Huawei AR1200 Series - Example for Configuring LAC-Auto-Initiated VPN

LocalTID RemoteTID RemoteAddress Port Sessions RemoteName
1 1 192.168.0.2 2134 1 vpdnuser
Run the display l2tp session command. You can find that the session is set up. For example:
[RouterA] display l2tp session
Total session = 1
LocalSID RemoteSID LocalTID
1576 1036 1
At the same time, VPN users can access the headquarters.
----End
Configuration Files
The configuration file of the LNS is as follows:
NOTE
Only the configuration files related to L2TP are listed.
#
sysname RouterA
#
l2tp enable
#
ip pool 1
network 192.168.0.0 mask 255.255.255.0
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
local-user vpdnuser password OUM!K%F<+$
[Q=^Q`MAF4<1!!
local-user vpdnuser service-type ppp
#
interface Virtual-Template1
ppp authentication-mode chap
remote address pool 1
ip address 192.168.0.1 255.255.255.0
#
l2tp-group 1
undo tunnel authentication
allow l2tp virtual-template 1 remote vpdnuser
tunnel name LNS
#
return
4.7.4 Example for Configuring LAC-Auto-Initiated VPN
This example shows how to configure LAC-auto-initiated VPN.
Networking Requirements
Departments in the enterprise headquarters need to use independent network segments. Staff in
branches need to access the networks of their own departments. To meet these requirements, an
L2TP tunnel can be established between the branch routers and router in the headquarters. As
shown in Figure 4-7, a PC in the branch connects to the LAC (RouterA) through a LAN interface,
and RouterA connects to the LNS (RouterB) through the Internet. The tunnel between RouterA
and RouterB implements communication between the branch and headquarters.
Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN 4 L2TP Configuration
Issue 01 (2012-04-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
277