路由器，PPPOE+IPSEC VPN

pppoe+ipsec没做过，一般都是pppoe去触发L2tp over ipsec

L2TP Over IPSec(客户LAC+有测试iNode客户端+野蛮模式)

蓝色：L2TP关键配置

红色：IPSec关键配置

[LNS]dis current-configuration

#

 version 7.1.059, Alpha 7159

#

 sysname LNS

#

 ip pool 1 192.168.0.2 192.168.0.100

#

interface Virtual-Template1

 ppp authentication-mode chap domain system

 remote address pool 1

 ip address 192.168.0.1 255.255.255.0

#

interface GigabitEthernet0/0

 port link-mode route

 combo enable copper

 ip address 2.1.2.2 255.255.255.0

 ipsec apply policy my

#

interface GigabitEthernet0/1

 port link-mode route

 combo enable copper

 ip address 192.168.1.254 255.255.255.0

#

 ip route-static 0.0.0.0 0 2.1.2.254

#

domain system

 authentication ppp local

#

local-user vpdnuser class network

 password simple hello

 service-type ppp

 authorization-attribute user-role network-operator

#

ipsec transform-set 123

 esp encryption-algorithm 3des-cbc

 esp authentication-algorithm md5

#

ipsec policy-template 123 1

 transform-set 123

 ike-profile l2tp

#

ipsec policy my 10 isakmp template 123

#

l2tp-group 1 mode lns

 allow l2tp virtual-template 1 remote LAC

 tunnel name LNS

 tunnel password simple aabbcc

#

 l2tp enable

#

 ike identity fqdn

#

ike profile l2tp

 keychain l2tp

 exchange-mode aggressive

 local-identity fqdn lns

 match remote identity fqdn lac

#

ike keychain l2tp

 pre-shared-key hostname lac key simple abcde