ELTEX ESR-21 - Page 545

ESR series service routers.ESR-Series. User manual
545
•
•
Step Description Command Keys
4 Specify the IP address of the local
gateway or disable firewall for the
PPTP server
esr(config-l2tp-server)#
local-address { object-group
<OBJ-GROUP-NETWORK
-NAME> | ip-address
<ADDR> }
<OBJ-GROUP-NETWORK-NAME> –
name of the IP addresses profile that
includes local gateway IP address,
set by the string of up to 31
characters;
<ADDR> – range starting IP address,
defined as AAA.BBB.CCC.DDD where
each part takes values of [0..255].
5 Specify IP addresses list from which
dynamic IP addresses are leased to
remote users by L2TP.
esr(config-l2tp-server)#
remote-address
{ object-group <OBJ-GROUP-
NETWORK -NAME> |
address-range <FROM-
ADDR>-<TO-ADDR> }
<OBJ-GROUP-NETWORK-NAME> –
name of the IP addresses profile that
includes remote users IP addresses
list, set by the string of up to 31
characters;
<FROM-ADDR> – range starting IP
address, defined as
AAA.BBB.CCC.DDD where each part
takes values of [0..255];
<TO-ADDR> – range ending IP
address, defined as
AAA.BBB.CCC.DDD where each part
takes values of [0..255].
6 Select L2TP clients authentication
mode.
esr(config-l2tp-server)#
authentication mode
{ local | radius }
local – user authentication by
local base.
radius – user authentication
by RADIUS server base. The
router must be configured to
interact with a RADIUS-server,
see section AAA RADIUS
configuration algorithm
7 Allow necessary authentication
methods for remote users
esr(config-l2tp-server)#
authentication method
<METHOD>
<METHOD> – authentication method,
possible values: [chap, mschap,
mschap-v2, eap, pap].
By default only chap is allowed.
8 Include the L2TP server in a security
zone and configure interaction rules
between zones (see section Firewall
configuration).
esr(config-l2tp-server)#
security-zone <NAME>
<NAME> – security zone name, set
by the string of up to 31 characters.
9 Specify user name (when using local
authentication base).
esr(config-l2tp-server)
username < NAME >
<NAME> – user name, set by the
string of up to 12 characters.