Huawei AR1200 series Configuration Manual page 280

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
# Configure IP addresses for both serial ports.
<Huawei> system-view
[Huawei] sysname RouterA
[RouterA] interface serial 1/0/0
[RouterA-Serial1/0/0] link-protocol ppp
[RouterA-Serial1/0/0] ip address 202.38.160.1 255.255.255.0
[RouterA-Serial1/0/0] quit
# Create an L2TP group and configure related attributes.
[RouterA] l2tp enable
[RouterA] l2tp-group 1
[RouterA-l2tp1] tunnel name LAC
[RouterA-l2tp1] start l2tp ip 202.38.160.2 domain huawei.com
# Enable the tunnel authentication and set a tunnel authentication password.
[RouterA-l2tp1] tunnel authentication
[RouterA-l2tp1] tunnel password simple quidway
[RouterA-l2tp1] quit
# Set the user name and password. Note that the user name and password must be consistent
with those set on the user side.
[RouterA] aaa
[RouterA-aaa] local-user vpdnuser@huawei.com password simple Hello
[RouterA-aaa] local-user vpdnuser@huawei.com service-type ppp
# Create a domain that users access.
[RouterA-aaa] domain huawei.com
Step 3 Configure Router B (LNS).
# Configure an IP address for Serial 1/0/0 on the LNS.
<Huawei> system-view
[Huawei] sysname RouterB
[RouterB] interface serial 1/0/0
[RouterB-Serial1/0/0] link-protocol ppp
[RouterB-Serial1/0/0] ip address 202.38.160.2 255.255.255.0
[RouterB-Serial1/0/0] quit
# Create a virtual template and configure related parameters.
[RouterB] interface virtual-template 1
[RouterB-Virtual-Template1] ip address 192.168.0.1 255.255.255.0
[RouterB-Virtual-Template1] ppp authentication-mode chap
[RouterB-Virtual-Template1] quit
# Enable L2TP and create an L2TP group.
[RouterB] l2tp enable
[RouterB] l2tp-group 1
# Configure the name of the local end and the name of the peer.
[RouterB-l2tp1] tunnel name LNS
[RouterB-l2tp1] allow l2tp virtual-template 1 remote LAC
# Enable the tunnel authentication and set a tunnel authentication password.
[RouterB-l2tp1] tunnel authentication
[RouterB-l2tp1] tunnel password simple quidway
# Configure the mandatory local CHAP authentication.
[RouterB-l2tp1] mandatory-chap
[RouterB-l2tp1] quit
Issue 01 (2012-04-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 L2TP Configuration
269