Configuration Tasks for E-series Routers

The main configuration tasks for setting up L2TP/IPSec are:

1. Set up IP connectivity to L2TP clients; for example, PPPoE, DHCP, or static IP.
2. Set up digital certificates on the router, or configure preshared keys for IKE authentication.
   • To set up digital certificates, see Configuring Digital Certificates.
   • To set up preshared keys, see Configuring IPSec Parameters in Configuring IPSec.
3. Create IPSec policies. See Defining an IKE Policy in Configuring IPSec.
4. Configure RADIUS authentication and accounting. See JUNOSe Broadband Access Configuration Guide.
5. Configure L2TP destination profiles. See the next section, Enabling IPSec Support for L2TP.
6. Configure NAT-T on the virtual router. See Configuring NAT-T.
7. Configure single-shot L2TP/IPSec tunnels. See Configuring Single-Shot Tunnels.
8. Configure IPSec transport profiles. See Configuring IPSec Transport Profiles .

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.