H3C SR6600 Configuration Manual page 95

# Configure IP addresses for the interfaces. (Omitted)
# Create a local user named vpdnuser, set the password, and enable PPP service. Note
that the username and password must match those configured on the client.
<LNS> system-view
[LNS] local-user vpdnuser
[LNS-luser-vpdnuser] password simple Hello
[LNS-luser-vpdnuser] service-type ppp
[LNS-luser-vpdnuser] quit
# Configure local authentication for the VPN user.
[LNS] domain system
[LNS-isp-system] authentication ppp local
[LNS-isp-system] ip pool 1 192.168.0.2 192.168.0.100
[LNS-isp-system] quit
# Enable L2TP.
[LNS] l2tp enable
# Configure the virtual interface template.
[LNS] interface virtual-template 1
[LNS-virtual-template1] ip address 192.168.0.1 255.255.255.0
[LNS-virtual-template1] ppp authentication-mode chap domain system
[LNS-virtual-template1] remote address pool 1
[LNS-virtual-template1] quit
# Create an L2TP group, specify the virtual interface template for receiving calls and
specify the name of the tunnel on the peer.
[LNS] l2tp-group 1
[LNS-l2tp1] tunnel name LNS
[LNS-l2tp1] allow l2tp virtual-template 1 remote LAC
# Enable tunnel authentication and specify the tunnel authentication password.
[LNS-l2tp1] tunnel authentication
[LNS-l2tp1] tunnel password simple aabbcc
3) User side operation
In the dial-up network window, enter vpdnuser as the username, Hello as the password.
4) Verify the configurations
# After the dial-up connection is established, the user host can get an IP address
(192.168.0.2 for example) and can ping the private IP address of the LNS (192.168.0.1).
# On the LNS, use the display l2tp tunnel command to check the L2TP tunnels
established.
[LNS] dis l2tp tunnel
Total tunnel = 1
LocalTID RemoteTID RemoteAddress
1 1
# On the LNS, use the display l2tp session command to check the L2TP sessions
established.
[LNS] display l2tp session
Total session = 1
LocalSID RemoteSID
1.1.2.1
LocalTID
4-85
Port Sessions RemoteName
1701 1 LAC