ELTEX ESR-1000 - Configuration Example

ESR series service routers.ESR-Series. User manual
547
•
•
•
•
•
•
Step Description Command Keys
19 Define the list of DNS servers that will
be used by remote users (optional).
esr(config-l2tp-server)# dns-
servers object-group
<OBJ-GROUP-NETWORK
-NAME >
<OBJ-GROUP-NETWORK-NAME> –
name of the IP addresses profile that
includes required DNS servers
addresses, set by the string of up to
31 characters.
20 Define the list of WINS servers that
will be used by remote users
(optional).
esr(config-l2tp-server)#
wins-servers
object-group <OBJ-GROUP-
NETWORK -NAME >
<OBJ-GROUP-NETWORK-NAME> –
name of the IP addresses profile that
includes required WINS servers
addresses, set by the string of up to
31 characters.
15.2.2 Configuration example
Objective:
Configure L2TP server on a router for remote user connection to LAN. Authentication is performed on RADIUS
server.
L2TP server address: 120.11.5.1;
Gateway inside the tunnel: 10.10.10.1;
Radius server address: 192.168.1.4.
For IPsec, key authentication method is used: key – 'password’.
Solution:
First, do the following:
Configure RADIUS server connection;
Configure zones for te1/0/1 and gi1/0/1 interfaces.
Specify IP addresses for te1/0/1 and te1/0/1 interfaces.
Create address profile that contains local gateway address:
esr(config)# object-group network l2tp_local
esr(config-object-group-network)# ip address-range 10.10.10.1
esr(config-object-group-network)# exit