l2tp over ipsec 在PC端网络为固定ip网络vpN可以建立连接,使用普通宽带PPPoe与使用手机作为热点,进行连接IKE认证可以过去到建立隧道会话失败。
# version 7.1.064, Release 0615P11
ip pool 1 172.18.29.2 172.18.29.62
# dhcp enable
# password-recovery enable
# interface Virtual-Template1
ppp authentication-mode chap domain h3c.com
remote address pool 1
ip address 172.18.29.1 255.255.255.192
# interface NULL0
# interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 10.10.10.2 255.255.255.0
ipsec apply policy 1
domain h3c.com
authorization-attribute ip-pool 1
authentication ppp local
# domain system
#domain default enable system
# local-user test class network password cipher $c$3$emDw4EQG0FH8S7GgJIGETwbAw3rzMQ6m
access-limit 5
service-type ppp
authorization-attribute user-role network-operator
# ipsec transform-set 1
esp encryption-algorithm aes-cbc-192
esp authentication-algorithm sha1
# ipsec transform-set 2
esp encryption-algorithm aes-cbc-128
esp authentication-algorithm sha1
# ipsec transform-set 3
esp encryption-algorithm aes-cbc-256
esp authentication-algorithm sha1
# ipsec transform-set 4
esp encryption-algorithm des-cbc
esp authentication-algorithm sha1
# ipsec transform-set 5
esp encryption-algorithm 3des-cbc
esp authentication-algorithm sha1
# ipsec transform-set 6
esp encryption-algorithm 3des-cbc
esp authentication-algorithm md5
# ipsec policy-template 1 1
transform-set 1 2 3 4 5 6
ike-profile 1
# ipsec policy 1 1 isakmp template 1
l2tp-group 1 mode lns
allow l2tp virtual-template 1 remote test.h3c.com
undo tunnel authentication
# l2tp enable
# ike profile 1
keychain 1
exchange-mode aggressive
local-identity address 10.10.10.2
local-identity fqdn jituan
match remote identity fqdn fenbu
match remote identity address 0.0.0.0 0.0.0.0
proposal 1
# ike proposal 1
encryption-algorithm 3des-cbc
dh group2
authentication-algorithm md5
# ike keychain 1
pre-shared-key address 0.0.0.0 0.0.0.0 key cipher $c $3$4LibJKRBpvHZomLf/f3bzjtOqgRKHe7Fc96M
return
(0)
最佳答案
pc使用的什么客户端? 配置nat穿越试试
(0)
使用iNode,配置了nat穿越,使用l2tp模式连接正常
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
使用iNode,配置了nat穿越,使用l2tp模式连接正常