3G路由配置改动的为红色2014.8.22.doc

# version 5.20, Release 2318 # sysname RT-YAYC-wangdian （1）（网点名称） # domain default enable system # telnet server enable # ip ttl-expires enable ip unreachables enable # dar p2p signature-file flash:/p2p_default.mtd # port-security enable # password-recovery enable # acl number 3000 description IPSec_Secure （2）（和网点网关前3位一样） rule 0 permit ip source 8.99.40.0 0.0.0.255 destination 8.0.0.0 1.255.255.255 rule 5 permit ip source 9.99.40.0 0.0.0.255 destination 8.0.0.0 1.255.255.255 acl number 3100 rule 0 permit ip source 8.99.40.0 0.0.0.255 rule 5 permit ip source 9.99.40.0 0.0.0.255 # vlan 1 # domain system access-limit disable state active idle-cut disable self-service-url disable # ike proposal 9 encryption-algorithm 3des-cbc dh group2 authentication-algorithm md5 # ike peer 3g proposal 9 pre-shared-key xinhe3g remote-address 8.209.163.200 # ipsec transform-set 9 encapsulation-mode tunnel transform esp esp authentication-algorithm md5 esp encryption-algorithm 3des # ipsec policy unicom 1 isakmp security acl 3000 pfs dh-group2 ike-peer 3g transform-set 9 # user-group system group-attribute allow-guest # local-user admin password cipher admin authorization-attribute level 3 service-type telnet service-type web local-user view password cipher wangdian authorization-attribute level 3 service-type telnet terminal service-type web # cwmp undo cwmp enable # controller E1 0/0 using e1 # interface Aux0 async mode flow link-protocol ppp # interface Cellular0/0 async mode protocol link-protocol ppp # interface Cellular1/0 async mode protocol link-protocol ppp ppp pap local-user yaycliuljc@yancxy.ydoa.snapn password cipher yanchang (3) (市办分配的用户名和密码) ppp ipcp dns admit-any ppp ipcp dns request ppp lcp sn accept ppp user attach-format imsi-sn split $ ip address ppp-negotiate tcp mss 1400 undo rip output dialer enable-circular dialer-group 4 dialer timer idle