[H3C]dis cur
version 5.20, Release 2104P02
sysname H3C
l2tp enable--------------------开启 L2tp 服务器
nat address-group 1 209.9.9.24 209.9.9.24 -------------------------NAT地址池，由GRE 对端路由过来
domain default enable system
telnet server enable ----------------------------------------开启Telnet 服务
dar p2p signature-file flash:/p2p_default.mtd
port-security enable
acl number 2000-----------------------------------------用于策略路由的ACL ：1网段走 GRE ，2 网段走CT
rule 10 permit source 172.16.1.0 0.0.0.255
rule 20 deny
acl number 2001
rule 10 permit source 172.16.2.0 0.0.0.255
rule 20 deny
acl number 2003
rule 10 permit
vlan 1
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
user-group system
local-user admin---------------------------------------------------登陆用户名
password cipher XMVOHW99DISQ=-------------------------密码
authorization-attribute level 3--------------------最高登陆等级 3
service-type telnet------------------------用于 telnet
local-user cao001 -----------------------------------l2tp 账户
password cipher OUM!K%F<+$[Q<1!!--------------l2tp 密码
service-type ppp ------------------------------用于 l2tp 拨号
cwmp
undo cwmp enable
l2tp-group 10 ----------------------------------------------创建 l2tp 拨号组
undo tunnel authentication
tunnel name H3C-l2tp
start l2tp ip 121.33.66.25 fullusername cao001 -----------------------输入服务器IP地址 和 用户名
interface Aux0
async mode flow
link-protocol ppp
interface Cellular0/0
async mode protocol
link-protocol ppp
interface Ethernet0/0
port link-mode route
interface Ethernet0/1
port link-mode route
ip address 192.168.11.220 255.255.255.0
interface Ethernet0/4
port link-mode route
ip address 172.16.1.1 255.255.255.0
interface Virtual-Template10 ---------------------------------------------配置 l2tp 拨号接口
ppp authentication-mode chap
ppp chap user cao001 -------------------用户名
ppp chap password cipher OUM!K%F<+$[Q=^----------密码
ppp timer negotiate 5
l2tp-auto-client enable
ip address ppp-negotiate
interface NULL0
interface LoopBack0
ip address 208.9.9.24 255.255.255.255
interface Vlan-interface1
ip address 172.16.2.1 255.255.255.0
interface Ethernet0/2
port link-mode bridge
interface Ethernet0/3
port link-mode bridge
interface Tunnel275 ---------------------------------拨号成功后得到的IP段，再用来建立GRE
nat outbound 2003 address-group 1
ip address 192.168.102.46 255.255.255.252
source 10.10.90.85
destination 10.90.30.1
keepalive 10 2
route-policy ct permit node 10----------------------策略路由 这里没有应用在接口上面
if-match acl 2000
apply tag 1 ----------------------------路由标记
route-policy ct permit node 20
ip route-static 0.0.0.0 0.0.0.0 192.168.102.45
ip route-static 120.31.66.215 255.255.255.255 192.168.11.1
load xml-configuration
load tr069-configuration
user-interface tty 12
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
return
[H3C]
[H3C]
[H3C]dis ver
[H3C]dis version
H3C Comware Platform Software
Comware Software, Version 5.20, Release 2104P02
Copyright © 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved.
H3C MSR20-10 uptime is 0 week, 0 day, 4 hours, 16 minutes
Last reboot 2007/01/01 00:00:26
System returned to ROM By Command.
CPU type: FREESCALE MPC8323E 333MHz
256M bytes DDR SDRAM Memory
32M bytes Flash Memory
Pcb Version: 3.0
Logic Version: 1.0
Basic BootROM Version: 2.21
Extended BootROM Version: 2.23
[SLOT 0]AUX (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/0 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/1 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/2 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/3 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/4 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]CELLULAR0/0 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[H3C]
[H3C]
[H3C]dis ip int bei
[H3C]dis ip int bri
[H3C]dis ip int brief
*down: administratively down
(s): spoofing
Interface Physical Protocol IP Address Description
Aux0 down down unassigned Aux0 Inte…
Cellular0/0 down down unassigned Cellular0…
Ethernet0/0 down down unassigned Ethernet0…
Ethernet0/1 up up 192.168.11.220 Ethernet0…
Ethernet0/4 up up 172.16.1.1 Ethernet0…
LoopBack0 up up(s) 208.9.9.24 LoopBack0…
Tunnel275 up up 192.168.102.46 Tunnel275…
Virtual-Template10 up up(s) 10.10.90.85 Virtual-T…
Vlan-interface1 up up 172.16.2.1 Vlan-inte…
[H3C]
[H3C]
[H3C]dis cpu
[H3C]dis cpu-usage
[H3C]dis cpu-usage hi
[H3C]dis cpu-usage history
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
40%|
35%|
30%|
25%|
20%| ## # #
15%| # # # ## # # #
10%| # # # # # # # ## # # #
5%|############################################################
------------------------------------------------------------
10 20 30 40 50 60 (minutes)
cpu-usage last 60 minutes(SYSTEM)
[H3C]
[H3C]dis mem
[H3C]dis memory
System Total Memory(bytes): 171296000
Total Used Memory(bytes): 106179756
Used Rate: 61%
[H3C]
[H3C]