
Dial VPN Layer 3 Tunneling
303509-A Rev 00 3-3
3.
Install the software for the tunnel management server, Remote Access
Concentrator, and (for the
erpcd
-based solution) the Access Control
Protocol on the UNIX host that serves as the load host for the Remote
Access Concentrator.
For installation information, see the Remote Access Concentrator
documentation.
4.
Load the operating software onto the Remote Access Concentrator from
the UNIX load host and boot the Remote Access Concentrator.
For detailed descriptions of the boot procedures, refer to the Remote Access
Concentrator documentation.
5.
Configure the Remote Access Concentrator software, as described in
Chapter 4, to handle PPP dial-in calls from remote nodes, determine
whether they are tunnel clients, and route them appropriately.
6.
For the all-RADIUS solution, install and configure the RADIUS server on
the service provider network to support the TMS database.
For more information about installing and configuring RADIUS servers on
the ISP network, see Chapter 6.
7.
Configure the TMS (including the authentication type) by adding an
entry in the TMS for each domain in the TMS database. Refer to
Chapter 5 and Chapter 6 for more information.
When configuring the TMS, you can choose either local or remote
authentication. For both the erpcd-based and the all-RADIUS solutions, Dial
VPN uses remote authentication; that is, a RADIUS server on the customer’s
home network provides authentication and assigns IP addresses.
For DHCP address allocation, configure the TMS with the DHCP parameters,
as described in Chapter 5.
8.
Configure the gateway, including the RADIUS client, using Site Manager,
then boot the gateway.
Configure the gateway with an IP connection to the Dial VPN network and a
frame relay or PPP connection to the CPE router on the remote user’s home
network. Configure a RADIUS client on the gateway. For information on
configuring the gateway, see Chapter 7.
9.
Establish a connection between a gateway on the ISP network and a CPE
router on the home network using frame relay or PPP.
Comentarios a estos manuales