interface FastEthernet0/0
no ip address
xconnect 10.10.7.11 pw-class dynamic
It is possible to enable the authentication of the control messages using:
set l2tpv3 pseth0 secret <mysecret>
or to provide a second address to be used as backup in case the first does not respond:
set l2tpv3 pseth0 tunnel-backup-destination <ipaddress>
Using the command:
set l2tpv3 pseth0 responder-only
the router enters in a passive state in which it doesn‟t send to the peer any request that establish a
tunnel, and answers only to the request coming from the peer.
Vice versa with:
set l2tpv3 pseth0 initiator-only
the router ignores the request of the peer establishment and considers only the answers of the
request generated by the peer itself.
TUNNEL SETTINGS IN VLAN MODE
It is possible to set the tunnel L2TPv3 in VLAN mode and make possible that the packets on the
tunnel have the TAG 802.1q. To do so use the commands:
set l2tpv3 pseth0 vlan-id N
thanks to this, in addition to the native pseth0 interface the pseth0.N is also created. This one
can be inserted in a bridge group, as shown in the example below, where two routers let pass TAG
30 packets on their tunnel.
Router A:
set l2tpv3 pseth0 tunnel-source 10.10.7.11
set l2tpv3 pseth0 tunnel-destination 7.10.100.100
set l2tpv3 pseth0 tunnel-address 0.0.0./0
set l2tpv3 pseth0 description Tunnel-L2TPv3-Dynamic-VLAN
set l2tpv3 pseth0 vlan-id 30
set l2tpv3 pseth0 pseudowire-id 300
set l2tpv3 pseth0 dynamic-mode
set l2tpv3 pseth0 initiator-only
set l2tpv3 pseth0 on
set vlan add vid 30 interface eth1
set bridge addbr br0
set bridge addif br0 eth1.30
set bridge addif br0 pseth0.30
set bridge br0 on
To Next Page
Loading...
Need help?
General
