![Huawei Quidway NetEngine40E Скачать руководство пользователя страница 1308](http://html.mh-extra.com/html/huawei/quidway-netengine40e/quidway-netengine40e_configuration-manual-reliability_1694531308.webp)
[LAC1-GigabitEthernet1/0/0.1]
bas
[LAC1-GigabitEthernet1/0/0.1-bas]
access-type layer2-subscriber
[LAC1-GigabitEthernet1/0/0.1-bas]
authentication-method ppp
[LAC1-GigabitEthernet1/0/0.1-bas]
access-delay 500 even-mac
[LAC1-GigabitEthernet1/0/0.1-bas]
quit
[LAC1-GigabitEthernet1/0/0.1]
quit
Step 2
Set up an L2TP tunnel between LAC1 and the LNS.
NOTE
In the two-node hot backup scenario, run the
set l2tp tunnel base-id
base-id
command on either of LACs
to set a base value used by the LAC to allocate L2TP tunnel IDs. The other LAC uses the default base value
of 0. The settings ensure to a certain extent that each tunnel ID is unique on a single router.
# Assign an IP address to a loopback interface directly connecting LAC1 to the LNS so that the
route to the loopback interface can be advertised.
[LAC1]
interface gigabitethernet 2/0/0
[LAC1-GigabitEthernet2/0/0]
ip address 10.0.2.1 255.255.255.0
[LAC1-GigabitEthernet2/0/0]
quit
# Configure an L2TP group and its attributes.
[LAC1]
l2tp enable
[LAC1]
l2tp-group lac1
[LAC1-l2tp-lac1]
tunnel name lac1
[LAC1-l2tp-lac1]
start l2tp ip 3.3.3.3
[LAC1-l2tp-lac1]
tunnel authentication
[LAC1-l2tp-lac1]
tunnel password simple Huawei-123
[LAC1-l2tp-lac1]
tunnel source loopback1 rui
[LAC1-l2tp-lac1]
tunnel timer hello 200
[LAC1-l2tp-lac1]
quit
# Configure a RADIUS server.
[LAC1]
radius-server group radius1
[LAC1-radius-radius1]
radius-server authentication 20.20.20.1 1812
[LAC1-radius-radius1]
radius-server accounting 20.20.20.1 1813
[LAC1-radius-radius1]
radius-server shared-key itellin
[LAC1-radius-radius1]
quit
# Configure a domain to which users belong.
[LAC1]
aaa
[LAC1-aaa]
domain domain1
[LAC1-aaa-domain-domain1]
l2tp-group lac1
[LAC1-aaa-domain-domain1]
radius-server group radius1
[LAC1-aaa-domain-domain1]
authentication-scheme default1
[LAC1-aaa-domain-domain1]
accounting-scheme default1
[LAC1-aaa-domain-domain1]
quit
[LAC1-aaa]
quit
Step 3
Configure a VRRP backup group on the access side of two routers (LAC1 and LAC2) to
determine the master and backup status. Create a BFD session, and configure the VRRP backup
group to track the BFD session.
# Configure a VRRP link BFD session to rapidly detect faults in interfaces or links and trigger
a master/backup VRRP switchover.
[LAC1]
bfd bfd-acc bind peer-ip 10.0.1.2
[LAC1-bfd-session-bfd-acc]
discriminator local 1
[LAC1-bfd-session-bfd-acc]
discriminator remote 1
[LAC1-bfd-session-bfd-acc]
commit
[LAC1-bfd-session-bfd-acc]
quit
# Configure a VRRP peer BFD session to rapidly detect network-side faults.
HUAWEI NetEngine80E/40E Router
Configuration Guide - Reliability
11 Multi-node Backup Configuration
Issue 02 (2014-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1291