...
Property | Description | |||||
---|---|---|---|---|---|---|
add-default-route (yes | no; Default: no) | Whether to add L2TP remote address as a default route. | |||||
allow (mschap2 | mschap1 | chap | pap; Default: mschap2, mschap1, chap, pap) | Allowed authentication methods. | |||||
connect-to (IP|IPv6; Default: ) | Remote address of L2TP server (if the address is in VRF table, VRF should be specified)
| |||||
comment (string; Default: ) | Short description of the tunnel. | |||||
default-route-distance (byte; Default: ) | Since v6.2, sets distance value applied to auto created default route, if add-default-route is also selected | |||||
dial-on-demand (yes | no; Default: no) | connects only when outbound traffic is generated. If selected, then route with gateway address from 10.112.112.0/24 network will be added while connection is not established. | |||||
disabled (yes | no; Default: yes) | Enables/disables tunnel. | |||||
keepalive-timeout (integer [1..4294967295]; Default: 60s) | Since v6.0rc13, tunnel keepalive timeout in seconds. | |||||
max-mru (integer; Default: 1450) | Maximum Receive Unit. Max packet size that L2TP interface will be able to receive without packet fragmentation. | |||||
max-mtu (integer; Default: 1450) | Maximum Transmission Unit. Max packet size that L2TP interface will be able to send without packet fragmentation. | |||||
mrru (disabled | integer; Default: disabled) | Maximum packet size that can be received on the link. If a packet is bigger than tunnel MTU, it will be split into multiple packets, allowing full size IP or Ethernet packets to be sent over the tunnel. | |||||
name (string; Default: ) | Descriptive name of the interface. | |||||
password (string; Default: "") | Password used for authentication. | |||||
profile (name; Default: default-encryption) | Specifies which PPP profile configuration will be used when establishing the tunnel. | |||||
user (string; Default: ) | User name used for authentication. | |||||
use-ipsec (yes | no; Default: no) | When this option is enabled, dynamic IPSec peer configuration and policy is added to encapsulate L2TP connection into IPSec tunnel. | |||||
allow-fast-path (yes | no; Default: ) | Allow to forward packets without additional processing in the Linux kernel. | |||||
l2tp-proto-version ( l2tpv2 | l2tpv3-ip | l2tpv3-udp | l2tpv; Default: l2tpv2 ) | Specify protocol version. | |||||
l2tpv3-cookie-length ( 0 | 4-bytes | 8-bytes ; Default: 0 ) | Configures an L2TPv3 pseudowire static session cookie. | |||||
l2tpv3-digest-hash (md5 | none | sha1 ; Default: md5 ) | Specifies which hash function to be used. | |||||
use-peer-dns (yes | no | exclusively; Default: no ) | To use peer dns. | |||||
copy-from | To copy created peer. | |||||
src-address | Specify source address. | |||||
l2tpv3-circuit-id | Set the virtual circuit identifier to bind the one end of the L2TPv3 control channel. | |||||
ipsec-secret (string; Default: ) | Preshared key used when use-ipsec is enabled. |
...