Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

Category:L2TP Handover: Difference between revisions

m
This is the configuration I'm using -- with my IP addresses and tunnel secret removed, naturally! If you don't want tunnel authentication, leave out the 'secret=' and 'auth_mode=' lines.
 
peer profile create profile_name=doubtlessa.gormless
peer profile modify profile_name=doubtlessa.gormless \
tunnel_profile_name=aaisp-in \
session_profile_name=aaisp-in \
ppp_profile_name=aaisp-in \
peer_ipaddr=90.155.53.851 \
peer_port=1701 \
peer profile create profile_name=carelessb.gormless
peer profile modify profile_name=carelessb.gormless \
tunnel_profile_name=aaisp-in \
session_profile_name=aaisp-in \
ppp_profile_name=aaisp-in \
peer_ipaddr=90.155.53.952 \
peer_port=1701 \
 
peer profile create profile_name=c.gormless
peer profile modify profile_name=c.gormless \
tunnel_profile_name=aaisp-in \
session_profile_name=aaisp-in \
ppp_profile_name=aaisp-in \
peer_ipaddr=90.155.53.53 \
peer_port=1701 \
 
peer profile create profile_name=d.gormless
peer profile modify profile_name=d.gormless \
tunnel_profile_name=aaisp-in \
session_profile_name=aaisp-in \
ppp_profile_name=aaisp-in \
peer_ipaddr=90.155.53.54 \
peer_port=1701 \
===Authentication===
 
Enabling tunnel authentication lets you be confident that you really are talking to doubtlessthe or carelessgormless's, and not some other LAC. Without it you are limited to just trusting the incoming IP address. What this doesn't do is authenticate the individual PPP sessions over the tunnel. doubtless and carelessGormless's supply a CHAP username (the SIM's ICCID), challenge and response which will be verified if you enable PPP proxy authentication. The secret that is used is so obvious that it took me nearly 2 months to work it out. It's "password", without the quotes.
 
===Musings===
autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators
12,264

edits