PPPoE L2TP

[c.vergara]

I ´m using a 7204 (12.2(15)T1) router for terminate PPPoE sessions, this is working fine. But i need to extend this ppp session through a L2TP tunnel from the same 7200 (LAC) until other router (LNS).

PPPoE Client-----7200(LAC)--------Router(LNS)

Is possible this solution ? If is affirmative which the configuration of the routers or any documentation about this ?

regards,

Carlos

[zahmed]

Carlos, I believe you need "L2TP Multihop" feature. Please check out the following:

http://www.cisco.com/warp/customer/471/l2tp_multihop2.html

You could seach CCO for more on L2TP Multihop. Let me know if you meant something else.

~Zulfi

[tepatel]

Absolutely..you can do that..Here is the link which discuss the same scenerio.

http://www.cisco.com/warp/public/794/pppoe_arch.html

Following config is tested and known to work for that scenerio,

PPPoE Client-----7200(LAC)--------Router(LNS)

On LAC 7200 terminating pvc 1/35

vpdn enable

vpdn search-order domain

!

vpdn-group 10

description to forward pppoe over l2tp to LNS

request-dialin

protocol l2tp

domain a@b.com

initiate-to ip 10.10.10.2 priority 1

no l2tp tunnel authentication

!

vpdn-group 4

accept-dialin

protocol pppoe

virtual-template 3

!

interface ATM4/0

no ip address

no atm ilmi-keepalive

pvc 1/35

protocol pppoe

!

interface Virtual-Template3

no ip address

ip mtu 1492

peer default ip address pool ADSL

ppp authentication pap

!

ip local pool ADSL x.x.x.x y.y.y.y

On LNS

vpdn-group 4

accept-dialin

protocol l2tp

virtual-template 1

terminate-from hostname c7200

lcp renegotiation on-mismatch

no l2tp tunnel authentication

!

interface Virtual-Template1

ip unnumbered FastEthernet0/1

peer default ip address pool ADSL

ppp authentication pap

!

ip local pool ADSL a.a.a.a y.y.y.y

[c.vergara]

Hi,

thanks for your help, this configuration is working fine, the other router was a Shasta and was necessary add l2tp tunnel authentication in boths ends.

A last question, Is possible leave the l2tp tunnel static (always on) ?

Carlos

[tepatel]

I don't think so that you can have always on l2tp tunnel without users in it. Any special reason why you need it?

[c.vergara]

The customer needs to know if the tunnel can is always on, because the Shasta has the option static on the tunnel configuration.

[zahmed]

We have this hidden command "l2tp tunnel nosession-timeout " that goes under VPDN group after selecting "protocol l2tp". See if this does the job for you.

~Zulfi

[c.vergara]

Hi,

Finally the command is "l2tp tunnel timeout no-session never" and must is on both end (LAC and LNS).

thanks for yous help.

Carlos

[makchitale]

Needs to be on both ends since if the router is configured as a LAC, the default is 15 seconds. If the router is configured as an LNS, the default is 10 seconds.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122tcr/122tdr/drfisl2.htm#1141929

Thanks, Mak.

[c.vergara]

Hi,

yes was neccesary apply this command in boths end. The implementation is working fine.

thanks,

Carlos