H3c-technologies H3C SecPath F5020 Manual de usuario descargar pdf (Pagina 35)

As shown in Figure 10, the workflow for establishing a client-initiated tunnel is similar to that for

establishing a NAS-initiated tunnel. (Details not shown.)

Figure 10 Establishment process for client-initiated tunnels

LAC-auto-initiated tunneling mode

In NAS-initiated mode, a remote system must successfully dial in to the LAC through PPPoE or ISDN.

In LAC-auto-initiated mode, you can use the l2tp-auto-client command on the LAC to trigger the LAC to

initiate a tunneling request to the LNS. When a remote system accesses the internal network, the LAC

forwards data through the L2TP tunnel.

Figure 11 LAC-auto-initiated tunneling mode

An LAC-auto-initiated tunnel has the following characteristics:

• The connection between a remote system and the LAC is not confined to a dial-up connection and

can be any IP-based connection.

• An L2TP session is established immediately after an L2TP tunnel is established. Then, the LAC and

LNS, acting as the PPPoE client and PPPoE server, respectively, perform PPP negotiation.

• An L2TP tunnel can carry only one L2TP session.

• The LNS assigns a private IP address to the LAC instead of to the remote system.

As shown in Figure 12, the

workflow for establishing an LAC-auto-initiated tunnel is similar to that for

establishing a NAS-initiated tunnel. (Details not shown.)

LAN

Internet

Remote system

Host A

Private

network

L2TP tunnel

LAC auto initiated

LAC

Device A

LNS

Device B

RADIUS server

1 2 ... 30 31 32 33 34 35 36 37 38 39 40 ... 55 56

Sin comentarios

H3c-technologies H3C SecPath F5020 Manual de usuario Pagina 35