千家论坛_智能建筑与智能家居技术交流社区

标题: l2tp 华为系列配置实例 [打印本页]

作者: yshaobin 时间: 2010-3-19 16:54
标题: l2tp 华为系列配置实例

<XXXX>dis cu
#
version 5.20, Release 1618P10, Standard
#
sysname XXXX
#
l2tp enable ................ 启动l2tp
#
domain default enable system
#
telnet server enable

#
vlan 1
#
domain XXXXX.gx..................建立一个vpdn域   XXXXX.gx
authentication default none    非本地认证,用户帐号信息电信托管
authorization default none
accounting default none
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 1 172.16.10.1 172.16.10.253   分配给vpdn拨号用户的IP池
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
local-user XXXX
password cipher ANJT#5)L4[SQ=^Q`MAF4<1!!
service-type telnet
level 3
#
l2tp-group 1   建立一个l2tp 组
allow l2tp virtual-template 0 remote XXXX domain XXXXX.gx   协议是l2tp...指定虚模板,LAC名,域
tunnel password cipher AVS.B%"_93[Q=^Q`MAF4<1!! 隧道密码
tunnel name XXXXX    隧道名
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Ethernet0/0
port link-mode route
nat outbound 3005
ip address X.X.X.X 255.255.255.224 配置公网IP
#
interface Ethernet0/1
port link-mode route
ip address 10.10.11.1 255.255.255.0
#
interface Virtual-Template0            虚模板配置
ppp authentication-mode pap domain XXXXX.gx   认证方式也是pap
remote address pool 1 指定地址池
ip address 172.16.10.254 255.255.255.0 需要起一个接口地址
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 X.X.X.X   配置默认路由

user-interface con 0
user-interface aux 0
authentication-mode scheme
user-interface vty 0 4
acl 3006 inbound
authentication-mode scheme
#
return

欢迎光临千家论坛_智能建筑与智能家居技术交流社区 (http://bbs.qianjia.com/)