IP Router Configuration
Router Configuration Guide 149
avp-hiding
Syntax avp-hiding sensitive | always
no avp-hiding
Context config>router>l2tp>group
Description This command configures Attribute Value Pair (AVP) hiding. This capability can be used to avoid the
passing of sensitive data, such as user passwords, as cleartext in an AVP.
The no form of the command returns the value to never allow AVP hiding.
Parameters avp-hiding — Specifies the method to be used for the authentication of the tunnels in this L2TP
group.
Default no avp-hiding
Values sensitive — AVP hiding is used only for sensitive information
(such as username/password).
always — AVP hiding is always used.
challenge
Syntax challenge always
no challenge
Context config>router>l2tp>group
Description This command configures the use of challenge-response authentication.
The no form of the command reverts to the default never value.
Parameters always — Specifies that the challenge-response authentication is always used.
Default no challenge
Values always
df-bit-lac
Syntax df-bit-lac {always | never}
no df-bit-lac
Context config>router>l2tp
config>service>vprn>l2tp
Description By default, the LAC df-bit-lac is always set and sends all L2TP packets with the DF bit set to 1. The
DF bit is configurable to allow downstream routers to fragment the L2TP packets. The LAC itself will
not fragment L2TP packets. L2TP packets that have a larger MTU size than what the LAC egress ports
allows are dropped.
To Next Page
Loading...
