Cisco IOS Wide-Area Networking Configuration Guide - Free Books

Step 6Step 7Command or Actionshow l2tun tunnel allExample:Router# show l2tun tunnel allconfigure terminalPurpose(Optional) Displays the current state of Layer 2 tunnels and information aboutconfigured tunnels, including local and remote Layer 2 Tunneling Protocol(L2TP) hostnames, aggregate packet counts, and control channel information.• Tunnels should be updated with the new control channel authenticationpassword within a matter of seconds. If a tunnel does not update to showthat two secrets are configured after several minutes have passed, thattunnel can be manually cleared and a defect report should be filed with theCisco Technical Assistance Center (TAC). To manually clear an L2TPv3tunnel, perform the task “Manually Clearing L2TPv3 Tunnels.”NoteIssue this command to determine if any tunnels are not using the newpassword for control channel authentication. The output displayed foreach tunnel in the specified L2TP class should show that two secretsare configured.Enters global configuration mode.Step 8Example:Router# configure terminall2tp-class [l2tp-class-name]Example:Router(config)# l2tp-classclass1Step 9 no digest [secret [0 | 7]password] [hash {md5 | sha}]Step 10Example:Router(config-l2tp-class)# nodigest secret cisco hash shaendSpecifies the L2TP class name and enters L2TP class configuration mode.• The l2tp-class-name argument is optional. However, if you want toconfigure multiple L2TP classes you must specify a uniquel2tp-class-name for each one.Removes the old password used in L2TPv3 control channel authentication.NoteDo not remove the old password until all peer PE routers have beenupdated with the new password.Ends your configuration session by exiting to privileged EXEC mode.Step 11Example:Router(config-l2tp-class)# endshow l2tun tunnel allExample:Router# show l2tun tunnel all(Optional) Displays the current state of Layer 2 tunnels and information aboutconfigured tunnels, including local and remote Layer 2 Tunneling Protocol(L2TP) hostnames, aggregate packet counts, and control channel information.• Tunnels should no longer be using the old control channel authenticationpassword. If a tunnel does not update to show that only one secret isconfigured after several minutes have passed, that tunnel can be manuallycleared and a defect report should be filed with TAC. To manually clear anL2TPv3 tunnel, perform the task “Manually Clearing L2TPv3 Tunnels.”NoteIssue this command to ensure that all tunnels are using only the newpassword for control channel authentication. The output displayed foreach tunnel in the specified L2TP class should show that one secret isconfigured.57