Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring an L2TP Destination Profile to Enable IPsec Support for L2TP Tunnels

    You can configure an L2TP destination profile to enable IPsec support for L2TP tunnels.

    To configure an L2TP destination profile:

    1. Create a destination profile that defines the location of the LAC, and access L2TP Destination Profile Configuration mode. For more information about the L2TP destination profile, see Creating an L2TP Destination Profile.
      host1(config)#l2tp destination profile boston4 ip address 0.0.0.0host1(config-l2tp-dest-profile)#
    2. Define the L2TP host profile and enter L2TP Destination Profile Host Configuration mode.
      host1(config-l2tp-dest-profile)#remote host default host1(config-l2tp-dest-profile-host)#
    3. Specify that, for L2TP tunnels associated with this destination profile, the router accept only tunnels protected by IPsec. For more information about enabling IPsec transport mode, see Enabling IPsec Transport Mode.
      host1(config-l2tp-dest-profile-host)#enable ipsec-transport
    4. (Optional) Assign a profile name for a remote host.
      host1(config-l2tp-dest-profile-host)#profile georgeProfile1
    5. Specify the local IP address to be used in any packets sent to the LAC.
      host1(config-l2tp-dest-profile-host)#local ip address 10.0.0.1

    For information about other L2TP destination profile commands, see LNS Configuration Prerequisites in the JunosE Broadband Access Configuration Guide.

    Published: 2014-08-12