#
version 5.20, Release 2516P28
#
sysname 12F-Router
#
password-control enable
undo password-control aging enable
undo password-control history enable
password-control length 6
password-control login-attempt 3 exceed lock-time 10
password-control password update interval 0
password-control login idle-time 0
password-control complexity user-name check
#
l2tp enable
#
domain default enable system
#
dns proxy enable
#
dar p2p signature-file flash:/p2p_default.mtd
#
port-security enable
#
password-recovery enable
#
acl number 2000 match-order auto
rule 5 permit source 192.168.12.0 0.0.0.255
rule 0 permit
#
vlan 1
#
domain system
authentication ppp local
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 1 192.168.0.2 192.168.0.100
#
user-group system
group-attribute allow-guest
#
local-user admin
authorization-attribute level 3
service-type web
local-user cheshi
authorization-attribute level 3
service-type web
local-user test
authorization-attribute level 2
service-type ppp
local-user test1
authorization-attribute level 2
service-type ppp
local-user vpdnuser
authorization-attribute level 2
service-type ppp
#
cwmp
undo cwmp enable
#
l2tp-group 1
undo tunnel authentication
mandatory-lcp
allow l2tp virtual-template 0
tunnel name LNS
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Cellular0/0
async mode protocol
link-protocol ppp
#
interface Virtual-Template0
ppp authentication-mode chap domain system
ppp ipcp remote-address forced
remote address pool 1
ip address 192.168.0.1 255.255.255.0
#
interface Virtual-Template1
ppp authentication-mode chap domain system
remote address pool
#
interface Virtual-Ethernet0
#
interface NULL0
#
interface Vlan-interface1
undo dhcp select server global-pool
#
interface GigabitEthernet0/0
port link-mode route
nat outbound 2000
ip address 111.1.136.25 255.255.255.0
dns server 201.14.188.188
#
interface GigabitEthernet0/1
port link-mode route
ip address 100.81.32.185 255.255.255.252
#
interface GigabitEthernet0/2
port link-mode route
ip address 10.10.1.1 255.255.255.224
#
interface GigabitEthernet0/4
port link-mode route
#
interface GigabitEthernet0/9
port link-mode route
ip address 10.251.251.251 255.255.255.0
#
interface Tunnel1
ip address 172.16.0.2 255.255.255.252
source GigabitEthernet0/1
destination 100.70.255.102
#
ospf 1
area 0.0.0.1
network 10.10.1.0 0.0.0.31
network 111.1.136.0 0.0.0.255
#
ip route-static 0.0.0.0 0.0.0.0 111.1.136.1
ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet0/1 100.81.32.186
ip route-static 10.10.1.0 255.255.255.224 111.1.136.1
ip route-static 10.60.0.0 255.255.248.0 172.16.0.1
ip route-static 100.70.255.102 255.255.255.255 100.81.32.186
#
ip https enable
#
nms primary monitor-interface GigabitEthernet0/1
#
load xml-configuration
#
load tr069-configuration
#
user-interface tty 12
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
暂无评论