client
Syntax
client client-name {
chap-secret chap-secret;
group-profile profile-name;
ike {
allowed-proxy-pair {
remote remote-proxy-address local local-proxy-address;
}
pre-shared-key (ascii-text character-string | hexadecimal hexadecimal-digits);
ike-policy policy-name;
interface-id string-value;
}
l2tp {
aaa-access-profile profile-name;
interface-id interface-id;
lcp-renegotiation;
local-chap;
maximum-sessions number;
maximum-sessions-per-tunnel number;
multilink {
drop-timeout milliseconds;
fragment-threshold bytes;
}
override-result-code session-out-of-resource;
ppp-authentication (chap | pap);
ppp-profile profile-name;
sessions-limit-group;
service-profile profile-name(parameter)&profile-name;
shared-secret shared-secret;
}
pap-password pap-password;
ppp {
cell-overhead;
encapsulation-overhead bytes;
framed-ip-address ip-address;
framed-pool framed-pool;
idle-timeout seconds;
interface-id interface-id;
keepalive seconds;
primary-dns primary-dns;
primary-wins primary-wins;
secondary-dns secondary-dns;
secondary-wins secondary-wins;
}
user-group-profile profile-name;
}
Hierarchy Level
[edit access profile profile-name]
Release Information
Statement introduced before Junos OS Release 7.4.
Description
Configure the peer identity.
Subordinate statement support depends on the platform. See individual statement topics for more detailed support information.
Options
client-name—A peer identity. For L2TP clients, you can use a special name to
configure a default client. This client enables the LNS to accept
any LAC to establish the session. On M Series routers, use * for the default client configuration. On MX Series routers, use default.
chap-secret—For interfaces
with PPP encapsulation on which the PPP Challenge Handshake Authentication
Protocol (CHAP) is configured, configure the shared secret (the CHAP
secret key associated with a peer), as defined in RFC 1994. This statement
is not supported for L2TP LNS on MX Series routers.
Values:
chap-secret—The secret key associated with a peer.
group-profile—Associate
a group profile with a client. This statement is not supported for
L2TP LNS on MX Series routers.
Values:
profile-name—Name assigned to the group profile.
pap-password—Configure
the Password Authentication Protocol (PAP) password. This statement
is not supported for L2TP LNS on MX Series routers.
Values:
password—PAP password.
user-group-profile—Apply a configured PPP group profile to PPP users. If user-group-profile is modified or deleted, the existing LNS subscribers, which were
using this Layer 2 Tunneling Protocol client configuration, go down.
Values:
profile-name—Name of a PPP group profile configured at the [edit access group-profile profile-name] hierarchy level.
The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.