[edit access] Hierarchy Level

access {

    address-pool name {

        address address-or-prefix value;

        address-range low <lower-limit> high <upper-limit >;

    }

    group-profile group-profile-name {

        l2tp {

            interface-id interface-identifier;

            lcp-renegotiation;

            local-chap;

            maximum-sessions-per-tunnel number;

        }

        ppp {

            framed-pool pool-identifier; 

            idle-timeout seconds;

            interface-id interface-identifier;

            keepalive seconds; 

            primary-dns primary-dns;

            primary-wins primary-win-server;

            secondary-dns secondary-dns; 

            secondary-wins secondary-wins; 

        }

    }

    profile profile-name {

        authentication-order [ authentication-methods ]; 

        client client-name {

            chap-secret chap-secret;

            group-profile name; 

                l2tp {

                    interface-id interface-identifier;

                    lcp-renegotiation;

                    local-chap;

                    maximum-sessions-per-tunnel number;

                    multilink {

                        drop-timeout time;

                        fragmentation-threshold bytes;    

                    }

                    ppp-authentication (chap | pap);

                    shared-secret shared-secret;

                }

                pap-password pap-password;

                ppp {

                    framed-ip-address ip-address;

                    framed-pool framed-pool;

                    idle-timeout seconds;

                    interface-id interface-identifier;

                    keepalive seconds; 

                    primary-dns primary-dns;

                    primary-wins primary-win-server;

                    secondary-dns secondary-dns; 

                    secondary-wins secondary-wins; 

                }

            }

        }

        radius-server server-address {

            accounting-port number;

            port number;

            retry number; 

            routing-instance routing-instance-name;

            secret password;

            timeout seconds; 

        }

    }

    radius-disconnect-port port-number {

    radius-disconnect {

        client-address {

            secret password;

        }

    }

    radius-server server-address {

        accounting-port number;

        port number;

        retry number; 

        routing-instance routing-instance-name;

        secret password;

        timeout seconds; 

    }

    traceoptions {

        file filename {

            files number;

            size maximum-file-size;

        }

        flag all;

        flag authentication;

        flag chap;

        flag configuration;

        flag kernel;

        flag radius;

        flag world-readable;

    }

} # End of [edit access] hierarchy level