Displaying And Maintaining L2Tp-Based Ead; L2Tp-Based Ead Configuration Example - HPE FlexNetwork MSR Series Comware 5 Layer 2 - Wan Access Configuration Manual

Displaying and maintaining L2TP-based EAD

Task
Display statistics about dynamic
firewalls on the VA interfaces
created on the specified VT
interface.

L2TP-based EAD configuration example

Network requirements
As shown in
through an L2TP tunnel. Both the security policy server and the RADIUS server are hosted by the
CAMS/IMC Platform. The client agent and the virus and patch server reside in the quarantined area.
After you establish L2TP connections between remote users on the host and the LNS, the LNS
assigns IP addresses in subnet 10.200.1.0/24 to the remote users on the host. The host must pass
identity authentication and security check to access network resources. If the host fails to pass
security authentication, it can access only the virus and patch server.
Figure 100 Network diagram
10.22.2.10/24
Client agent
10.22.2.1/24
Configuration procedure
Configure the router:
1.
# Assign an IP address to Ethernet 1/1, which is connected to the CAMS/IMC server.
<Router> system-view
[Router] interface ethernet1/1
[Router-Ethernet1/1] ip address 10.110.91.1 255.255.255.0
[Router-Ethernet1/1] quit
# Assign an IP address to Ethernet 1/2, which is connected to the iNode client.
[Router] interface ethernet1/2
Figure 100, in the public network, the Host communicates with the LNS at Layer 3
LAN
10.100.0.0/24
Eth1/2
Router
172.21.1.1/16
LNS
Eth1/3
Quarantined
Virus and patch server
10.22.2.2/24
Command
display ppp access-control
{ interface interface-type
interface-number } [ | { begin |
exclude | include }
regular-expression ]
Internet
L2TP tunnel
area
282
Remarks
Available in any view
Host
172.22.1.1/16
CAMS/iMC platform
RADIUS server
Security policy server
Portal server
10.110.91.146/24