LNS Configuration 1609for three times, it considers that the L2TP tunnel is down and tries tore-establish a tunnel with the peer.■ A tunnel will be disconnected when there is no more user online, a networkfailure occurs, or a network administrator wants to tear it down. Either of theLAC and the LNS can initiate a tunnel disconnection request. Once a tunnel isdisconnected, the control connection and all the sessions within the tunnel willbe removed. When a user dials in, a new tunnel will be established.Configuring the LocalAAA Scheme and theUsers and PasswordsFor an LAC to use the local AAA scheme, you need to configure the users andtheir passwords on the LAC.Using the local AAA scheme, an LAC determines whether a dial up user is a legalVPN user by checking whether it has a local user with the password configured.An LAC initiates a tunneling request for only legal VPN users.An LAC authenticates a user by the username and password the user hasregistered.For information about AAA configuration commands, refer to “Configuring AAA”on page 1761.Follow these steps to configure the local AAA scheme and the users andpasswords:c CAUTION:■ For successful authentication of users, you also need to perform PPPconfigurations on the corresponding interface of the LAC, for example, theasynchronous serial interface connecting with users. For PPP configurationinformation, refer to “PPP and MP Configuration” on page 363.■ The local AAA scheme should be configured on the interfaces of access users.LNS ConfigurationConfiguring the LNS Follow these steps to configure the LNS:To do... Use the command... RemarksEnter system view system-view -Create a local user and enterits viewlocal-user username RequiredBy default, no local user orpassword is configured on anLAC.Configure a password for thelocal userpassword { simple | cipher }passwordAuthorize the user to use thePPP serviceservice-type ppp RequiredReturn to system view quit -Create an ISP domain andenter its viewdomain isp-name RequiredConfigure the AAA schemefor users in the PPP domainauthentication ppp local RequiredLocal AAA scheme by defaultauthorization ppp localaccounting ppp local
