...
| Property | Description | |||||
|---|---|---|---|---|---|---|
| add-default-route (yes | no; Default: no) | Whether to add L2TP remote address as a default route. | |||||
| allow (mschap2 | mschap1 | chap | pap; Default: mschap2, mschap1, chap, pap) | Allowed authentication methods. | |||||
| connect-to (IP; Default: ) | Remote address of L2TP server (if the address is in VRF table, VRF should be specified)
| |||||
| comment (string; Default: ) | Short description of the tunnel. | |||||
| default-route-distance (byte; Default: ) | Since v6.2, sets distance value applied to auto created default route, if add-default-route is also selected | |||||
| dial-on-demand (yes | no; Default: no) | connects only when outbound traffic is generated. If selected, then route with gateway address from 10.112.112.0/24 network will be added while connection is not established. | |||||
| disabled (yes | no; Default: yes) | Enables/disables tunnel. | |||||
| keepalive-timeout (integer [1..4294967295]; Default: 60s) | Since v6.0rc13, tunnel keepalive timeout in seconds. | |||||
| max-mru (integer; Default: 1460 1450) | Maximum Receive Unit. Max packet size that L2TP interface will be able to receive without packet fragmentation. | |||||
| max-mtu (integer; Default: 1460 1450) | Maximum Transmission Unit. Max packet size that L2TP interface will be able to send without packet fragmentation. | |||||
| mrru (disabled | integer; Default: disabled) | Maximum packet size that can be received on the link. If a packet is bigger than tunnel MTU, it will be split into multiple packets, allowing full size IP or Ethernet packets to be sent over the tunnel. | |||||
| name (string; Default: ) | Descriptive name of the interface. | |||||
| password (string; Default: "") | Password used for authentication. | |||||
| profile (name; Default: default-encryption) | Specifies which PPP profile configuration will be used when establishing the tunnel. | |||||
| user (string; Default: ) | User name used for authentication. | |||||
| use-ipsec (yes | no; Default: no) | When this option is enabled, dynamic IPSec peer configuration and policy is added to encapsulate L2TP connection into IPSec tunnel. | |||||
| ipsec-secret (string; Default: ) | Preshared key used when use-ipsec is enabled. |
...