password shall be configured.
Example:
The example below creates a VPDN group and sets it as LAC, configures
channel authentication and password.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#request-dialin
router_config-vpdn#l2tp tunnel authen
router_config-vpdn#l2tp tunnel password 123456
Setting whether LCP re-negotiation should
be made between LNS and CLIENT.
lcp-renegotiation
no lcp-renegotiation
parameter:
none
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
Under
a general condition, LAC executes the proxy function in the phase of LCP and
authentication of PPP. When LNS wishes to restart TCP negotiation of PPP with
Client and the consequent process, it can be realized through configuring this
command. The command can be executed exclusively on LNS.
Example:
The example below creates a VPDN group and sets it as LNS and
restarts LCP negotiation.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#accept-dialin
router_config-vpdn#lcp-renegotiation
Setting the local name of VPDN group
Local local_ame
no Local local_ame
parameter:
local_name, the maximum length of
channel password is 254 characters
Default:
D-Link
Command mode:
Configuration mode of VPDN group
Explanation:
Each vpdn group shall have a name of
a local tunnel so as to facilitate the remote terminal to find a match for VPDN
group.
Example:
The example below creates a VPDN group and sets it as LAC and
configures the name of local tunnel as lac.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#request-dialin
router_config-vpdn#local lac
Setting IP address of LNS communicable to
LAC group
Initiate-to
ip ipaddr priority priority_num
no Initiate-to ip ipaddr priority
priority_num
parameter:
ip, Ip address of remote LNS
priority_num£ºPriority
level, 0¡ª5, the smaller the value is, the higher the priority level will be.
Default:
none¡£
Command mode:
Configuration mode of VPDN group
Explanation:
The command is used for judging whether IP
address has been configured. If IP address has been configured, the system will
return to the configuration mode directly, If not so, the IP address will be
added to IP address group of LNS. One LAC can be configured with 5 IP addresses
of LNS so as to ensure that main LNS is able to communicate with backup LNS
when it fails to communicate normally. The command can be executed exclusively
on LAC.
Example:
The example below creates a VPDN group, sets the VPDN group as LAC and sets IP address of LNS communicable to it on the sequence of priority level from high to low, which is arranged as follows: 192.168.20.200£¬192.168.20.201£¬192.168.20.202£¬192.168.20.203£¬192.168.20.204.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#request-dialin
router_config-vpdn#initiate-to ip 192.168.20.200 priority 0
router_config-vpdn#initiate-to ip 192.168.20.201 priority 1
router_config-vpdn#initiate-to ip 192.168.20.202 priority 2
router_config-vpdn#initiate-to ip 192.168.20.203 priority 3
router_config-vpdn#initiate-to ip 192.168.20.204 priority 4
Setting protocol type of VPDN group
Protocol
protocol-type
no Protocol protocol-type
parameter:
protocol-type, it can only be 12tp currently.
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
Binding VPDN group and protocol
Example:
The example below creates a VPDN group and binds VPDN group and L2TP
protocol
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#protocol l2tp
Setting VPDN group as LAC
Request-dialin
no Request-dialin
parameter:
none
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
If the former role of the group is
LAC, the system will return to the configuration mode directly. If the original
function role of the VPDN group is LNS, the role will be cancelled and the
function role of VPDN will be set as LAC.
Example:
The example below creates a VPDN group and sets the VPDN group as
LAC.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#request-dialin
Setting source IP address of VPDN group.
Source-ip
ipaddr
no Source-ip ipaddr
parameter:
ipaddr : Source IP address of VPDN group
shall be the IP address of Ethernet card existing on the router.
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
When the VPDN group is used for
setting up L2TP connection, the designated IP address shall be employed rather
than the IP address distributed by IP module according to the routing.
Example:
The example below creates a VPDN
group, sets the VPDN group as LAC and configures the source IP address of VPDN
group.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#request-dialin
router_config-vpdn#source-ip 192.168.20.93
Setting the name of remote LAC tunnel responsive to LNS
Terminate-from
remote_lac_name
no Terminate-from remote_lac_name
parameter:
remote_lac_name, The channel name of
remote LAC, the maximum length is 254 characters.
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
After this command is configured,
the VPDN group can be used exclusively for making the response to LAC specified
by the parameter ¡°lac_name¡± and it cannot be used by other LAC names. If a VPDN
group is not configured with the command ¡°Terminate-from¡±, it will serve as the
default group and its information will be applied when no other VPDN groups can
be matched. The command can be executed exclusively on LNS.
Example:
The example below creates a VPDN group and sets the VPDN group as
LNS. The name of the responsive remote tunnel is lac.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#accept-dialin
router_config-vpdn#terninate-from lac
LNS workgroup relates to the virtual interface
virtual-template
virtual-temp-num
no virtual-template virtual-temp-num
parameter:
virtual-temp-num, From 0 to the maximum
value of integer
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
The interface number can be the
interface of the created virtual module. If the port is not created, the
interface should be created. The command can be executed exclusively on LNS.
Example:
The example below creates a VPDN group and sets the VPDN group as
LNS and relates it to the virtual interface 1.
router>enable
router#config
router_config#vpdn-group 1
router_config-vpdn#accep-dialin
router_config-vpdn#virtual-template 1
router_config#int virtual-template 1
router_config#ip addr 2.1.1.1 255.255.255.0
router_config#enca ppp
router_config#ppp authen chap
router_config#ppp chap hostname ht@D-Link.com.cn
Activating or closing down VPDN subsystem
Vpdn
enable
no Vpdn enable
parameter:
none
Default:
no Vpdn enable
Command mode:
Configuration mode
Explanation:
Under a default state, the function
of system VPDN is shut down. Only when the command ¡°VPDN enable¡± is executed,
the function of VPDN will be opened. The command ¡°NO¡± shuts down the
sub-function of VPDN.
Example:
The example below creates a VPDN group and sets the group as LNS and
relates it to the virtual interface 1.
router>enable
router#config
router_config#vpdn enable
Creating VPDN group
vpdn-group
name
no vpdn-group name
parameter:
name
Default:
none
Command mode:
Configuration mode of VPDN group
Explanation:
When
the name of the VPDN group does not exist, the VPDN group should be created and
the configuration mode of VPDN group shall be
accessed. If the VPDN group has already existed, the configuration
status of VPDN can be accessed directly. 300 VPDN groups can be created at the
most.
Example:
The example below
creates a VPDN group and sets the group as LAC and configures channel
authentication and password.
router>enable
router#config
router_config#vpdn-group 1