Troubleshooting L2Tp; Failure To Access The Private Network - H3C SR8800-F Configuration Manual

[LAC-Virtual-PPP1] ip address ppp-negotiate
[LAC-Virtual-PPP1] ppp pap local-user vpdnuser password simple Hello
[LAC-Virtual-PPP1] quit
# Configure a static route so that packets destined for the corporate network will be forwarded
through the L2TP tunnel.
[LAC] ip route-static 10.1.0.0 16 virtual-ppp 1
# Trigger the LAC to establish an L2TP tunnel with the LNS.
[LAC] interface virtual-ppp 1
[LAC-Virtual-PPP1] l2tp-auto-client l2tp-group 1
3. On the remote host, configure the LAC as the gateway.
Verifying the configuration
# On the LNS, use the display l2tp session command to display the established L2TP session.
[LNS] display l2tp session
LocalSID
21409
# On the LNS, use the display l2tp tunnel command to display the established L2TP tunnel.
[LNS] display l2tp tunnel
LocalTID RemoteTID State
4501 524
# On the LNS, verify that you can ping 10.2.0.1, a private network address on the LAC side. This
indicates that hosts on 10.2.0.0/16 and those on 10.1.0.0/16 can communicate with each other
through the L2TP tunnel.
[LNS] ping -a 10.1.0.1 10.2.0.1
Ping 10.2.0.1 (10.2.0.1): 56 data bytes, press CTRL_C to break
56 bytes from 10.2.0.1: icmp_seq=0 ttl=128 time=1.000 ms
56 bytes from 10.2.0.1: icmp_seq=1 ttl=128 time=1.000 ms
56 bytes from 10.2.0.1: icmp_seq=2 ttl=128 time=1.000 ms
56 bytes from 10.2.0.1: icmp_seq=3 ttl=128 time=1.000 ms
56 bytes from 10.2.0.1: icmp_seq=4 ttl=128 time=1.000 ms
--- Ping statistics for 10.2.0.1 ---
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
round-trip min/avg/max/std-dev = 1.000/1.000/1.000/0.000 ms

Troubleshooting L2TP

Failure to access the private network

Symptom
The remote system cannot access the private network.
Solution
To resolve the problem:
1. Verify the following items to avoid tunnel setup failures:
The address of the LNS is configured correctly on the LAC. For more information, see the
lns-ip command.
RemoteSID LocalTID
3395 4501
Established
State
Established
Sessions RemoteAddress
1 3.3.3.1
273
RemotePort RemoteName
1701 LAC