华三msr20-15 l2tp配置

对端是什么设备？对端配置检查了吗？ 

没有解决。

[jiakaozhongxin-Virtual-Template0]disp
[jiakaozhongxin-Virtual-Template0]display this
#
interface Virtual-Template0
ppp authentication-mode chap domain l2tp
remote address pool
ip address 10.168.168.1 255.255.255.0
#
return
[jiakaozhongxin-Virtual-Template0]quit
[jiakaozhongxin]disp
[jiakaozhongxin]display cu
[jiakaozhongxin]display current-configuration
#
version 5.20, Release 1719
#
sysname jiakaozhongxin
#
l2tp enable
#
undo info-center enable
#
ip pool 0 10.168.168.2 10.168.168.254
#
domain default enable system
#
telnet server enable
#
vlan 1
#
domain l2tp
authentication ppp local
authorization ppp local
accounting ppp local
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 10.168.168.2 10.168.168.254
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
authorization-attribute level 3
service-type telnet
local-user jkzx
password cipher +*QZ'E3P&G_Q=^Q`MAF4<1!!
authorization-attribute level 3
service-type telnet
local-user xcjkzx8
password simple xcjkzx8
bind-attribute ip 10.168.168.18
authorization-attribute level 3
access-limit 1
service-type ppp
local-user xcjkzx9
password simple xcjkzx9
bind-attribute ip 10.168.168.22
authorization-attribute level 3
access-limit 1
service-type ppp
#
l2tp-group 1
mandatory-chap
undo tunnel authentication
mandatory-lcp
allow l2tp virtual-template 0 remote LAC
tunnel name LNS
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Ethernet0/0
port link-mode route
description To-ChinaUnicom

[jiakaozhongxin]loc
[jiakaozhongxin]local-user xcjkzx9
[jiakaozhongxin-luser-xcjkzx9]undo au
[jiakaozhongxin-luser-xcjkzx9]undo authorization-attribute ?
acl Specify ACL number of user
callback-number Specify dialing character string for callback user
idle-cut Specify idle-cut of local user
level Specify level of user
user-profile Specify user profile of user
vlan Specify VLAN ID of user
work-directory Specify directory of user
[jiakaozhongxin-luser-xcjkzx9]undo authorization-attribute le
[jiakaozhongxin-luser-xcjkzx9]undo authorization-attribute level ?
acl Specify ACL number of user
callback-number Specify dialing character string for callback user
idle-cut Specify idle-cut of local user
user-profile Specify user profile of user
vlan Specify VLAN ID of user
work-directory Specify directory of user
<cr>
[jiakaozhongxin-luser-xcjkzx9]undo authorization-attribute level
[jiakaozhongxin-luser-xcjkzx9]
[jiakaozhongxin-luser-xcjkzx9]
[jiakaozhongxin-luser-xcjkzx9]
[jiakaozhongxin-luser-xcjkzx9]quit
[jiakaozhongxin]disp
[jiakaozhongxin]display l2tp tu
[jiakaozhongxin]display l2tp tunnel ?
<cr>
[jiakaozhongxin]display l2tp tunnel
Total tunnel = 0

LocalTID RemoteTID RemoteAddress Port Sessions RemoteName
[jiakaozhongxin]display l2tp tunnel
Total tunnel = 0

LocalTID RemoteTID RemoteAddress Port Sessions RemoteName
[jiakaozhongxin]l2tp ser
[jiakaozhongxin]l2tp ?
enable Enable L2TP function
sendaccm Send accm information
[jiakaozhongxin]l2tp en
[jiakaozhongxin]l2tp enable ?
<cr>
[jiakaozhongxin]l2tp ?
enable Enable L2TP function
sendaccm Send accm information
[jiakaozhongxin]local-user xcjkzx9
[jiakaozhongxin-luser-xcjkzx9]disp
[jiakaozhongxin-luser-xcjkzx9]display this
#
local-user xcjkzx9
password simple xcjkzx9
bind-attribute ip 10.168.168.22
access-limit 1
service-type ppp
#
return
[jiakaozhongxin-luser-xcjkzx9]undo acc
[jiakaozhongxin-luser-xcjkzx9]undo access-limit 1 ?
^
% Too many parameters found at '^' position.
[jiakaozhongxin-luser-xcjkzx9]undo access-limit 1
^
% Too many parameters found at '^' position.
[jiakaozhongxin-luser-xcjkzx9]undo access-limit
[jiakaozhongxin-luser-xcjkzx9]disp
[jiakaozhongxin-luser-xcjkzx9]display this
#
local-user xcjkzx9
password simple xcjkzx9
bind-attribute ip 10.168.168.22
service-type ppp
#
return
[jiakaozhongxin-luser-xcjkzx9]undo bi
[jiakaozhongxin-luser-xcjkzx9]undo bind-attribute ip
[jiakaozhongxin-luser-xcjkzx9]bi
[jiakaozhongxin-luser-xcjkzx9]bind-attribute ip ?
X.X.X.X IP address
[jiakaozhongxin-luser-xcjkzx9]bind-attribute ip 10.168.168.22 ?
call-number Specify ISDN calling number
location Specify bind location of local user
mac Specify MAC address of local user
vlan Specify VLANID of local user
<cr>
[jiakaozhongxin-luser-xcjkzx9]bind-attribute ip 10.168.168.22
[jiakaozhongxin-luser-xcjkzx9]quit
[jiakaozhongxin]disp
[jiakaozhongxin]display l2tp ?
session L2TP session status and configuration information
tunnel L2TP tunnel status and configuration information
[jiakaozhongxin]display l2tp tu
[jiakaozhongxin]display l2tp tunnel
Total tunnel = 0

LocalTID RemoteTID RemoteAddress Port Sessions RemoteName
[jiakaozhongxin]display l2tp se
[jiakaozhongxin]display l2tp session
Total session = 0

LocalSID RemoteSID LocalTID
[jiakaozhongxin]do
[jiakaozhongxin]doma
[jiakaozhongxin]domain l2tp
[jiakaozhongxin-isp-l2tp]disp
[jiakaozhongxin-isp-l2tp]display this
#
domain l2tp
authentication ppp local
authorization ppp local
accounting ppp local
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 10.168.168.2 10.168.168.254
#
return
[jiakaozhongxin-isp-l2tp]au
[jiakaozhongxin-isp-l2tp]authe
[jiakaozhongxin-isp-l2tp]authentication ppp ?
hwtacacs-scheme Specify HWTACACS scheme
local Specify local scheme
none Specify none scheme
radius-scheme Specify RADIUS scheme
[jiakaozhongxin-isp-l2tp]undo au
[jiakaozhongxin-isp-l2tp]undo authen
[jiakaozhongxin-isp-l2tp]undo authentication ?
default Specify default AAA configuration
lan-access Specify lan-access AAA configuration
login Specify login AAA configuration
portal Specify portal AAA configuration
ppp Specify ppp AAA configuration
voip Specify voip AAA configuration
[jiakaozhongxin-isp-l2tp]undo authentication ppp ?
<cr>
[jiakaozhongxin-isp-l2tp]undo authentication ppp
[jiakaozhongxin-isp-l2tp]disp
[jiakaozhongxin-isp-l2tp]display this
#
domain l2tp
authorization ppp local
accounting ppp local
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 10.168.168.2 10.168.168.254
#
return
[jiakaozhongxin-isp-l2tp]undo auth
[jiakaozhongxin-isp-l2tp]undo authentication ppp ?
<cr>
[jiakaozhongxin-isp-l2tp]undo authentication ppp
[jiakaozhongxin-isp-l2tp]disp
[jiakaozhongxin-isp-l2tp]display this
#
domain l2tp
authorization ppp local
accounting ppp local
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 10.168.168.2 10.168.168.254
#
return
[jiakaozhongxin-isp-l2tp]undo autho
[jiakaozhongxin-isp-l2tp]undo authorization ?
command Specify command AAA configuration
default Specify default AAA configuration
lan-access Specify lan-access AAA configuration
login Specify login AAA configuration
portal Specify portal AAA configuration
ppp Specify ppp AAA configuration
voip Specify voip AAA configuration
[jiakaozhongxin-isp-l2tp]undo authorization ppp ?
<cr>
[jiakaozhongxin-isp-l2tp]undo authorization ppp
[jiakaozhongxin-isp-l2tp]disp
[jiakaozhongxin-isp-l2tp]display this
#
domain l2tp
accounting ppp local
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 10.168.168.2 10.168.168.254
#
return
[jiakaozhongxin-isp-l2tp]undo acc
[jiakaozhongxin-isp-l2tp]undo acco
[jiakaozhongxin-isp-l2tp]undo accounting ppp ?
<cr>
[jiakaozhongxin-isp-l2tp]undo accounting ppp
[jiakaozhongxin-isp-l2tp]disp
[jiakaozhongxin-isp-l2tp]display this
#
domain l2tp
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 10.168.168.2 10.168.168.254
#
return
[jiakaozhongxin-isp-l2tp]quit
[jiakaozhongxin]quit
<jiakaozhongxin>sa
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait.................
Configuration is saved to device successfully.
<jiakaozhongxin>sys
System View: return to User View with Ctrl+Z.
[jiakaozhongxin]l2tpm
[jiakaozhongxin]l2tpmoreexam ?
enable Enable l2tp more example function
[jiakaozhongxin]l2tpmoreexam en
[jiakaozhongxin]l2tpmoreexam enable
[jiakaozhongxin]disp
[jiakaozhongxin]display l2tp tu
[jiakaozhongxin]display l2tp tunnel
Total tunnel = 0

LocalTID RemoteTID RemoteAddress Port Sessions RemoteName
[jiakaozhongxin]display l2tp se
[jiakaozhongxin]display l2tp session
Total session = 0

LocalSID RemoteSID LocalTID
[jiakaozhongxin]disp
[jiakaozhongxin]
[jiakaozhongxin]loc
[jiakaozhongxin]local-user xcjkzx9
[jiakaozhongxin-luser-xcjkzx9]disp
[jiakaozhongxin-luser-xcjkzx9]display this
#
local-user xcjkzx9
password simple xcjkzx9
bind-attribute ip 10.168.168.22
service-type ppp
#
return
[jiakaozhongxin-luser-xcjkzx9]au
[jiakaozhongxin-luser-xcjkzx9]authorization-attribute ?
acl Specify ACL number of user
callback-number Specify dialing character string for callback user
idle-cut Specify idle-cut of local user
level Specify level of user
user-profile Specify user profile of user
vlan Specify VLAN ID of user
work-directory Specify directory of user
[jiakaozhongxin-luser-xcjkzx9]quit
[jiakaozhongxin]do
[jiakaozhongxin]doma
[jiakaozhongxin]domain l2tp
[jiakaozhongxin-isp-l2tp]?
Isp view commands:
access-limit Specify access limit of domain
accounting Specify accounting scheme
authentication Specify authentication scheme
authorization Specify authorization scheme
dialer Dialer disconnect
display Display current system information
idle-cut Specify idle-cut attribute of domain
ip Specify IP configurations for the system
mtracert Trace route to multicast source
ping Ping function
quit Exit from current command view
return Exit to User View
save Save current configuration
self-service-url Specify self-service URL(Uniform Resource Locator) of
domain
state Specify state of domain
tracert Trace route function
undo Cancel current setting
[jiakaozhongxin-isp-l2tp]au
[jiakaozhongxin-isp-l2tp]authen
[jiakaozhongxin-isp-l2tp]authentication ?
default Specify default AAA configuration
lan-access Specify lan-access AAA configuration
login Specify login AAA configuration
portal Specify portal AAA configuration
ppp Specify ppp AAA configuration
voip Specify voip AAA configuration
[jiakaozhongxin-isp-l2tp]authentication ppp ?
hwtacacs-scheme Specify HWTACACS scheme
local Specify local scheme
none Specify none scheme
radius-scheme Specify RADIUS scheme
[jiakaozhongxin-isp-l2tp]authentication ppp lo
[jiakaozhongxin-isp-l2tp]authentication ppp no
[jiakaozhongxin-isp-l2tp]authentication ppp none
[jiakaozhongxin-isp-l2tp]disp
[jiakaozhongxin-isp-l2tp]display this
#
domain l2tp
authentication ppp none
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 10.168.168.2 10.168.168.254
#
return
[jiakaozhongxin-isp-l2tp]au
[jiakaozhongxin-isp-l2tp]autho
[jiakaozhongxin-isp-l2tp]authorization ppp no
[jiakaozhongxin-isp-l2tp]authorization ppp none
[jiakaozhongxin-isp-l2tp]acc
[jiakaozhongxin-isp-l2tp]acco
[jiakaozhongxin-isp-l2tp]accounting ppp no
[jiakaozhongxin-isp-l2tp]accounting ppp none
[jiakaozhongxin-isp-l2tp]quit
[jiakaozhongxin]disp
[jiakaozhongxin]display l2tp tu
[jiakaozhongxin]display l2tp tunnel ?
<cr>
[jiakaozhongxin]display l2tp tunnel
Total tunnel = 0

LocalTID RemoteTID RemoteAddress Port Sessions RemoteName
[jiakaozhongxin]domain l2tp
[jiakaozhongxin-isp-l2tp]authorization ppp lo
[jiakaozhongxin-isp-l2tp]authorization ppp local
[jiakaozhongxin-isp-l2tp]accounting ppp lo
[jiakaozhongxin-isp-l2tp]accounting ppp local
[jiakaozhongxin-isp-l2tp]authorization ppp lo
[jiakaozhongxin-isp-l2tp]authorization ppp local
[jiakaozhongxin-isp-l2tp]quit
[jiakaozhongxin]

[jiakaozhongxin]disp
[jiakaozhongxin]display cu
[jiakaozhongxin]display current-configuration
#
version 5.20, Release 1719
#
sysname jiakaozhongxin
#
l2tp enable
l2tpmoreexam enable
#
undo info-center enable
#
ip pool 0 10.168.168.2 10.168.168.254
#
domain default enable system
#
telnet server enable
#
vlan 1
#
domain l2tp
authentication ppp none
authorization ppp local
accounting ppp local
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 10.168.168.2 10.168.168.254
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
authorization-attribute level 3
service-type telnet
local-user jkzx
password cipher +*QZ'E3P&G_Q=^Q`MAF4<1!!
authorization-attribute level 3
service-type telnet
local-user xcjkzx8
password simple xcjkzx8
bind-attribute ip 10.168.168.18
authorization-attribute level 3
access-limit 1
service-type ppp
local-user xcjkzx9
password simple xcjkzx9
bind-attribute ip 10.168.168.22
service-type ppp
#
l2tp-group 1
mandatory-chap
undo tunnel authentication
mandatory-lcp
allow l2tp virtual-template 0 remote LAC
tunnel name LNS
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Ethernet0/0
port link-mode route
description To-ChinaUnicom
ip address 58.243.108.90 255.255.255.252
tcp mss 1024
#
interface Ethernet0/1
port link-mode route
ip address 192.168.5.1 255.255.255.0
tcp mss 1024
#
interface Virtual-Template0
ppp authentication-mode chap domain l2tp
remote address pool
ip address 10.168.168.1 255.255.255.0
#
interface Atm0/0
#
interface NULL0
#
interface Ethernet0/2
port link-mode bridge
#
interface Ethernet0/3
port link-mode bridge
#
interface Ethernet0/4
port link-mode bridge
#
interface Tunnel0
ip address 192.168.13.14 255.255.255.252
source 58.243.108.90
destination 58.243.248.30
#
interface Tunnel1
ip address 192.168.33.14 255.255.255.252
source 58.243.108.90
destination 58.243.255.31
#
ip route-static 0.0.0.0 0.0.0.0 58.243.108.89
ip route-static 192.13.6.0 255.255.255.224 Tunnel0
ip route-static 192.13.136.0 255.255.255.224 Tunnel1
ip route-static 192.168.188.88 255.255.255.248 10.168.168.18
ip route-static 192.168.188.104 255.255.255.248 10.168.168.22
#
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return

[jiakaozhongxin]