Cisco IOS Wide-Area Networking Configuration Guide - Free Books

DETAILED STEPSStep 1Step 2Command or ActionenableExample:Router> enableconfigure terminalPurposeEnables privileged EXEC mode.• Enter your password if prompted.Enters global configuration mode.Step 3Example:Router# configure terminall2tp-class [l2tp-class-name]Example:Router(config)# l2tp-class class1Step 4 digest [secret [0 | 7] password] [hash {md5 |sha}]Example:Router(config-l2tp-class)# digest secret ciscohash shaSpecifies the L2TP class name and enters L2TP classconfiguration mode.• The l2tp-class-name argument is optional. However, ifyou want to configure multiple L2TP classes you mustspecify a unique l2tp-class-name for each one.(Optional) Enables L2TPv3 control channel authenticationor integrity checking.• secret—(Optional) Enables L2TPv3 control channelauthentication.NoteIf the digest command is issued without the secretkeyword option, L2TPv3 integrity checking isenabled.• [0 | 7]—Specifies the input format of the shared secret.The default value is 0.– 0—Specifies that a plain-text secret is entered.– 7—Specifies that an encrypted secret is entered.• password—Defines the shared secret between peerrouters. The value entered for the password argumentmust be in the format that matches the input formatspecified by the [0 | 7] keyword option.• hash {md5 | sha}—(Optional) Specifies the hashfunction to be used in per-message digest calculations.– md5—Specifies HMAC-MD5 hashing.– sha—Specifies HMAC-SHA-1 hashing.The default hash function is md5.54