263
Step Command Remarks
5. Configure the username and
password for PAP
authentication or CHAP
authentication.
• Method 1:
Configure the username
and password for PAP
authentication:
ppp pap local-user
username password
{ cipher | simple }
password
• Method 2:
Configure the username
and password for CHAP
authentication:
a. ppp chap user
username
b. ppp chap password
{ cipher | simple }
password
Use one method according to the
authentication method configured
on the LAC for virtual PPP users.
By default:
• No PAP username and
password are configured for
PPP users.
• No CHAP username and
password are configured for
PPP users.
6. Configure AAA authentication
for VPN users on the LAC
side.
See "
Configuring AAA
authentication f
or VPN users on
LAC side
."
N/A
7. Trigger the LAC to establish an
L2TP tunnel with the LNS.
l2tp-auto-client enable
By default, an LAC does not
establish an L2TP tunnel.
For more information about commands interface virtual-template, ppp authentication-mode,
ppp pap, and ppp chap, see HPE FlexNetwork MSR Router Series Comware 5 Layer 2—WAN
Command Reference.
Configuring an LNS
An LNS responds to the tunneling requests from an LAC, authenticates users, and assigns IP
addresses to users.
Before configuring an LNS, enable L2TP and create an L2TP group.
Creating a VT interface
A VT interface is intended to provide parameters for virtual access interfaces to be dynamically
created by the device, such as logical MP interfaces and logical L2TP interfaces.
After an L2TP session is established, a virtual access interface is needed for a data exchange with
the peer. An LNS can use different VA interfaces to exchange data with different LACs. You need to
specify the VT interface for receiving calls. The system will dynamically create a VA interface based
on the configuration parameters in the specified VT interface.
To create a VT interface:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a VT interface and
enter its view.
interface virtual-template
virtual-template-number
By default, no VT interface exists.