DVPN在ADSL网络上的典型配置组网

DVPN在ADSL网络上的典型配置组网

 

 

一、 组网需求

用户要求在ADSL网络环境中应用DVPN。

二、 组网图

 

三、 配置步骤

1.     配置中心

配置Ethernet1/0接口

[Server] interface Ethernet1/0

[Server-Ethernet1/0] ip address 61.138.27.17 255.255.255.252

配置Ethernet0/0接口

[Server] interface Ethernet0/0

[Server-Ethernet0/0/1] ip address 192.168.1.1 255.255.255.0

配置Tunnel0接口

[Server] interface tunnel 1

[Server-Tunnel1] tunnel-protocol udp dvpn

[Server-Tunnel1] dvpn interface-type server

[Server-Tunnel1] ip address 10.0.0.1 255.255.255.0

[Server-Tunnel1] source Ethernet1/0

[Server-Tunnel1] dvpn dvpn-id 100

配置路由信息

[Server] ip route-static 0.0.0.0 0.0.0.0 61.138.27.18

[Server] ip route-static 192.168.2.0 255.255.255.0 10.0.0.2

 

2.     配置PPPOE-Server设备

定义地址池

domain system

     ip pool 1 202.38.1.2 202.38.1.100

创建PPPOE帐号

local-user test

    password simple test

    service-type ppp

创建虚模板

interface Virtual-Template1

    ppp authentication-mode chap

 ip address 202.38.1.1 255.255.255.0

    remote address pool 1

在接口上启用PPPOE-Server

interface Ethernet0/0

pppoe-server bind Virtual-Template 1

      配置E1/0接口

interface Ethernet1/0

ip address 61.138.27.18 255.255.255.252

 

3.     配置分支设备

创建dialer拨号接口

interface Dialer1

 link-protocol ppp

    ppp chap user test

    ppp chap password simple test

    ip address ppp-negotiate

dialer user 1

dialer-group 1

    dialer bundle 1

在接口上启用PPPOE-Client

interface Ethernet1/0

[Client] interface Ethernet1/0

[Client-Ethernet0/0/0] ip address 192.168.2.1 255.255.255.0

配置dvpn-class

[Client] dvpn class server

[Client-class-server] public-ip 61.138.27.17

[Client-class-server] private-ip 10.0.0.1

配置Tunnel0接口属性

[Client1] interface tunnel 1

[Client1-Tunnel1] ip address 10.0.0.2 255.255.255.0

[Client1-Tunnel1] tunnel-protocol udp dvpn

[Client1-Tunnel1] source Dialer1

[Client1-Tunnel1] dvpn interface-type client

[Client1-Tunnel1] dvpn server server

[Client1-Tunnel1] dvpn vpn-id 100

配置静态路由

[Client1] ip route-static 0.0.0.0 0.0.0.0 Dialer 1

[Client1] ip route-static 192.168.1.0 255.255.255.0 10.0.0.1

 

四、 配置关键点

1、只有VRP3.4 E1604及以后的版本才具有加密功能；

2、NAT后面的分支不能和其它分支之间单独建立隧道(Session)；

3、分支默认路由指向Dialer 1。