Patton electronic 29XX - Manual (Page 293)

L2TP Configuration 293
Access Server Administrators’ Reference Guide 24 • Layer 2 Tunneling Protocol (L2TP)
command is used then the value used (cisco> terminate from patton_lac) would need to match the host-
name provided by the RAS device.
If this variable is not configured in the RADIUS server, then the RAS box will use the "Box Name" as the
hostname. This is configured on the RAS device under "System->Modify-> Box Name"
RadTunnelServerID, RADIUS Attribute: 91
example>>Tunnel-Server-Auth-ID = "cisco_lns"
The LNS will supply a hostname to the LAC during tunnel establishment.
• If this variable is defined in the RADIUS server then the RAS box will verify the name supplied by the LNS
against this value.
• If this variable is not in the configuration on the RADIUS server then the RAS will accept any name sup-
plied by the LNS.
Configuration Example
The following information defines a Cisco configuration which was used during the testing of this feature.
Cisco Configuration
The following example shows the steps used to configure out local cisco for use as a L2TP LNS. Notes are
defined in brackets such as [note].
Cisco Config (LNS)
Router(config)#vpdn enable
Router(config)#vpdn-group 1
Router(config-vpdn)#
Router(config-vpdn)#accept-dialin
Router(config-vpdn-acc-in)#
Router(config-vpdn-acc-in)#protocol l2tp
Router(config-vpdn-acc-in)#virtual-template 99
Router(config-vpdn-acc-in)#exit
Router(config-vpdn)#terminate-from hostname patton_ras
[The value used here will need to match the Tunnel-Client-Auth-ID defined in the RADIUS server, or the RAS's "Box
Name"]
Router(config-vpdn)#
Router(config-vpdn)#local name cisco_lns
[This is the name that the cisco LNS will supply to the LAC as its' hostname. If you would like the RAS to
validate this name then the same value should be used in the RADIUS Tunnel-Server-Auth-ID]
Router(config-vpdn)#exit
Router(config)#interface Virtual-Template 99
Router(config-if)#
Router(config-if)#ip unnumbered FastEthernet 0/0
Router(config-if)#no ip directed-broadcast
Router(config-if)#peer default ip address pool default
[You must also define the default pool with the IP Address range that you would like to supply to the dialin
users]