Configuring the Identifier for Logical Interfaces that Provide L2TP Services - JUNOS 9.5 Services Interfaces Configuration Guide

You can configure L2TP services on adaptive services interfaces on M7i, M10i, and M120 routers only. You must configure the logical interface to be dedicated or shared. If a logical interface is dedicated, it can represent only one session at a time. A shared logical interface can have multiple sessions.

To configure the logical interface, include the l2tp-interface-id statement at the [edit interfaces interface-name unit logical-unit-number dial-options] hierarchy level:

The l2tp-interface-id name configured on the logical interface must be replicated at the [edit access profile name] hierarchy level:

You can configure multiple logical interfaces with the same interface identifier, to be used as a pool for several users. For more information on configuring access profiles, see the JUNOS System Basics Configuration Guide.

Example: Configuring Multilink PPP on a Shared Logical Interface

Multilink PPP is supported on either shared or dedicated logical interfaces. The following example can be used to configure many multilink bundles on a single shared interface:


            
               interfaces {
               
                  
                     sp-1/3/0 {
                     
                        
                           traceoptions {
                           flag all;
                           }
                        
                     
                     
                        
                           unit 0 {
                           family inet;
                           }
                        
                     
                     
                        
                           unit 20 {
                           
                              
                                 dial-options {
                                 l2tp-interface-id test;
                                 shared;
                                 }
                              
                           
                           family inet;
                           }
                        
                     
                     }
                  
               
               }
               access {
               
                  
                     profile t {
                     
                        
                           client test {
                           
                              
                                 l2tp {
                                 interface-id test;
                                 multilink;
                                 shared-secret "$9$n8HX6A01RhlvL1R"; # SECRET-DATA
                                 }
                              
                           
                           }
                        
                     
                     }
                  
               
               
                  
                     profile u {
                     authentication-order radius;
                     }
                  
               
               
                  
                     radius-server {
                     
                        
                           192.168.65.63 {
                           port 1812;
                           secret "$9$Vyb4ZHkPQ39mf9pORlexNdbgoZUjqP5"; # SECRET-DATA
                           }
                        
                     
                     }
                  
               
               }
               services {
               
                  
                     l2tp {
                     
                        
                           tunnel-group 1 {
                           l2tp-access-profile t;
                           ppp-access-profile u;
                           
                              
                                 local-gateway {
                                 address 10.70.1.1;
                                 }
                              
                           
                           service-interface sp-1/3/0;
                           }
                        
                     
                     
                        
                           traceoptions {
                           flag all;
                           debug-level packet-dump;
                           
                              
                                 filter {
                                 protocol l2tp;
                                 protocol ppp;
                                 protocol radius;
                                 }
                              
                           
                           }
                        
                     
                     }
                  
               
               }