Neilrey.Espino at FundSERV
Jan 19, 2006, 5:35 AM
Post #5 of 7
(7389 views)
Permalink
|
|
RE: Sample LNS and Client Router configuration
[In reply to]
|
|
I will continue to read on,,, Many Thanks for this Kris
________________________________
Neilrey
-----Original Message-----
From: Kristofer Sigurdsson [mailto:kristo [at] ipf]
Sent: Thursday, January 19, 2006 4:39 AM
To: Neilrey Espino
Cc: cisco-bba [at] puck
Subject: Re: [cisco-bba] Sample LNS and Client Router configuration
Hi,
On the LNS, you need to create a VPDN group to terminate
the connection:
vpdn-group Telco-DSL-LNS
accept-dialin
protocol l2tp
virtual-template 1
terminate-from hostname <Telco-LAC-hostname>
local name Telco-DSL-LNS-hostname
lcp renegotiation always
l2tp tunnel password <tunnel password>
!
As you can see, the VPDN group references a virtual-template, which is a
template for the virtual-access interfaces that will be your customer's
access interfaces. You need to create this virtual template:
interface Virtual-Template1
description Telco DSL
mtu 1492
ip unnumbered Loopback0
no peer default ip address
ppp authentication pap chap ms-chap Telco-DSL-AAA
ppp authorization Telco-DSL-AAA
ppp accounting Telco-DSL-AAA
end
Here, you reference AAA groups, Telco-DSL-AAA, for authentication,
authorization and accounting. This configuration leaves it to the AAA
server (RADIUS/TACACS+) to decide the client's IP address, if you don't
want that, you can remove the "no peer default ip address" and put in a
reference to a local IP pool. Also, this configuration uses the
loopback0's IP address as an IP for for the virtual access interfaces
facing the customers.
You need to create the AAA groups:
aaa authentication ppp Telco-DSL-AAA group Telco-RADIUS
aaa authorization network Telco-DSL-AAA group Telco-RADIUS
aaa accounting network Telco-DSL-AAA start-stop group Telco-RADIUS
The AAA groups all reference the same RADIUS group, Telco-RADIUS:
aaa group server radius Telco-RADIUS
server-private <radius IP 1> auth-port 1812 acct-port 1813 key <key>
server-private <radius IP 2> auth-port 1812 acct-port 1813 key <key>
ip radius source-interface Loopback0
!
That's about it for the LNS. Regarding the client, these might help you
out:
http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_
chapter09186a00804fd93f.html
On Wed, 2006-01-18 at 18:04 -0500, Neilrey Espino wrote:
>
>
> Hi Guys,
>
> We have just closed a deal with our telco to use a DSL
> infrastructure and replace our remote offices which uses the
> ISDN.
>
> As a starter, We highly appreaciate if someone could send us a
> sample config for the LNS router and a cisco client router.
>
> We just wanted to get some ideas on how the configuration
> would look like.
>
> Many thanks in advance.
> ________________________________
> Neilrey
>
>
> _______________________________________________
> cisco-bba mailing list
> cisco-bba [at] puck
> https://puck.nether.net/mailman/listinfo/cisco-bba
_______________________________________________
cisco-bba mailing list
cisco-bba [at] puck
https://puck.nether.net/mailman/listinfo/cisco-bba
|
