ESR series service routers.ESR-Series. User manual
•
•
•
•
Step Description Command Keys
8 Specify a shared secret authentication 
key that should be the same for both 
parties of the tunnel.
esr(config-l2tp)# ipsec 
authentication pre-shared-key 
{ ascii-text { <TEXT> | encrypted 
<ENCRYPTED-TEXT> } | 
hexadecimal {<HEX> | encrypted 
<ENCRYPTED-HEX> } }
<TEXT> – string [1..64] ASCII 
characters;
<HEX> – number, [1..32] bytes 
size, set by the string of [2..128] 
characters in hexadecimal format 
(0xYYYY ...) or (YYYY ...);
<ENCRYPTED-TEXT> – encrypted 
password, [1..32] bytes size, set by 
the string of [2..128] characters.
<ENCRYPTED-TEXT> – encrypted 
number, [2..64] bytes size, set by 
the string of [2..256] characters.
9 Restrict the authentication and 
encryption methods used for the IKE 
protocol (optional).
esr(config-l2tp)# ipsec ike 
proposal <NAME>
<NAME> – name of the previously 
created IKE profile, set by the 
string of up to 31 characters.
10 Restrict the authentication and 
encryption methods used for the 
IPsec protocol (optional).
esr(config-l2tp)# ipsec proposal 
<NAME>
<NAME> – name of the previously 
created IPsec profile, set by the 
string of up to 31 characters.
11 Specify UDP port number on which 
the connection to the L2TP server is 
established (optional).
esr(config-l2tp)# port <PORT> <PORT> – UDP port number, takes 
values of [1024..65535].
Default value: 1701.
12 Enable the tunnel. esr(config-l2tp)# enable
10 Specify MTU size 
(MaximumTransmissionUnit) for the 
tunnel (optional).
esr(config-l2tp)# mtu <MTU> <MTU> – MTU value, takes values 
in the range of:
for ESR-10/12V(F)/14VF – 
[552..9600];
for ESR-20/21 – 
[552..9500];
for 
ESR-100/200/1000/1200/1
500/1511/1700 – 
[552..10000]
for ESR-3100– [552..9190].
Default value: 1500.
11 Ignore the default route via the given 
L2TP tunnel (optional).
esr(config-l2tp)# ignore-default-
route