Configuring Access

To configure access, include the following statements at the [edit access] hierarchy level:

[edit access]

address-pool pool-name {

    address address-or-prefix;

    address-range low <lower-limit> high <upper-limit >;

group-profile profile-name {

    l2tp {

        interface-id interface-id;

        lcp-renegotiation;

        local-chap;

        maximum-sessions-per-tunnel number;

        multilink {

            drop-timeout milliseconds;

            fragmentation-threshold bytes;

    ppp {

        framed-pool pool-id;

        idle-timeout seconds;

        interface-id interface-id;

        keepalive seconds;

        primary-dns primary-dns;

        primary-wins primary-win-server;

        secondary-dns secondary-dns;

        secondary-wins secondary-wins;

profile profile-name {

    authentication-order [ authentication-methods ];

    client client-name {

        chap-secret chap-secret;

        group-profile profile-name;

        l2tp {

            interface-id interface-id;

            lcp-renegotiation;

            local-chap;

            maximum-sessions-per-tunnel number;

            multilink {

                drop-timeout milliseconds;

                fragmentation-threshold bytes;

            ppp-authentication (chap | pap);

            shared-secret shared-secret;

        pap-password pap-password;

        ppp {

            framed-ip-address ip-address;

            framed-pool framed-pool;

            idle-timeout seconds;

            interface-id interface-id;

            keepalive seconds;

            primary-dns primary-dns;

            primary-wins primary-win-server;

            secondary-dns secondary-dns;

            secondary-wins secondary-wins;

        user-group-profile profile-name;

    }

}

radius-disconnect {

    client-address {

        secret password;

radius-disconnect-port port-number;

radius-server server-address {

    accounting-port port-number;

    port port-number;

    retry attempts;

    secret password;

    source-address source-address;

    timeout seconds;

}

traceoptions {

    flag all;

    flag authentication;

    flag chap;

    flag configuration;

    flag kernel;

    flag radius;

}

This chapter discusses the following topics: