Example: Configuring An Lac-Auto-Initiated L2Tp Tunnel - H3C SR8800-F Configuration Manual

# Configure the IP address of the remote host as 2.1.1.1, and configure a route to the LNS
(1.1.2.2).
# Create a virtual private network connection by using the Windows system, or install the L2TP
LAC client software, such as WinVPN Client.
# Complete the following configuration procedure (the procedure depends on the client
software):
Specify the PPP username as vpdnuser and the password as Hello.
Specify the Internet interface address of the security gateway as the IP address of the LNS.
In this example, the Ethernet interface for the tunnel on the LNS has an IP address of
1.1.2.2.
Modify the connection attributes: set the protocol to L2TP, the encryption attribute to
customized, and the authentication mode to CHAP.
Verifying the configuration
# On the remote host, initiate the L2TP connection. After the dial-up connection is established, use
the display ppp access-user command on the LNS to display the online user information.
[LNS] display ppp access-user user-type lns
Interface Username MAC address
BAS0
# On the remote host, initiate the L2TP connection. After the connection is established, verify that the
remote host can obtain the IP address 192.168.0.10 and ping the private IP address of the LNS
(192.168.0.1).
# On the LNS, use the display l2tp session command to check the established L2TP session.
[LNS-l2tp1] display l2tp session
LocalSID
89
# On the LNS, use the display l2tp tunnel command to check the established L2TP tunnel.
[LNS-l2tp1] display l2tp tunnel
LocalTID RemoteTID State
10878 21

Example: Configuring an LAC-auto-initiated L2TP tunnel

Network configuration
As shown in
LAC-auto-initiated mode. When the PPP user initiates a connection, it uses the established tunnel to
access the corporate network.
Figure 85 Network diagram
Procedure
1. Configure the LNS:
# Configure IP addresses for the interfaces. (Details not shown.)
# Create a local user named vpdnuser, set the password, and enable the PPP service.
<LNS> system-view
vpdnuser -
RemoteSID
36245
Established
Figure 85, configure the LAC to establish an L2TP tunnel with the LNS in
IP address
192.168.0.10
LocalTID State
10878 Established
Sessions RemoteAddress
1 2.1.1.1
271
IPv6 address IPv6 PDPrefix
- -
RemotePort RemoteName
1701 PC