3Com MSR 50 Series, Руководство по настройке

Страница: 1617 / 2443

L2TP Configuration Example 1617
# Enable tunnel authentication and specify the tunnel authentication password.
[LNS-l2tp1] tunnel authentication
[LNS-l2tp1] tunnel password simple aabbcc
Client-Initiated VPN Network requirements
A VPN user accesses the corporate headquarters as follows:
1
The user first accesses the Internet, and then initiates a tunneling request to the
LNS directly.
2
After the LNS accepts the connection request, an L2TP tunnel is set up between
the LNS and the VPN user.
3
The VPN user communicates with the headquarters over the tunnel.
Network diagram
Figure 454 Network diagram for the client-initiated VPN
Configuration procedure
1
Configure the VPN user
Install the L2TP client software such as WinVPN Client on the host and connect the
host to the Internet in dialup mode. Then perform the following configurations
(the configuration procedure depends on the client software):
# Specify the VPN username as vpdnuser and the password as Hello.
# Set the Internet interface address of the security gateway as the IP address of the
LNS. In this example, the Ethernet interface on the LNS, the interface for the
tunnel has an IP address of 1.1.2.2.
# Modify the connection attributes, setting the protocol to L2TP, the encryption
attribute to customized, and the tunnel authentication mode to CHAP, and
enabling tunnel authentication and setting the tunnel authentication password to
aabbcc.
2
Configure the LNS
# Create a local user named vpdnuser, set the password, and enable PPP service.
Note that the username and password must match those configured on the client.
<LNS> system-view
[LNS] local-user vpdnuser
[LNS-luser-vpdnuser] password simple Hello
[LNS-luser-vpdnuser] service-type ppp
[LNS-luser-vpdnuser] quit
PSTN/ISDN
Internet
Corporate
network
L2TP tunnel
Eth1/0
1 .1.2.2/24
LNS LAC
VPN user