H3C-F100-XG Firewall L2TP LAC side configuration

  Configure the LAC

# Configure the IP address, routing to ensure network reachability, specific configuration steps are omitted.

# Enable the L2TP function.

<LAC> system-view

[LAC] l2tp enable

# Create L2TP group 1 mode LAC.

[LAC] l2tp-group 1 mode lac

# Set the local name to the LAC LAC, and the LNS IP address 3.3.3.2.

[LAC-l2tp1] tunnel name LAC tunnel name, custom

[LAC-l2tp1] lns-ip 3.3.3.2 LNS server IP

# Enable tunnel authentication and set the tunnel authentication key for aabbcc.

[LAC-l2tp1] tunnel authentication without the need to undo tunnel authentication tunnel authentication    

[LAC-l2tp1] tunnel password simple aabbcc no tunnel certification does not write

[LAC-l2tp1] quit

# Create a virtual PPP interface Virtual-PPP 1, user-configured PPP user name vpdnuser, password Hello, and configure PPP authentication mode to PAP.

[LAC] interface virtual-ppp 1

[LAC-Virtual-PPP1] ip address ppp-negotiate the receiving end of the dispensing LNS, automatically obtain an IP

[LAC-Virtual-PPP1] ppp pap local-user vpdnuser password simple Hello pap account password authentication mode

[LAC-Virtual-PPP1] ppp chap user zebcs 

[LAC-Virtual-PPP1] ppp chap password sim Hello chap account password authentication mode, according to the actual situation with a second election pap

[LAC-Virtual-PPP1] quit

# Set the private route, will address the need to access the packets will be forwarded through the L2TP tunnel.

[LAC] ip route-static 10.1.0.0 16 virtual-ppp 1

# Trigger LAC L2TP tunnel establishment request.

[LAC] interface virtual-ppp 1

[LAC-Virtual-PPP1] l2tp-auto-client l2tp-group 1, if not undo l2tp-auto-client permanently trigger

[LAC-Virtual-PPP1] quit

Guess you like

Origin www.cnblogs.com/Yu-Qing/p/12172694.html