viii
Configuring basic L2TP capabilities ··············································································································· 259
Configuring an LAC ········································································································································ 260
Configuring an LAC to initiate tunneling requests for specified users ···················································· 260
Configuring an LAC to transfer AVP data in hidden mode ····································································· 260
Configuring AAA authentication for VPN users on LAC side ································································· 261
Configuring an LAC to establish an L2TP tunnel ··················································································· 262
Configuring an LNS ········································································································································ 263
Creating a VT interface ·························································································································· 263
Configuring the local address and the address pool for allocation························································· 264
Configuring an LNS to grant certain L2TP tunneling requests ······························································· 264
Configuring user authentication on an LNS ··························································································· 265
Configuring AAA authentication for VPN users on an LNS ···································································· 266
Enabling L2TP for VPNs ························································································································ 266
Configuring the LNS to support IMSI or SN in PPP LCP negotiation ····················································· 267
Configuring L2TP connection parameters ····································································································· 268
Configuring L2TP tunnel authentication ································································································· 268
Setting the hello interval ························································································································· 268
Enabling tunnel flow control ··················································································································· 269
Disconnecting tunnels by force ·············································································································· 269
Configuring L2TP-based EAD ························································································································ 269
Configuration prerequisites ···················································································································· 269
Configuration procedure ························································································································· 269
Displaying and maintaining L2TP ·················································································································· 270
L2TP configuration examples ························································································································ 270
Configuration example for NAS-initiated VPN ························································································ 270
Configuration example for client-initiated VPN ······················································································· 272
Configuration example for LAC-auto-initiated VPN ················································································ 274
Configuration example for L2TP multi-domain application ····································································· 276
Complicated network application ··········································································································· 279
Troubleshooting L2TP ···································································································································· 280
Configuring L2TP-based EAD ····································································· 281
Overview ························································································································································ 281
Configuration procedure ································································································································ 281
Displaying and maintaining L2TP-based EAD ······························································································· 282
L2TP-based EAD configuration example ······································································································· 282
Configuring bridging ···················································································· 285
Overview ························································································································································ 285
Bridge functionality ········································································································································· 285
Obtaining the bridge table ······················································································································ 285
Forwarding and filtering ·························································································································· 287
Bridging configuration task list ······················································································································· 289
Configuring basic bridging functionalities ······································································································· 289
Configuration restrictions and guidelines ······························································································· 289
Configuration procedure ························································································································· 290
Configuring bridge table entries ····················································································································· 290
Configuring bridge routing ······························································································································ 291
Enabling VLAN transparency ························································································································· 292
Configuration restrictions and guidelines ······························································································· 292
Configuration procedure ························································································································· 292
Displaying and maintaining bridging ·············································································································· 293
Transparent bridging configuration examples ································································································ 294
Configuration example for transparent bridging over ATM ···································································· 294
Configuration example for transparent bridging over PPP ····································································· 295
Configuration example for transparent bridging over MP ······································································· 295
Configuration example for transparent bridging over FR ······································································· 297
Configuration example for transparent bridging over X.25 ····································································· 297
Configuration example for transparent bridging over HDLC ·································································· 298
Configuration example for bridging with FR sub-interface support ························································ 299
Bridge routing configuration example ····································································································· 301
Configuration example for bridging over dialer interface ········································································ 301