Subject: Re: L2TP Over IPSec & Tunnel Setup

From: Pyda Srisuresh <[email-masked]>
Date: Tue, 29 Feb 2000 20:29:28 -0800 (PST)

You might want to take a look at the draft titled 
"Secure Remote Access with L2TP" 
(<draft-ietf-pppext-secure-ra-00.txt>).

The document proposes three new RADIUS parameters for 
use by the LNS, acting as Secure Remote Access Server (SRAS). 

cheers,
suresh

--- Gokul Subramaniam <[email-masked]> wrote:
> Hello.,
> 
> Problem Context:
> The implementation of an L2TP tunnel was to access private network.
> Compulsory tunneling is used. Tunnel setup is done for the users after
> authentication using RADIUS.
> RADIUS is used to get the tunnel information (using access request and
> accept messages passing the LAC-tunnel initiator info in access req and
> receiving LNS-tunnel terminator info in access accept message) - in
> conformance to IETF Draft: RADIUS Attributes for Tunnel Protocol Support
> <draft-ietf-radius-tunnel-auth-09.txt>.
> 
> Problem:
> Although the RADIUS extension for tunnel-auth provides the LNS ip
> address and supported tunnel type, it does not support configuration
> information for ipsec.
> LNS gets the LAC information from RADIUS. But where does the LNS get
> ipsec related information for the tunnel terminator (LAC). This is not
> addressed in the RADIUS Tunnel support draft. In order to get the ipsec
> profile and ike profiles should the LNS be configured separately on a
> per tunnel terminator basis?
> 
> Are there any extensions that support getting the profiles or
> negotiating the ipsec and ike profiles as part of getting the tunnel
> terminator information.
> 
> Input is appreciated.
> 
> 

=====

__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com