H3C Technologies H3C SecPath F1000-E - Manual (Page 54)

21
[LNS-isp-system] quit
# Enable L2TP.
[LNS] l2tp enable
# Configure the virtual template interface.
[LNS] interface virtual-template 1
[LNS-virtual-template1] ip address 192.168.0.1 255.255.255.0
[LNS-virtual-template1] ppp authentication-mode chap domain system
[LNS-virtual-template1] remote address pool 1
[LNS-virtual-template1] quit
# Create an L2TP group and specify the virtual template interface for receiving calls.
[LNS] l2tp-group 1
[LNS-l2tp1] tunnel name LNS
[LNS-l2tp1] allow l2tp virtual-template 1
Step2 Configure the VPN user host
• Configure the IP address of the user host as 2.1.1.1, and configure a route to the LNS (1.1.2.2).
• Create a virtual private network connection by using the Windows system, or install the L2TP client
software, such as WinVPN Client.
• Complete the following configuration procedure (note that the procedure depends on the client
software):
# Specify the VPN username as vpdnuser and the password as Hello.
# Specify the Internet interface address of the security gateway as the IP address of the LNS. In this
example, the GigabitEthernet interface for the tunnel on the LNS has an IP address of 1.1.2.2.
# Modify the connection attributes, setting the protocol to L2TP, the encryption attribute to customized
and the authentication mode to CHAP.
Step3 Verify the configurations
# On the user host, initiate the L2TP connection. After the connection is established, the user host can
obtain the IP address 192.168.0.2 and ping the private IP address of the LNS (192.168.0.1).
# On the LNS, use the display l2tp session command to check the established L2TP session.
[LNS-l2tp1] display l2tp session
Total session = 1
LocalSID RemoteSID LocalTID
647 1 1
# On the LNS, use the display l2tp tunnel command to check the established L2TP tunnel.
[LNS-l2tp1] display l2tp tunnel
Total tunnel = 1
LocalTID RemoteTID RemoteAddress Port Sessions RemoteName
1 5 2.1.1.1 1701 1 l2tpuser