Configuring AAA authentication for VPN users on an LNS

Configure AAA on the LNS in the following cases:

• Proxy authentication is configured on the LNS

• Mandatory CHAP authentication is configured on the LNS

• Mandatory LCP renegotiation authentication is configured on the LNS and the VT interface requires PPP user authentication.

After you configure AAA on the LNS, the LNS can authenticate the identities (usernames and passwords) of VPN users for a second time. If a user passes AAA authentication, the user can communicate with the LNS. Otherwise, the L2TP session will be removed.

LNS side AAA configurations are similar to those on an LAC (see "Configuring AAA authentication for VPN users on LAC side").