Specifications

VPN Configuration 517

Chapter 23

Specify the primary and secondary WINS servers

Select authentication protocols

Define an address pool for VPN users. This is done from the config prompt.

If the CLI is still in the config-vpdn-l2tp submode, type exit to return to the

config prompt.

Specify a group name for IKE (required only if using XAUTH).

Specify an IKE Shared Secret for clients connecting through the specified

subnet. This allows multiple shared secrets to be employed.

Define a crypto policy and assign it a priority. Begin by entering the

config-isakmp submode.

Specify the authentication method.

Configuring PPTP Using the CLI

PPTP is configured from the config-vpdn-pptp prompt in the CLI.

(Alcatel)(config-vpdn-l2tp)# client configuration wins 192.168.30.1

192.168.30.2

(Alcatel) (config-vpdn-l2tp)# ppp authentication PAP

(Alcatel) (config-vpdn-l2tp)# ppp authentication CHAP

(Alcatel) (config-vpdn-l2tp)# ppp authentication MSCHAP

(Alcatel) (config-vpdn-l2tp)# ppp authentication MSCHAPv2

(Alcatel) (config) #ip local pool l2tp-pool 192.168.99.1

192.168.99.100

(Alcatel) (config) #crypto isakmp groupname fooname

(Alcatel) (config) #crypto isakmp policy 10

(Alcatel) (config-isakmp)#

(Alcatel) (config-isakmp)# authentication pre-share