msr3610-x1-winet的l2tp over ipsec的配置方法

L2tp over IPsec

首先需要IPsec起来，L2TP是后续的过程。如果L2TP起来了，则说明IPsec没有问题。

LAC-(G0/0)--------Internet-------(G0/0)-LNS

#
sysname LNS
#
interface Virtual-Template1
ppp authentication-mode pap
remote address 192.168.0.2
ip address 192.168.0.1 255.255.255.0
#
interface LoopBack0
ip address 10.1.0.1 255.255.255.255
#
interface GigabitEthernet0/0
ip address 4.4.4.1 255.255.255.0
nat outbound 3001
ipsec apply policy l2tp
#
ip route-static 10.2.0.0 16 192.168.0.2
#
acl advanced 3000
rule 0 permit ip source 4.4.4.1 0 destination 3.3.3.1 0
#
acl advanced 3001
rule 0 permit ip
#
local-user vpdnuser class network
password simple 123
service-type ppp
authorization-attribute user-role network-operator
#
ipsec transform-set l2tp
esp encryption-algorithm 3des-cbc
esp authentication-algorithm md5
#
ipsec policy l2tp 1 isakmp
transform-set l2tp
security acl 3000
remote-address 3.3.3.1
ike-profile l2tp
#
l2tp-group 1 mode lns
allow l2tp virtual-template 1 remote LAC
tunnel name LNS
tunnel password cipher $c$3$QCqzdcutv6NpVVqYiGokUsBwxSX8ig==
#
l2tp enable
#
ike profile l2tp
keychain l2tp
match remote identity address 3.3.3.1 255.255.255.255
#
ike keychain l2tp
pre-shared-key address 3.3.3.1 255.255.255.255 key simple 123
#