Navigation
Example: Configuring L2TP
The following example shows how to configure L2TP:
[edit]
access {address-pool customer_a {address 1.1.1.1/32;}address-pool customer_b {address-range low 2.2.2.2 high 2.2.3.2;}group-profile westcoast_users {ppp {framed-pool customer_a;idle-timeout 15;primary-dns 192.120.65.1;secondary-dns 192.120.65.2;primary-wins 192.120.65.3;secondary-wins 192.120.65.4;interface-id west;}}group-profile eastcoast_users {ppp {framed-pool customer_b;idle-timeout 20;primary-dns 192.120.65.5;secondary-dns 192.120.65.6;primary-wins 192.120.65.7;secondary-wins 192.120.65.8;interface-id east;}}group-profile westcoast_tunnel {l2tp {maximum-sessions-per-tunnel 100;}}group-profile east_tunnel {l2tp {maximum-sessions-per-tunnel 125;}}profile westcoast_bldg_1 {client white {chap-secret "$9$3s2690IeK8X7VKM7VwgaJn/Ctu1hclv87Ct87";# SECRET-DATAppp {idle-timeout 22;primary-dns 192.120.65.10;framed-ip-address 12.12.12.12/32;}group-profile westcoast_users;}client blue {chap-secret "$9$eq1KWxbwgZUHNdjqmTF3uO1Rhr-dsoJDNd";# SECRET-DATAgroup-profile sunnyvale_users;}authentication-order password;}profile west-coast_bldg_2 {client red {pap-password "$9$3s2690IeK8X7VKM8888Ctu1hclv87Ct87";# SECRET-DATAppp {idle-timeout 22;primary-dns 192.120.65.11;framed-ip-address 12.12.12.12/32;}group-profile westcoast_users;}}profile westcoast_bldg_1_tunnel {client test {l2tp {shared-secret "$9$r3HKvLg4ZUDkX7JGjif5p0BIRS8LN";# SECRET-DATAmaximum-sessions-per-tunnel 75;ppp-authentication chap;# The default for PPP authentication is CHAP.}group-profile westcoast_tunnel;}client production {l2tp {shared-secret "$9$R2QErv8X-goGylVwg4jiTz36/t0BEleWFnRhrlXxbs2aJDHqf3nCP5"; # SECRET-DATAppp-authentication chap;}group-profile westcoast_tunnel;}}profile westcoast_bldg_2_tunnel {client black {l2tp {shared-secret "$9$R2QErv8X-goGylVwg4jiTz36/t0BEleWFnRhrlXxbs2aJDHqf3nCP5";# SECRET-DATAppp-authentication pap;}group-profile westcoast_tunnel;}}}
