Enabling transferring AVP data in hidden mode
L2TP uses Attribute Value Pairs (AVPs) to transmit tunnel negotiation parameters, session negotiation parameters, and user authentication information. Transferring AVP data in hidden mode can hide sensitive AVP data such as user passwords. This feature encrypts AVP data with the key configured by using the tunnel password command before transmission.
This configuration takes effect only when the tunnel authentication feature is enabled. For more information about configuring tunnel authentication, see "Configuring L2TP tunnel authentication."
To enable transferring AVP data in hidden mode:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter L2TP group view in LAC mode. | l2tp-group group-number [ mode lac ] | N/A |
3. Enable transferring AVP data in hidden mode. | tunnel avp-hidden | By default, AVP data is transferred in plain text. |