Alcatel-Lucent IAP93 Betriebsanweisung PDF herunterladen (Seite 244)

244 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User Guide

Figure 81 Manual GRE Configuration

4. Click Next to continue. When the GRE tunnel configuration is completed on both the OAW-IAP and Switch, the

packets sent from and received by an OAW-IAP are encapsulated, but not encrypted.

In the CLI

To configure a manual GRE VPN tunnel:

(Instant Access Point)(config)# gre primary <name>

(Instant Access Point)(config)# gre type <type>

(Instant Access Point)(config)# gre per-ap-tunnel

(Instant Access Point)(config)# end

(Instant Access Point)# commit apply

To view VPN configuration details:

Instant Access Point# show vpn config

Configuring an L2TPv3 Tunnel

The Layer 2 Tunneling Protocol version 3 (L2TPv3) feature allows OAW-IAP to act as L2TP Access Concentrator

(LAC) and tunnel all wireless clients L2 traffic from AP to L2TP Network Server (LNS). In a centralized L2 model, the

VLAN on the corporate side are extended to remote branch sites. Wireless clients associated to OAW-IAP gets the

IP address from the DHCP server running on LNS. For this, AP has to transparently allow DHCP transactions

through the L2TPv3 tunnel. In this release, L2TPv3 supports following:

l AOS-W Instant supports tunnel and session configuration, and uses Control Message Authentication (RFC

3931) for tunnel and session establishment. Each L2TPv3 tunnel supports one data connection and this

connection is termed as an L2TPv3 session.

l Each OAW-IAP supports tunneling over UDP only.

l If primary LNS is down, then it will failover to the backup LNS. L2TPv3 has one tunnel profile and under this, one

primary peer and a backup peer are configured. If the primary tunnel creation fails or if the primary tunnel gets

deleted, the backup starts. Following two failover modes are supported:

n Preemptive: In this mode, if the primary comes up when the backup is active, the backup tunnel is deleted and

primary will be the only active tunnel. If you configure the tunnel to be preemptive, and when the primary

tunnel goes down, it will start the persistence timer which tries to bring up the primary tunnel.

n Non-Preemptive: In this mode, when the back tunnel is established after primary tunnel goes down, it does

not make the primary tunnel active again.

l L2TPV3 configuration is supported on the following OAW-IAPs:

n OAW-RAP108

1 2 ... 239 240 241 242 243 244 245 246 247 248 249 ... 334 335

Keine Kommentare

Alcatel-Lucent IAP93 Betriebsanweisung Seite 244