ltpoveripsecVPN配置文档.docVIP

[H3C]dis cur # version 5.20, Release 2105P26, Standard # sysname H3C # l2tp enable # ike local-name h3c # nat address-group 0 122.225.19.19 122.225.19.22 # domain default enable system # telnet server enable # dar p2p signature-file cfa0:/p2p_default.mtd # port-security enable # acl number 2000 rule 0 permit # vlan 1 # domain system access-limit disable state active idle-cut disable self-service-url disable ip pool 1 172.16.1.2 172.16.1.10 # ike peer ipsec exchange-mode aggressive pre-shared-key simple h3c id-type name remote-name mlf nat traversal # ipsec proposal h3c # ipsec policy-template ipsec2 1 ike-peer ipsec proposal h3c # ipsec policy ipsec 1 isakmp template ipsec2 # user-group system # local-user admin password cipher .]@USE=B,53Q=^Q`MAF41!! authorization-attribute level 3 service-type telnet local-user vpnuser password simple 123456 service-type ppp # cwmp undo cwmp enable # l2tp-group 1 undo tunnel authentication allow l2tp virtual-template 1 tunnel name h3c # interface Aux0 async mode flow link-protocol ppp # interface Cellular0/0 async mode protocol link-protocol ppp # interface Ethernet0/0 port link-mode route ip address 192.168.1.1 255.255.255.0 # interface Ethernet0/1 port link-mode route nat outbound 2000 ip address 2.2.2.1 255.255.255.0 ipsec policy ipsec # interface Ethernet5/0 port link-mode route # interface Ethernet5/1 port link-mode route # interface Virtual-Template1 ppp authentication-mode pap remote address pool 1 ip address 172.16.1.1 255.255.255.0 # interface NULL0 # load xml-configuration # load tr069-configuration # user-interface con 0 user-interface tty 13 user-interface aux 0 user-interface vty 0 4 authentication-mode scheme #