配置思路:
啟用---建用戶給域---建域給虛模板接口--域給虛模板接口---虛模板接口給L2tp組
l2tp enable
local-user admin class network
password simple admin
service-type ppp
domain abc
authentication ppp local
interface Virtual-Template1
ppp authentication-mode chap domain abc
remote address 192.168.20.2
ip address 192.168.20.1 255.255.255.0
l2tp-group 1 mode lns
allow l2tp virtual-template 1
undo tunnel authentication
tunnel name LNS大寫
===================================
[MSR3620]dis cur
#
version 7.1.049, Release 0106P21
#
sysname MSR3620
#
dhcp enable
#
password-recovery enable
#
vlan 1
#
dhcp server ip-pool pool11
network 192.168.11.0 mask 255.255.255.0
address range 192.168.11.100 192.168.11.200
dns-list 202.99.166.4
gateway-list 192.168.11.1
#
controller Cellular0/0
#
controller Cellular0/1
#
interface Aux0
#
interface Virtual-Template1--------------------(2)創建並進入虛模板接口1,配本地IP,遠端IP(PPP用戶的IP),PPP認證方式為chap並工作在名為abc的域********
ppp authentication-mode chap domain abc
remote address 192.168.20.2
ip address 192.168.20.1 255.255.255.0
#
interface NULL0
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 172.16.11.200 255.255.255.0
nat outbound
#
interface GigabitEthernet0/1
port link-mode route
#
interface GigabitEthernet0/2
port link-mode route
ip address 192.168.11.1 255.255.255.0
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line vty 0 63
user-role network-operator
#
ip route-static 0.0.0.0 0 172.16.11.254
#
domain abc--------------------------(1)創建並進入名為abc的域,為在虛模板接口virtual-template 1處認證配置處引用*************
authentication ppp local-----------對PPP用戶采取本地認證
#
domain system
#
aaa session-limit ftp 32
aaa session-limit telnet 32
aaa session-limit http 32
aaa session-limit ssh 32
aaa session-limit https 32
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class network------------(0)創建並進入本地用戶用於遠端L2TP撥號時的用戶名和密碼
password cipher admin//////////////$c$3$vxTKs5M4PsMkgGqspKJ6nkZvHuMM/l2u------配
service-type ppp--------------------------------------------------------------配
authorization-attribute user-role network-operator----------------------------默認
#
local-user h3c class network
password cipher $c$3$vqedKIgWBgpbwxyyVSgJ6guEj3njpg==
service-type ppp
authorization-attribute user-role network-operator
#
l2tp-group 1 mode lns-----------------(3)創建並進入編號為1的模式為lns的組*************************
allow l2tp virtual-template 1---允許(指定)接收撥號呼叫的虛擬模板接口為VT1
undo tunnel authentication---取消隧道認證
tunnel name LNS---隧道名
#
l2tp enable---(00)啟用l2tp協議**********************************
#
return
[MSR3620]dis l2tp tunnel
LocalTID RemoteTID State Sessions RemoteAddress RemotePort RemoteName
61993 10 Established 1 172.16.11.22 1701 User-2021DH
RAIW
[MSR3620]dis l2tp session
LocalSID RemoteSID LocalTID State
46887 1 61993 Established
[MSR3620]dis version
H3C Comware Software, Version 7.1.049, Release 0106P21
Copyright (c) 2004-2014 Hangzhou H3C Tech. Co., Ltd. All rights reserved.
H3C MSR36-20 uptime is 0 weeks, 0 days, 3 hours, 11 minutes
Last reboot reason : Power on
Boot image: cfa0:/msr36-cmw710-boot-r0106p21.bin
Boot image version: 7.1.049P16, Release 0106P21
Compiled Jan 07 2015 18:16:01
System image: cfa0:/msr36-cmw710-system-r0106p21.bin
System image version: 7.1.049, Release 0106P21
Compiled Jan 07 2015 18:16:01
CPU ID: 0x2
2G bytes DDR3 SDRAM Memory
8M bytes Flash Memory
PCB Version: 2.0
CPLD Version: 2.0
Basic BootWare Version: 1.42
Extended BootWare Version: 1.42
[SLOT 0]AUX (Hardware)2.0, (Driver)1.0, (CPLD)2.0
[SLOT 0]GE0/0 (Hardware)2.0, (Driver)1.0, (CPLD)2.0
[SLOT 0]GE0/1 (Hardware)2.0, (Driver)1.0, (CPLD)2.0
[SLOT 0]GE0/2 (Hardware)2.0, (Driver)1.0, (CPLD)2.0
[SLOT 0]CELLULAR0/0 (Hardware)2.0, (Driver)1.0, (CPLD)2.0
[SLOT 0]CELLULAR0/1 (Hardware)2.0, (Driver)1.0, (CPLD)2.0
[MSR3620]quit
<MSR3620>quit
%Jan 7 12:58:41:650 2022 MSR3620 SHELL/5/SHELL_LOGOUT: TTY logg
******************************************************************************
* Copyright (c) 2004-2014 Hangzhou H3C Tech. Co., Ltd. All rights reserved. *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
Line aux0 is available.
Press ENTER to get started.