Client-Initiated Vpn - 3Com MSR 50 Series Configuration Manual

Client-Initiated VPN

1 The user first accesses the Internet, and then initiates a tunneling request to the
2 After the LNS accepts the connection request, an L2TP tunnel is set up between
3 The VPN user communicates with the headquarters over the tunnel.
1 Configure the VPN user
2 Configure the LNS
# Enable tunnel authentication and specify the tunnel authentication password.
[LNS-l2tp1] tunnel authentication
[LNS-l2tp1] tunnel password simple aabbcc
Network requirements
A VPN user accesses the corporate headquarters as follows:
LNS directly.
the LNS and the VPN user.
Network diagram
Figure 454 Network diagram for the client-initiated VPN
PSTN/ISDN
VPN user
Configuration procedure
Install the L2TP client software such as WinVPN Client on the host and connect the
host to the Internet in dialup mode. Then perform the following configurations
(the configuration procedure depends on the client software):
# Specify the VPN username as vpdnuser and the password as Hello.
# Set the Internet interface address of the security gateway as the IP address of the
LNS. In this example, the Ethernet interface on the LNS, the interface for the
tunnel has an IP address of 1.1.2.2.
# Modify the connection attributes, setting the protocol to L2TP, the encryption
attribute to customized, and the tunnel authentication mode to CHAP, and
enabling tunnel authentication and setting the tunnel authentication password to
aabbcc.
# Create a local user named vpdnuser, set the password, and enable PPP service.
Note that the username and password must match those configured on the client.
<LNS> system-view
[LNS] local-user vpdnuser
[LNS-luser-vpdnuser] password simple Hello
[LNS-luser-vpdnuser] service-type ppp
[LNS-luser-vpdnuser] quit
Internet
LAC
L2TP tunnel
L2TP Configuration Example
Eth1/0
1 .1.2.2/24
Corporate
network
LNS
1617