Virtual Private Routed Network Services
7750 SR OS Services Guide Page 1203
Context config>service>vprn>l2tp
Description This command configures the L2TP session limit for the router. L2TP is connection-oriented. The
L2TP Network Server (LNS) and LAC maintain state for each call that is initiated or answered by an
LAC. An L2TP session is created between the LAC and LNS when an end-to-end PPP connection is
established between a remote system and the LNS. Datagrams related to the PPP connection are sent
over the tunnel between the LAC and LNS. There is a one to one relationship between established
L2TP sessions and their associated calls.
Parameters session-limit — Specifies the number of sessions allowed.
Default no session-limit
Values 1 — 131071
avp-hiding
Syntax avp-hiding sensitive | always
no avp-hiding
Context config>service>vprn>l2tp>group
Description This command configures Attribute Value Pair (AVP) hiding. This capability can be used to avoid the
passing of sensitive data, such as user passwords, as cleartext in an AVP.
The no form of the command returns the value to never allow AVP hiding.
Parameters avp-hiding — Specifies the method to be used for the authentication of the tunnels in this L2TP
group.
Default no avp-hiding
Values sensitive — AVP hiding is used only for sensitive information (such as username/
password).
always — AVP hiding is always used.
challenge
Syntax challenge always
no challenge
Context config>service>vprn>l2tp>group
Description This command configures the use of challenge-response authentication.
The no form of the command reverts to the default never value.
Parameters always — Specifies when challenge-response is to be used for the authentication of the tunnels in this
L2TP group.
Default no challenge
Values always