Guest

Cisco IOS Software Releases 12.2 SB

VPDN Default Group Template

  • Viewing Options

  • PDF (205.8 KB)
  • Feedback
VPDN Default Group Template

Table Of Contents

VPDN Default Group Template

source vpdn-template

vpdn-template


VPDN Default Group Template


The VPDN Default Group Template feature allows a virtual private dialup network (VPDN) template to be configured with global default values that will supersede the system default values. These global default values are applied to all associated VPDN groups, unless specific values are configured within an individual VPDN group.

In addition to a single global (unnamed) VPDN template, multiple named VPDN templates can be configured. A VPDN group can be associated with only one VPDN template at a time.

Values configured in the global VPDN template are applied to all VPDN groups by default. A VPDN group can be disassociated from the global VPDN template, or associated with a named VPDN template. Associating a VPDN group with a named VPDN template automatically disassociates it from the global VPDN template.

Configuration Information

Configuration information is included in the "Configuring Additional VPDN Features" module of the Cisco IOS VPDN Configuration Guide, Release 12.4T, at the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcg/tvpdn_c/vpc6adht.htm

Command Reference

This section documents modified commands.

source vpdn-template

vpdn-template

source vpdn-template

To associate a virtual private dialup network (VPDN) group with a VPDN template, use the source vpdn-template command in VPDN group configuration mode. To disassociate a VPDN group from a VPDN template, use the no form of this command.

source vpdn-template [name]

no source vpdn-template [name]

Syntax Description

name

(Optional) The name of the VPDN template to be associated with the VPDN group.


Command Default

Global VPDN template settings are applied to individual VPDN groups if a global VPDN template has been defined. If no global VPDN template has been defined, system default settings are applied to individual VPDN groups.

Command Modes

VPDN group configuration

Command History

Release
Modification

12.2(4)B

This command was introduced on the Cisco 7200 series and Cisco 7401ASR routers.

12.2(8)T

This command was integrated into Cisco IOS Release 12.2(8)T without support for the name argument.

12.2(13)T

Support was added for the name argument in Cisco IOS Release 12.2(13)T.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

Use the source vpdn-template command to associate a VPDN group with a VPDN template. By default, VPDN groups are associated with the global VPDN template if one is defined. A VPDN group can be associated with only one VPDN template. Associating a VPDN group with a named VPDN template automatically disassociates it from the global VPDN template.

The hierarchy for the application of VPDN parameters to a VPDN group is as follows:

VPDN parameters configured for the individual VPDN group are always applied to that VPDN group.

VPDN parameters configured in the associated VPDN template are applied for any settings not specified in the individual VPDN group configuration.

System default settings for VPDN parameters are applied for any settings not configured in the individual VPDN group or the associated VPDN template.

Disassociating a VPDN group from the global VPDN template using the no source vpdn-template command results in the following hierarchy for the application of VPDN parameters to that VPDN group:

VPDN parameters configured for the individual VPDN group are always applied to that VPDN group.

System default settings for VPDN parameters are applied for any settings not configured in the individual VPDN group.

If you disassociate a VPDN group from a named VPDN template, the VPDN group will be associated with the global VPDN template if one is defined.

Examples

The following example configures the VPDN group named group1 to ignore the global VPDN template settings and use the system default settings for all unspecified VPDN parameters:

Router(config)# vpdn-group group1
Router(config-vpdn)# no source vpdn-template

The following example creates a VPDN template named l2tp, enters VPDN template configuration mode, configures two VPDN parameters in the VPDN template, and associates the VPDN group named l2tptunnels with the VPDN template:

Router(config)# vpdn-template l2tp
Router(config-vpdn-templ)# l2tp tunnel busy timeout 65
Router(config-vpdn-templ)# l2tp tunnel password 7 tunnel4me
!
Router(config)# vpdn-group l2tptunnels
Router(config-vpdn)# source vpdn-template l2tp

The following example disassociates the VPDN group named l2tptunnels from the VPDN template named l2tp. The VPDN group will be associated with the global VPDN template if one has been defined.

Router(config)# vpdn-group l2tptunnels
Router(config-vpdn)# no source vpdn-template l2tp

Related Commands

Command
Description

vpdn-group

Creates a VPDN group and enters VPDN group configuration mode.

vpdn-template

Creates a VPDN template and enters VPDN template configuration mode.


vpdn-template

To create a virtual private dialup network (VPDN) template and enter VPDN template configuration mode, use the vpdn-template command in global configuration mode. To delete a VPDN template, use the no form of this command.

vpdn-template [name]

no vpdn-template [name]

Syntax Description

name

(Optional) Name of a VPDN template.


Command Default

No VPDN template exists. The system default values are applied to individual VPDN groups for any parameters that are not configured in the individual VPDN group.

Command Modes

Global configuration

Command History

Release
Modification

12.2(4)B

This command was introduced on the Cisco 7200 series and Cisco 7401ASR routers.

12.2(8)T

This command was integrated into Cisco IOS Release 12.2(8)T without support for the name argument.

12.2(13)T

Support was added for the name argument in Cisco IOS Release 12.2(13)T.

12.2(28)SB

This command was integrated into Cisco IOS Release 12.2(28)SB.


Usage Guidelines

Use this command to configure values for VPDN parameters in a VPDN template. A single unnamed VPDN template may be configured. Multiple named VPDN templates can be configured. A VPDN group can be associated with only one VPDN template.

Values configured in the global (unnamed) VPDN template are applied to all VPDN groups by default. A VPDN group can be disassociated from the global VPDN template, or associated with a named VPDN template. Associating a VPDN group with a named VPDN template automatically disassociates it from the global VPDN template.

The values configured in a VPDN template are applied to all associated VPDN groups, unless specific values are configured for individual VPDN groups. VPDN parameters that are not specified in the individual VPDN group or in the associated VPDN template are assigned system default values.

The hierarchy for the application of VPDN parameters to a VPDN group is as follows:

VPDN parameters configured for the individual VPDN group are always applied to that VPDN group.

VPDN parameters configured in the associated VPDN template are applied for any settings not specified in the individual VPDN group configuration.

System default settings for VPDN parameters are applied for any settings not configured in the individual VPDN group or the associated VPDN template.

Not all commands that are available for configuring a VPDN group can be used to configure a VPDN template. Table 1 lists the commands that can be used to configure the VPDN template.

Table 1 Commands Available for VPDN Template Configuration 

Command Name
Description

default (VPDN)

Removes a VPDN subgroup configuration, or resets it to its default value.

description

Adds a description for a VPDN group.

group session-limit

Specifies the maximum number of concurrent sessions allowed across all VPDN groups associated with a particular VPDN template.

ip mtu adjust

Enables automatic adjustment of the IP maximum transmission unit (MTU) on a virtual access interface.

ip pmtu

Enables the discovery of the path MTU for Layer 2 traffic.

ip precedence (VPDN)

Sets the precedence value in the VPDN Layer 2 encapsulation header.

ip tos (VPDN)

Sets the type of service (ToS) bits in the VPDN Layer 2 encapsulation header.

l2f ignore-mid-sequence

Configures the router to ignore message identifier (MID) sequence numbers for sessions in a Layer 2 Forwarding (L2F) tunnel.

l2f tunnel busy timeout

Configures the amount of time that the router will wait before attempting to recontact an L2F peer that was previously busy.

l2f tunnel retransmit initial retries

Configures the number of times that the router will attempt to send the initial control packet for tunnel establishment before considering an L2F peer busy.

l2f tunnel retransmit retries

Configures the number of times the router will attempt to resend an L2F tunnel control packet before tearing the tunnel down.

l2f tunnel timeout setup

Configures the amount of time that the router will wait for a confirmation message after sending out the initial L2F control packet before considering a peer busy.

l2tp attribute clid mask-method

Configures a network access server (NAS) to provide Layer 2 Tunnel Protocol (L2TP) calling line ID suppression for local authorization.

l2tp drop out-of-order

Instructs a NAS or tunnel server using L2TP to drop packets that are received out of order.

l2tp hidden

Enables L2TP attribute-value (AV) pair hiding, which encrypts the value of sensitive AV pairs.

l2tp ip udp checksum

Enables IP User Datagram Protocol (UDP) checksums on L2TP payload packets.

l2tp security crypto-profile

Configures IP Security (IPSec) protection of L2TP sessions associated with a VPDN group.

l2tp sequencing

Enables sequencing for packets sent over an L2TP tunnel.

l2tp tunnel authentication

Enables L2TP tunnel authentication.

l2tp tunnel bearer capabilities

Sets the bearer-capability value used by the Cisco router.

l2tp tunnel busy timeout

Configures the amount of time that the router will wait before attempting to recontact an L2TP peer that was previously busy.

l2tp tunnel framing capabilities

Sets the framing-capability value used by the Cisco router.

l2tp tunnel hello

Sets the number of seconds between sending hello keepalive packets for an L2TP tunnel.

l2tp tunnel password

Sets the password the router will use to authenticate the tunnel.

l2tp tunnel receive-window

Configures the number of packets allowed in the local receive window for an L2TP control channel.

l2tp tunnel retransmit initial retries

Configures the number of times that the router will attempt to send out the initial L2TP control packet for tunnel establishment before considering a peer busy.

l2tp tunnel retransmit initial timeout

Configures the amount of time that the router will wait before resending an initial L2TP control packet out to establish a tunnel.

l2tp tunnel retransmit retries

Configures the number of retransmission attempts made for an L2TP control packet.

l2tp tunnel retransmit timeout

Configures the amount of time that the router will wait before resending an L2TP control packet.

l2tp tunnel timeout no-session

Configures the time a router waits after an L2TP tunnel becomes empty before tearing down the tunnel.

l2tp tunnel timeout setup

Configures the amount of time that the router will wait for a confirmation message after sending out the initial L2TP control packet before considering a peer busy.

l2tp tunnel zlb delay

Configures the delay time before a zero length bit (ZLB) control message must be acknowledged.

local name

Specifies a local hostname that the tunnel will use to identify itself.

pptp flow-control receive-window

Specifies how many packets the Point-to-Point Tunnel Protocol (PPTP) client can send before it must wait for the acknowledgment from the tunnel server.

pptp flow-control static-rtt

Specifies the timeout interval of the PPTP tunnel server between sending a packet to the client and receiving a response.

pptp tunnel echo

Specifies the period of idle time on the PPTP tunnel that will trigger an echo message from the tunnel server to the client.

redirect identifier

Configures a VPDN redirect identifier to use for L2TP call redirection on a NAS.

relay pppoe bba-group

Configures the PPP over Ethernet (PPPoE) broadband access (BBA) group that responds to PPPoE Active Discovery (PAD) messages.

vpn

Specifies that the source and destination IP addresses of a given VPDN group belong to a specified VPN routing and forwarding instance (VRF).


Examples

The following example enters VPDN template configuration mode and configures two VPDN parameters in the global VPDN template:

Router(config)# vpdn-template
Router(config-vpdn-templ)# local name myrouter
Router(config-vpdn-templ)# ip mtu adjust

The following example creates a VPDN template named l2tp, enters VPDN template configuration mode, configures two VPDN parameters in the VPDN template, and associates the VPDN group named l2tptunnels with the VPDN template:

Router(config)# vpdn-template l2tp
Router(config-vpdn-templ)# l2tp tunnel busy timeout 65
Router(config-vpdn-templ)# l2tp tunnel password 7 tunnel4me
!
Router(config)# vpdn-group l2tptunnels
Router(config-vpdn)# source vpdn-template l2tp

The following example configures a VPDN template called customer1 and applies a group session limit of 50 to all VPDN groups associated with that VPDN template:

Router(config)# vpdn-template customer1
Router(config-vpdn-templ)# group session-limit 50

Related Commands

Command
Description

group session-limit

Specifies the maximum number of concurrent sessions allowed across all VPDN groups associated with a particular VPDN template.

source vpdn-template

Associates a VPDN group with a VPDN template.

vpdn-group

Creates a VPDN group and enters VPDN group configuration mode.