MSR3610 建立.2TP服务端

#

version 7.1.064, Release 0605P18

#

sysname H3C

#

telnet server enable

#

ip pool l2tp1 192.168.202.10 192.168.202.200

#

dhcp server always-broadcast

#

dns proxy enable

#

password-recovery enable

#

vlan 1

#

vlan 89

#

dhcp server ip-pool 89

gateway-list 192.168.89.1

network 192.168.89.0 mask 255.255.255.0

address range 192.168.89.10 192.168.89.200

dns-list 211.137.191.26

#

dhcp server ip-pool lan1

gateway-list 192.168.0.1

network 192.168.0.0 mask 255.255.254.0

address range 192.168.1.2 192.168.1.254

dns-list 192.168.0.1

#

controller Cellular0/0

#

interface Virtual-Template0

#

interface Virtual-Template1

ppp authentication-mode chap domain system

remote address pool l2tp1

ip address 192.168.202.1 255.255.255.0

#

interface NULL0

#

interface Vlan-interface89

#

interface GigabitEthernet0/0

port link-mode route

ip address 192.168.0.1 255.255.255.0

undo dhcp select server

#

interface GigabitEthernet0/1

port link-mode route

ip address 111.17.164.52 255.255.255.248

nat outbound

#

interface GigabitEthernet0/2

port link-mode route

combo enable copper

ip address 192.168.89.1 255.255.255.0

#

interface GigabitEthernet0/3

port link-mode route

combo enable copper

#

interface GigabitEthernet0/4

port link-mode route

#

interface GigabitEthernet0/5

port link-mode route

#

security-zone name Local

#

security-zone name Trust

#

security-zone name DMZ

#

security-zone name Untrust

#

security-zone name Management

#

scheduler logfile size 16

#

line class console

user-role network-admin

#

line class tty

user-role network-operator

#

line class vty

user-role network-operator

#

line con 0

user-role network-admin

#

line vty 0 63

authentication-mode scheme

user-role network-operator

#

ip route-static 0.0.0.0 0 111.17.164.49

ip route-static 10.0.0.0 8 10.37.69.1

#

domain system

authentication ppp local

#

domain default enable system

#

role name level-0

description Predefined level-0 role

#

role name level-1

description Predefined level-1 role

#

role name level-2

description Predefined level-2 role

#

role name level-3

description Predefined level-3 role

#

role name level-4

description Predefined level-4 role

#

role name level-5

description Predefined level-5 role

#

role name level-6

description Predefined level-6 role

#

role name level-7

description Predefined level-7 role

#

role name level-8

description Predefined level-8 role

#

role name level-9

description Predefined level-9 role

#

role name level-10

description Predefined level-10 role

#

role name level-11

description Predefined level-11 role

#

role name level-12

description Predefined level-12 role

#

role name level-13

description Predefined level-13 role

#

role name level-14

description Predefined level-14 role

#

user-group system

#

local-user aaa class manage

authorization-attribute user-role network-operator

#

local-user admin class manage

password hash $h$6$EebVC6Zgrv6nwu1F$8+xBhQ3qlZRr8JvIFLKVeWaxejmrfb4X93EvNr92cJAo0IwjkKin6n4dXxxreA9C/bUtHAO9grf5LPVnKJGJhQ==

service-type telnet http

authorization-attribute user-role network-admin

#

local-user aaa class network

password cipher $c$3$izRZxewyoU+piQOCkolWLwlk9y/uIpFqBQ==

access-limit 1

service-type ppp

authorization-attribute user-role network-admin

authorization-attribute ip 192.168.202.198

#

local-user user class network

password cipher $c$3$TwBlgXLD/eKNWPiz6Wtb6uEw9RFSk+FVtYY=

access-limit 1

service-type ppp

authorization-attribute user-role network-admin

authorization-attribute ip 192.168.202.200

#

local-user zhou class network

password cipher $c$3$AMyIa/LyaADZ/StySIdgnAivOjWL2IKZJlX3

access-limit 1

service-type ppp

authorization-attribute user-role network-admin

authorization-attribute ip 192.168.202.199

#

l2tp-group 1 mode lns

allow l2tp virtual-template 1

undo tunnel authentication

#

l2tp enable

#

ip http enable

#

wlan global-configuration

control-address disable

#

wlan ap-group default-group

#

cloud-management server domain oasis.h3c.com

#

return