L2Tp Multi-Domain Application - H3C SR6600 Configuration Manual

[LNS-l2tp1] tunnel name LNS
[LNS-l2tp1] allow l2tp virtual-template 1
2) Configure the VPN user
On the user host, create a virtual private network connection by using the Windows system,
or install the L2TP client software (such as WinVPN Client) on the host and connect the
host to the Internet in dial-up mode. The IP address of the user host is 2.1.1.1. Configure
a route between the user host and the LNS (1.1.2.2), and then perform the following
configurations (the configuration procedure depends on the client software):
# Specify the VPN username as vpdnuser and the password as Hello.
# Specify the Internet interface address of the security gateway as the IP address of the
LNS. In this example, the GigabitEthernet interface for the tunnel on the LNS has an IP
address of 1.1.2.2.
# Modify the connection attributes, setting the protocol to L2TP, the encryption attribute to
customized and the authentication mode to CHAP.
3) Verify the configurations
# On the user host, initiate the L2TP connection. After the connection is established, the
user host can get the IP address 192.168.0.2 and can ping the private IP address of the
LNS (192.168.0.1).
# On the LNS, use the display l2tp session command to check the L2TP session
established.
[LNS-l2tp1] display l2tp session
Total session = 1
LocalSID
647
# On the LNS, use the display l2tp tunnel command to check the L2TP tunnel established.
[LNS-l2tp1] display l2tp tunnel
Total tunnel = 1
LocalTID RemoteTID RemoteAddress
1 5

L2TP Multi-Domain Application

Network requirements
Multiple enterprises share an LNS. Users of different enterprises access their corporate
servers through L2TP VPDNs respectively.
Host A is a user of enterprise 1, which has the domain name of aaa.net.
Host B is a user of enterprise 2, which has the domain name of bbb.net.
RemoteSID LocalTID
1 1
2.1.1.1
Port Sessions RemoteName
1701 1
4-87
l2tpuser