Navigation
Related Documentation
- M, MX, T Series
- Configuring the PPP Authentication Protocol
- Example: Configuring PPP CHAP
- Example: Configuring CHAP Authentication with RADIUS
- Configuring L2TP for Enabling PPP Tunneling Within a Network
- Defining the Minimum L2TP Configuration
- Configuring the Address Pool for L2TP Network Server IP Address Allocation
- Configuring the Group Profile for Defining L2TP Attributes
Access Configuration Statements
To configure access, include the following statements at the [edit access] hierarchy level:
[edit access]
address-assignment {neighbor-discovery-router-advertisement;pool pool-name {family inet {dhcp-attributes {[protocol-specific-attributes];}host hostname {hardware-address mac-address;ip-address ip-address;}network address-or-prefix </subnet-mask>;range name {high upper-limit;low lower-limit;prefix-length prefix-length;}}}}
address-pool pool-name {address address-or-prefix;address-range low <lower-limit> high <upper-limit>;}
domain {delimiter;map;parse-direction;};
group-profile profile-name {l2tp {interface-id interface-id;lcp-renegotiation;local-chap;maximum-sessions-per-tunnel number;multilink {drop-timeout milliseconds;fragment-threshold bytes;}}ppp {cell-overhead;encapsulation-overhead bytes;framed-pool pool-id;idle-timeout seconds;interface-id interface-id;keepalive seconds;primary-dns primary-dns;primary-wins primary-wins;secondary-dns secondary-dns;secondary-wins secondary-wins;}}
profile profile-name {accounting {accounting-stop-on-access-deny;accounting-stop-on-failure;coa-immediate-update;duplication;immediate-update;order [ accounting-method ];statistics (time | volume-time);update-interval minutes;}accounting-order radius;authentication-order [ authentication-methods ];authorization-order jsrc;client client-name {chap-secret chap-secret;client-group [ group-names ];firewall-user {password password;}group-profile profile-name;ike {allowed-proxy-pair { local local-proxy-address remote remote-proxy-address;}ike-policy policy-name;initiate-dead-peer-detection;interface-id interface-id;ipsec-policy policy-name;pre-shared-key (ascii-text character-key-string | hexadecimal hexadecimal-digits-key-string);}l2tp {interface-id interface-identifier;lcp-renegotiation;local-chap;maximum-sessions-per-tunnel number;multilink {drop-timeout milliseconds;fragment-threshold bytes;}ppp-authentication (chap | pap);ppp-profile profile-name;shared-secret shared-secret;}pap-password pap-password;ppp {cell-overhead;encapsulation-overhead bytes;framed-ip-address ip-address;framed-pool framed-pool;idle-timeout seconds;interface-id interface-id;keepalive seconds;primary-dns primary-dns;primary-wins primary-wins;secondary-dns secondary-dns;secondary-wins secondary-wins;}provisioning-order jsrc;user-group-profile profile-name;}radius {accounting-server [ ip-address ];attributes {excludeaccounting-authentic [ accounting-on | accounting-off ];accounting-delay-time [ accounting-on | accounting-off ];accounting-session-id [ access-request | accounting-on | accounting-off | accounting-stop ];accounting-terminate-cause [ accounting-off ];called-station-id [ access-request | accounting-start | accounting-stop ];calling-station-id [ access-request | accounting-start | accounting-stop ];class [ accounting-start | accounting-stop ];dhcp-options [ access-request | accounting-start | accounting-stop ];dhcp-gi-address [ access-request | accounting-start | accounting-stop ];dhcp-mac-address [ access-request | accounting-start | accounting-stop ];output-filter [ accounting-start | accounting-stop ];event-timestamp [ accounting-on | accounting-off | accounting-start | accounting-stop ];framed-ip-address [ accounting-start | accounting-stop ];framed-ip-netmask [ accounting-start | accounting-stop ];input-filter [ accounting-start | accounting-stop ];input-gigapackets [ accounting-stop ];input-gigawords [ accounting-stop ];interface-description [ access-request | accounting-start | accounting-stop ];nas-identifier [ access-request | accounting-on | accounting-off | accounting-start | accounting-stop ];nas-port [ access-request | accounting-start | accounting-stop ];nas-port-id [ access-request | accounting-start | accounting-stop ];nas-port-type [ access-request | accounting-start | accounting-stop ];output-gigapackets [ accounting-stop ];output-gigawords [ accounting-stop ];}ignore {framed-ip-netmask;input-filter;logical-system-routing-instance;output-filter;}}authentication-server [ ip-address ];options {accounting-session-id-format (decimal | description);client-accounting-algorithm (direct | round-robin);client-authentication-algorithm (direct | round-robin);ethernet-port-type-virtual;interface-description-format [sub-interface | adapter];nas-identifier identifier-value;nas-port-extended-format {adapter-width width;port-width width;slot-width width;stacked-vlan-width width;vlan-width width;}revert-interval interval;vlan-nas-port-stacked-format;}}radius-options {revert-interval interval;}radius-disconnect {client-address {secret password;}}radius-disconnect-port port-number;radius-options {revert-interval interval;}radius-server server-address {accounting-port port-number;port port-number;retry attempts;routing-instance routing-instance-name;secret password;source-address address;timeout seconds;}session-options {client-group [ group-names ];client-idle-timeout minutes;client-session-timeout minutes;}
Related Documentation
- M, MX, T Series
- Configuring the PPP Authentication Protocol
- Example: Configuring PPP CHAP
- Example: Configuring CHAP Authentication with RADIUS
- Configuring L2TP for Enabling PPP Tunneling Within a Network
- Defining the Minimum L2TP Configuration
- Configuring the Address Pool for L2TP Network Server IP Address Allocation
- Configuring the Group Profile for Defining L2TP Attributes
Published: 2013-02-22
Related Documentation
- M, MX, T Series
- Configuring the PPP Authentication Protocol
- Example: Configuring PPP CHAP
- Example: Configuring CHAP Authentication with RADIUS
- Configuring L2TP for Enabling PPP Tunneling Within a Network
- Defining the Minimum L2TP Configuration
- Configuring the Address Pool for L2TP Network Server IP Address Allocation
- Configuring the Group Profile for Defining L2TP Attributes
