请问MSR V7路由器是否支持作为L2TP over IPsec的客户端?案例都只找到作为服务器端的案例。
MSR路由器(LAC)----------服务器(LNS)
(0)
最佳答案
MSR路由器支持作为L2TP客户端,即LAC,称为LAC-Auto-Initiated模式,MSR路由器可以自动向LNS发起建立隧道连接的请求,终端连接到LAC,既可以访问LNS侧网络,终端侧无需任何设置,方便快捷。
#
sysname LAC
#
ospf 1
area 0.0.0.0
network 3.3.3.0 0.0.0.255
#
interface Virtual-PPP1
ppp pap local-user vpdnuser password cipher $c$3$YBnvho4O9SJXmGxQHELe0Hne7/kdmXgr
ip address ppp-negotiate
l2tp-auto-client l2tp-group 1
#
interface LoopBack0
ip address 10.2.0.1 255.255.255.255
#
interface GigabitEthernet0/0
ip address 3.3.3.1 255.255.255.0
nat outbound 3001
ipsec apply policy l2tp
#
ip route-static 10.1.0.0 16 Virtual-PPP1
#
acl advanced 3000
rule 5 permit ip source 3.3.3.1 0 destination 4.4.4.1 0
#
acl advanced 3001
rule 0 permit ip
#
ipsec transform-set l2tp
esp encryption-algorithm 3des-cbc
esp authentication-algorithm md5
#
ipsec policy l2tp 1 isakmp
transform-set l2tp
security acl 3000
remote-address 4.4.4.1
ike-profile l2tp
#
l2tp-group 1 mode lac
lns-ip 4.4.4.1
tunnel name LAC
tunnel password cipher $c$3$bkNsoiLTv2A/lo2qgrzDE+OqmRBdoQ==
#
l2tp enable
#
ike profile l2tp
keychain l2tp
match remote identity address 4.4.4.1 255.255.255.255
#
ike keychain l2tp
pre-shared-key address 4.4.4.1 255.255.255.255 key cipher $c$3$2a6rbjwGuQfE5gBPOBfEX41I+WAw0w==
#
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论