
Configuring and Troubleshooting Bay Dial VPN Services
1-12 303509-A Rev 00
Enterprise subscribers of this service must configure the CPE router to allow
routing to occur between the remote nodes and the hosts on the home network. For
a Layer 3 frame relay circuit, a frame relay PVC, a static route, and (for a Bay
Networks or other non-Cisco router), adjacent host designation must exist
between the CPE and the gateway router on the Dial VPN network. For frame
relay, all Dial VPN circuits must be in the same service record. PPP circuits have
similar requirements, except for the PVC and service record.
L2TP Network Server (LNS)
The L2TP network server (LNS) is a router that resides at the customer’s home
network and serves as the termination point for Layer 2 (L2TP) tunnels and
sessions.
The LNS authenticates PPP connection requests and allows end-to-end PPP
tunneled connections. An LNS may also work in conjunction with a RADIUS
server to authenticate dial-in users.
An LNS can accommodate multiple users, each with his or her own L2TP session.
The L2TP session is the virtual end-to-end connection over which the LAC sends
data to the LNS.
In Layer 2 tunneling, the CPE router is also the LNS. For more information about
the Bay Networks LNS, see Configuring L2TP Services.
RADIUS Authentication Server
The RADIUS authentication server on the customer’s network is a network access
security system. It uses a locally stored and maintained database that contains all
user authentication and network service access information to authenticate dial-in
user access requests.
The RADIUS server has three main functions in a Dial VPN L2TP network:
• Authenticating remote users
• Assigning IP addresses to remote users
Note:
The Dial VPN RADIUS server for Layer 3 tunnels must be on a
separate physical device from any RADIUS server for Layer 2 tunnels or for
switched services. The RADIUS server for Layer 2 tunnels can be the same
physical device as for any dial services RADIUS server.
Comentarios a estos manuales