HP MSR Router Series User Manual

81
• For local AAA authentication, create a local user and configure a password for each remote user
on the LAC. The LAC then authenticates a remote user by matching the provided username and
password with those configured locally.
• For remote AAA authentication, configure the username and password of each user on the
RADIUS/HWTACACS server. The LAC then sends the remote user's username and password to the
server for authentication.
For more information about configuring AAA authentication, see Security Configuration Guide.
To enable AAA authentication on an LAC, you also need to configure PAP or CHAP authentication for
PPP users on the user access interfaces. For information about configuring PAP or CHAP, see
"Configuring PPP and MP."
Configuring an LAC to automatically establish an L2TP tunnel
To configure an LAC to automatically establish an L2TP tunnel, perform the following tasks:
• Create a virtual PPP interface and configure an IP address for the interface.
• In virtual PPP interface view, use the ppp pap or ppp chap command to configure the side to be
authenticated by PPP as follows:
{ Specify the PPP authentication method for the PPP user.
{ Configure the username and password of the PPP user.
The LNS then authenticates the PPP user. For more information, see "Configuring PPP and MP."
• Trigger the LAC to automatically establish an L2TP tunnel.
To configure an LAC to automatically establish an L2TP tunnel:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Create a virtual PPP interface
and enter its view.
interface virtual-ppp
interface-number
By default, no virtual PPP interface
exists.
3. Configure the IP address of the
virtual PPP interface.
• Assign an IP address to the
virtual PPP interface.
ip address address mask
• Enable IP address negotiation
on the virtual PPP interface.
ip address ppp-negotiate
By default, no IP address is
assigned.
4. Configure the peer to be
authenticated.
See "Configuring PPP and MP." N/A
5. Configure the LAC to
automatically establish an L2TP
tunnel with the LNS.
l2tp-auto-client l2tp-group
group-number
By default, an LAC does not
establish an L2TP tunnel.
An L2TP tunnel automatically
established in LAC-auto-initiated
mode exists until you remove the
tunnel by using the undo
l2tp-auto-client or undo
l2tp-group group-number
command.

HP MSR Router Series Specifications

General

Brand	HP
Model	MSR Router Series
Category	Network Router
Language	English