92
# Configure the local tunnel name as LNS.
[LNS-l2tp1] tunnel name LNS
# Specify Virtual-Template 1 for receiving calls.
[LNS-l2tp1] allow l2tp virtual-template 1
# Disable tunnel authentication.
[LNS-l2tp1] undo tunnel authentication
2. Configure the remote host:
# Configure the IP address of the remote host as 2.1.1.1, and configure a route to the LNS
(1.1.2.2).
# Create a virtual private network connection by using the Windows system, or install the L2TP
LAC client software, such as WinVPN Client.
# Complete the following configuration procedure (the procedure depends on the client software):
{ Specify the PPP username as vpdnuser and the password as Hello.
{ Specify the Internet interface address of the security gateway as the IP address of the LNS. In this
example, the Ethernet interface for the tunnel on the LNS has an IP address of 1.1.2.2.
{ Modify the connection attributes: set the protocol to L2TP, the encryption attribute to customized,
and the authentication mode to CHAP.
Verifying the configuration
# On the remote host, initiate the L2TP connection. After the connection is established, the remote host
can obtain the IP address 192.168.0.2 and ping the private IP address of the LNS (192.168.0.1).
# On the LNS, use the display l2tp session command to check the established L2TP session.
[LNS-l2tp1] display l2tp session
LocalSID RemoteSID LocalTID State
89 36245 10878 Established
# On the LNS, use the display l2tp tunnel command to check the established L2TP tunnel.
[LNS-l2tp1] display l2tp tunnel
LocalTID RemoteTID State Sessions RemoteAddress RemotePort RemoteName
10878 21 Established 1 2.1.1.1 1701 PC
Configuration example for LAC-auto-initiated L2TP tunnel
Network requirements
As shown in Figure 34, configure the LAC to establish an L2TP tunnel with the LNS in LAC-auto-initiated
mode. When the PPP user initiates a connection, it uses the established tunnel to access the corporate
network.
Figure 34 Network diagram
Configuration procedure
1. Configure the LNS:
Internet
LAC
Remote host
LNS
L2TP tunnel
LAN
10.2.0.0/16
GE1/0/1
3.3.3.2/24
GE1/0/1
3.3.3.1/24
Corporate
10.1.0.0/16
10.2.0.1 10.1.0.1
To Next Page
Loading...
