VPDN Configuration command directory

Vpdn sub-module is the one that deals with VPDN group in L2TP module; it is mainly used for creating and managing the information of VPDN group. LAC and LNS need to obtain the relevant information from VPDN group for setting up the channel and sessions.

Accept-dialin

Domain

Force-local-chap

L2tp hidden

L2tp tunnel authen

L2tp tunnel hello

L2tp tunnel receive-window

L2tp tunnel password

lcp-renegotiation

Local

Initiate-to ip

Protocol

Request-dialin

Source-ip

Terminate-from

virtual-template

Vpdn enable

Vpdn-group

¡¡

Accept-dialin

Setting VPDN group as LNS

   accept-dialin

no accept-dialin

parameter:

none

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

The command sets VPDN group as LNS

Example:

The example below creates a VPDN and sets it as LNS

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#accept-dialin

 

Force-local-chap

 

Domain

Setting the domain name of LAC

   domain domain-name

no domain domain-name

parameter:

domain-name, the maximum length is 255 characters

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

   The command can only be executed on LAC, the user is divided by the symbol @, after the symbol @ is the domain name.

Example:

The example below creates a VPDN group and sets it as LAC and also sets a domain name.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#request-dialin

router_config-vpdn#domain D-Link.com.cn

 

Force-local-chap

Setting LNS and re-authentication of CLIENT.

   Force-local-chap

no Force-local-chap

parameter:

none

Default:

no Force-local-chap

Command mode:

Configuration mode of VPDN group

Explanation:

   When PPP protocol interactive starts, LAC will act as proxy for LNS to authenticate Client. The command is used for setting a second authentication made by LNS to Client after the channel is created. The command can only be executed on LNS.  

Example:

The example below creates a VPDN group and sets it as LNS and sets the re-authentication.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#accept-dialin

router_config-vpdn#force-local-chap

 

L2tp hidden

Setting the conceal of sensitive attribute

   L2tp hidden

no L2tp hidden

parameter:

none

Default:

no L2tp hidden

Command mode:

Configuration mode of VPDN group

Explanation:

The command can  only takes effect when the tunnel password is configured in the router.

Example:

The example below creates a VPDN group and sets it as LAC, configures channel authentication and password and sets the attribute hide.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#request-dialin

router_config-vpdn#l2tp tunnel authen

router_config-vpdn#l2tp tunnel password 123456

router_config-vpdn#l2tp hidden

 

L2tp tunnel authen

Configuring the enable of tunnel authentication

   L2tp tunnel authen

no L2tp tunnel authen

parameter:

none

Default:

no L2tp tunnel authen

Command mode:

Configuration mode of VPDN group  

Explanation:

   When the tunnel is created, two parties can authenticate each other. If the channel authentication is configured, the password shall be set.

Example:

The example below creates a VPDN group on two routers separately, one is used as LAC, the other as LNS. They are all configured with channel authentication and the same password.

routerA>enable

routerA#config

routerA_config#vpdn-group 1

routerA_config-vpdn#request-dialin

routerA_config-vpdn#l2tp tunnel authen

routerA_config-vpdn#l2tp tunnel password 123456

 

routerB#config

routerB_config#vpdn-group 2

routerB_config-vpdn#accept-dialin

routerB_config-vpdn#l2tp tunnel authen

routerB_config-vpdn#l2tp tunnel password 123456

 

L2tp tunnel hello

Setting the time interval of sending HELLO packet

   L2tp tunnel hello hello-interval

no L2tp tunnel hello hello-interval

parameter:

hello-interval, numeric area ranges from 1 to the maximum value of integer

Default:

60

Command mode:

Configuration mode of VPDN group

Explanation:

   After the dialogue between LAC and LNS is created, HELLO packet shall be sent periodically to detect whether the link is normal.

Example:

The example below creates a VPDN group, the time interval of sending HELLO packet is 10 seconds.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#request-dialin

router_config-vpdn#l2tp tunnel hello 10

 

L2tp tunnel receive-window

Setting the size of sliding window for receiving  

   L2tp tunnel receive-window receive-window-size

no L2tp tunnel receive-window receive-window-size

parameter:

receive-window-size£¬the numeric area is from 4 to 100.

Default:

4

Command mode:

Configuration mode of VPDN group

Explanation:

   The command is used for designating the size of BUFFER received by the local and informing the opposite terminal the size at the same of L2TP tunnel negotiation simultaneously so as to enable the opposite terminal to set the size of sliding window for sending the corresponding packet according to the value.

Example:

The example below creates a VPDN group and sets the size of sliding window received by it as 5.  

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#l2tp tunnel receive-window 5

¡¡

L2tp tunnel password

Setting the sensitive attribute hide

   l2tp tunnel password password

no l2tp tunnel password password

parameter:

password, The maximum length of channel password is 254 characters in non encrpytion text.

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

   If channel authentication is configured, the password shall be configured.

Example:

The example below creates a VPDN group and sets it as LAC, configures channel authentication and password.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#request-dialin

router_config-vpdn#l2tp tunnel authen

router_config-vpdn#l2tp tunnel password 123456

 

lcp-renegotiation

Setting whether LCP re-negotiation should be made between LNS and CLIENT.

   lcp-renegotiation

no lcp-renegotiation

parameter:

none

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

   Under a general condition, LAC executes the proxy function in the phase of LCP and authentication of PPP. When LNS wishes to restart TCP negotiation of PPP with Client and the consequent process, it can be realized through configuring this command. The command can be executed exclusively on LNS.

Example:

The example below creates a VPDN group and sets it as LNS and restarts LCP negotiation.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#accept-dialin

router_config-vpdn#lcp-renegotiation

 

Local

Setting the local name of VPDN group

   Local  local_ame

no Local  local_ame

parameter:

local_name, the maximum length of channel password is 254 characters

Default:

D-Link

Command mode:

Configuration mode of VPDN group

Explanation:

   Each vpdn group shall have a name of a local tunnel so as to facilitate the remote terminal to find a match for VPDN group. 

Example:

The example below creates a VPDN group and sets it as LAC and configures the name of local tunnel as lac.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#request-dialin

router_config-vpdn#local lac

 

Initiate-to ip

Setting IP address of LNS communicable to LAC group 

   Initiate-to ip ipaddr priority priority_num

no Initiate-to ip ipaddr priority priority_num

parameter:

ip, Ip address of remote LNS

priority_num£ºPriority level, 0¡ª5, the smaller the value is, the higher the priority level will be.    

Default:

none¡£

Command mode:

Configuration mode of VPDN group

Explanation:

  The command is used for judging whether IP address has been configured. If IP address has been configured, the system will return to the configuration mode directly, If not so, the IP address will be added to IP address group of LNS. One LAC can be configured with 5 IP addresses of LNS so as to ensure that main LNS is able to communicate with backup LNS when it fails to communicate normally. The command can be executed exclusively on LAC.

Example:

The example below creates a VPDN group, sets the VPDN group as LAC and sets IP address of LNS communicable to it on the sequence of priority level from high to low, which is arranged as follows: 192.168.20.200£¬192.168.20.201£¬192.168.20.202£¬192.168.20.203£¬192.168.20.204.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#request-dialin

router_config-vpdn#initiate-to ip 192.168.20.200 priority 0

router_config-vpdn#initiate-to ip 192.168.20.201 priority 1

router_config-vpdn#initiate-to ip 192.168.20.202 priority 2

router_config-vpdn#initiate-to ip 192.168.20.203 priority 3

router_config-vpdn#initiate-to ip 192.168.20.204 priority 4

Protocol

Setting protocol type of VPDN group

   Protocol protocol-type

no Protocol protocol-type

parameter:

protocol-type, it can only be 12tp currently.

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

   Binding VPDN group and protocol

Example:

The example below creates a VPDN group and binds VPDN group and L2TP protocol

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#protocol l2tp

 

Request-dialin

Setting VPDN group as LAC

   Request-dialin

no Request-dialin

parameter:

none

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

   If the former role of the group is LAC, the system will return to the configuration mode directly. If the original function role of the VPDN group is LNS, the role will be cancelled and the function role of VPDN will be set as LAC.

Example:

The example below creates a VPDN group and sets the VPDN group as LAC.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#request-dialin

 

Source-ip

Setting source IP address of VPDN group.

   Source-ip ipaddr

no Source-ip ipaddr

parameter:

ipaddr : Source IP address of VPDN group shall be the IP address of Ethernet card existing on the router.  

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

   When the VPDN group is used for setting up L2TP connection, the designated IP address shall be employed rather than the IP address distributed by IP module according to the routing.

Example:

The example below creates a VPDN group, sets the VPDN group as LAC and configures the source IP address of VPDN group.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#request-dialin

router_config-vpdn#source-ip 192.168.20.93

 

Terminate-from

Setting the name of remote LAC tunnel responsive to LNS

   Terminate-from remote_lac_name

no Terminate-from remote_lac_name

parameter:

remote_lac_name, The channel name of remote LAC, the maximum length is 254 characters.

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

   After this command is configured, the VPDN group can be used exclusively for making the response to LAC specified by the parameter ¡°lac_name¡± and it cannot be used by other LAC names. If a VPDN group is not configured with the command ¡°Terminate-from¡±, it will serve as the default group and its information will be applied when no other VPDN groups can be matched. The command can be executed exclusively on LNS.

Example:

The example below creates a VPDN group and sets the VPDN group as LNS. The name of the responsive remote tunnel is lac.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#accept-dialin

router_config-vpdn#terninate-from lac

 

virtual-template

LNS workgroup relates to the virtual interface

   virtual-template virtual-temp-num

no virtual-template virtual-temp-num

parameter:

virtual-temp-num, From 0 to the maximum value of integer

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

   The interface number can be the interface of the created virtual module. If the port is not created, the interface should be created. The command can be executed exclusively on LNS.  

Example:

The example below creates a VPDN group and sets the VPDN group as LNS and relates it to the virtual interface 1.

router>enable

router#config

router_config#vpdn-group 1

router_config-vpdn#accep-dialin

router_config-vpdn#virtual-template 1

router_config#int virtual-template 1

router_config#ip addr 2.1.1.1 255.255.255.0

router_config#enca ppp

router_config#ppp authen chap

router_config#ppp chap hostname ht@D-Link.com.cn

 

Vpdn enable

Activating or closing down VPDN subsystem

   Vpdn enable

no Vpdn enable

parameter:

none

Default:

no Vpdn enable

Command mode:

Configuration mode

Explanation:

   Under a default state, the function of system VPDN is shut down. Only when the command ¡°VPDN enable¡± is executed, the function of VPDN will be opened. The command ¡°NO¡± shuts down the sub-function of VPDN.  

Example:

The example below creates a VPDN group and sets the group as LNS and relates it to the virtual interface 1.  

router>enable

router#config

router_config#vpdn enable

 

vpdn-group

Creating VPDN group

   vpdn-group name

no vpdn-group name

parameter:

name

Default:

none

Command mode:

Configuration mode of VPDN group

Explanation:

    When the name of the VPDN group does not exist, the VPDN group should be created and the configuration mode of VPDN group shall be accessed. If the VPDN group has already existed, the configuration status of VPDN can be accessed directly. 300 VPDN groups can be created at the most.  

Example:

The example below creates a VPDN group and sets the group as LAC and configures channel authentication and password.

router>enable

router#config

router_config#vpdn-group 1