Configure Access

To configure access, include statements at the [edit access] hierarchy level:

[edit access]

address-pool name {

    address address-or-prefix value;

    address-range low <lower-limit> high <upper-limit >;

group-profile name;

    l2tp {

        interface-id interface-id;

        lcp-renegotiation;

        local-chap;

        maximum-sessions-per-tunnel number;

    ppp {

        framed-pool pool-id;

          idle-timeout seconds;

          interface-id interface-id;

          keepalive seconds;

          primary-dns primary-dns;

          primary-wins primary-win-server;

          secondary-dns secondary-dns;

          secondary-wins secondary-wins;

profile name {

    authentication-order [ authentication-methods ];

    client name {

        chap-secret chap-secret;

         group-profile name;

        l2tp {

            interface-id interface-id;

            lcp-renegotiation;

            local-chap;

            maximum-sessions-per-tunnel number;

              ppp-authentication (chap | pap);

              shared-secret shared-secret;

         pap-password pap-password;

        ppp {

            framed-ip-address ip-address;

            framed-pool framed-pool;

            idle-timeout seconds;

            interface-id interface-id;

              keepalive seconds;

              primary-dns primary-dns;

              primary-wins primary-win-server;

              secondary-dns secondary-dns;

              secondary-wins secondary-wins;

        user-group-profile name;

    }

}

    radius-disconnect-port port-number {

    radius-disconnect {

         client-address {

            secret password;

radius-server server-address {

    accounting-port number;

    port number;

    retry number;

    secret password;

    timeout seconds;

}

traceoptions {

    flag all;

    flag authentication;

    flag chap;

    flag configuration;

    flag radius;

}

This chapter discusses the following topics: