You can configure multiple profiles. You can also configure multiple clients for each profile. To configure the profile, include the profile statement at the [edit access] hierarchy level:
- [edit access]
-
profile profile-name;
profile-name is the name assigned to the profile.
![]() |
Note: The group-profile statement overrides the user-group-profile statement, which is configured at the [edit access profile profile-name] hierarchy level. The profile statement overrides the attributes configured at the [edit access group-profile profile-name] hierarchy level. For information about the user-group-profile statement, see Applying a Configured PPP Group Profile to a Tunnel. When you configure a profile, you can only configure L2TP or PPP parameters. You cannot configure both. |
To configure the L2TP properties for a profile, include the following statements at the [edit access profile profile-name] hierarchy level:
- [edit access profile profile-name]
-
authentication-order [ authentication-methods ];
-
accounting-order radius
-
client client-name {
-
group-profile profile-name;
-
-
l2tp {
-
interface-id interface-id;
-
lcp-renegotiation;
-
local-chap;
-
maximum-sessions-per-tunnel number;
-
ppp-authentication (chap | pap);
-
shared-secret shared-secret;
- }
- }
-
user-group-profile profile-name;
To configure the PPP properties for a profile, include the following statements at the [edit access profile profile-name] hierarchy level:
- [edit access profile profile-name]
-
authentication-order [ authentication-methods ];
-
client client-name {
-
chap-secret chap-secret;
-
group-profile profile-name;
-
pap-password pap-password;
-
-
ppp {
-
cell-overhead;
-
encapsulation-overhead bytes;
-
framed-ip-address ip-address;
-
framed-pool framed-pool;
-
idle-timeout seconds;
-
interface-id interface-id;
-
keepalive seconds;
-
primary-dns primary-dns;
-
primary-wins primary-wins;
-
secondary-dns secondary-dns;
-
secondary-wins secondary-wins;
- }
- }
![]() |
Note: When you configure PPP properties for a profile, you typically configure the chap-secret statement or pap-password statement. |
To configure the profile, do the following: