msr2600-10-winnet

是在客户端添加一条默认路由吗？route -p add 0.0.0.0 0.0.0.0 192.168.1.0   

注：192.168.1.0是lns的l2tp网段，这样行吗

如下配置：

#
version 5.20, Release 2513P09
#
sysname H3C
#
clock timezone Beijing add 08:00:00
#
l2tp enable
#
firewall enable
#
ip pool 0 192.18.0.2 192.18.0.100
#
domain default enable system
#
dns resolve
#
telnet server enable
#
dar p2p signature-file flash:/p2p_default.mtd
#
qos carl 1 source-ip-address range 192.168.0.5 to 192.168.0.248 per-address shared-bandwidth
vlan 1
#
vlan 2
#
domain system
authentication ppp local
access-limit disable
state active
idle-cut disable
self-service-url disable
ip pool 0 192.18.0.2 192.18.0.100
#
pki entity fd
common-name fd
#
pki domain fd
certificate request from ca
certificate request entity fd
crl check disable
#
traffic classifier group_jhjf operator or
traffic classifier group_jhjf_oper operator or
#
traffic behavior group_jhjf
traffic-policy group_jhjf
traffic behavior group_jhjf_band
traffic behavior behaviorfordeny
filter deny
#
#
local-user vpnou
password cipher $c$3$a4cpDw/c3/ys2g9LIIXt7HwdGdkhav9k97rXprcgaQ==
service-type ppp
#
ssl server-policy access-policy
pki-domain fd
#
cwmp
undo cwmp enable
#

l2tp-group 1
undo tunnel authentication
allow l2tp virtual-template 0
tunnel password cipher $c$3$0k1F1syUy4xGtMhwEC4HHpzh/n0I3mhAGQ==
tunnel name LNS
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Cellular0/0
async mode protocol
link-protocol ppp
qos apply policy PolicyLimitOut outbound
ddns apply policy ***.*** fqdn ***.***
#
interface Dialer10
nat outbound
nat server 4 protocol tcp global current-interface 51688 inside 192.168.0.254 www
nat server 1 protocol tcp global current-interface 51699 inside 192.168.0.254 telnet
link-protocol ppp
ppp chap user 07554200694456@163.gd
ppp chap password cipher $c$3$ZYKrQWTjeH4iHfWRkC+dK2e0+fc190jpMWOu
ppp pap local-user 07554200694456@163.gd password cipher $c$3$z3Sg36ZAX4JuRJ8/bO60rmP7Hngs/NpuoIDm
ppp ipcp dns admit-any
ppp ipcp dns request
mtu 1492
ip address ppp-negotiate
tcp mss 1024
dialer user username
dialer-group 10
dialer bundle 10
qos apply policy PolicyLimitOut outbound
qos car inbound carl 1 cir 25000 cbs 312500 ebs 0 green pass red discard
#
interface Virtual-Template0
ppp authentication-mode chap domain system
remote address pool
ip address 192.18.0.1 255.255.255.0
#
interface VE-L3VPN-Access1
#
interface VE-L2VPN-Terminate1
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.0.254 255.255.255.0
dhcp server apply ip-pool vlan1
firewall packet-filter 3000 inbound
ip flow-ordering internal
#
interface Vlan-interface2
ip address 192.168.1.254 255.255.255.0
ip flow-ordering internal
#
interface GigabitEthernet0/0
port link-mode route
nat outbound
pppoe-client dial-bundle-number 10
qos apply policy PolicyLimitOut outbound
qos car inbound carl 1 cir 25000 cbs 218750 ebs 0 green pass red discard
ip flow-ordering external
#
interface GigabitEthernet0/1
port link-mode route
shutdown
ip address dhcp-alloc
qos apply policy PolicyLimitOut outbound
ip flow-ordering external
#
interface GigabitEthernet0/2
port link-mode bridge
#
interface GigabitEthernet0/3
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet0/4
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet0/5
port link-mode bridge
port access vlan 2
#
interface GigabitEthernet0/6
port link-mode bridge
#
interface GigabitEthernet0/7
port link-mode bridge
#
interface GigabitEthernet0/8
port link-mode bridge
#
interface GigabitEthernet0/9
port link-mode bridge
#
#
voice-setup
#
sip
#
sip-server
#
call-rule-set
#
call-route
#
dial-program
#
aaa-client
#
gk-client
#
ssl-vpn server-policy access-policy
#
ip route-static 0.0.0.0 0.0.0.0 Dialer10
ip route-static 172.16.1.0 255.255.255.0 192.168.0.201
#
dhcp enable
#
ntp-service unicast-server 120.25.115.20
ntp-service unicast-server 203.107.6.88
#
arp static 192.168.0.248 9453-30a8-5af9
arp static 192.168.0.249 3464-a997-fb72 1 GigabitEthernet0/2
arp static 192.168.0.250 f092-1c92-c186 1 GigabitEthernet0/2
arp static 192.168.0.251 0026-7338-0199 1 GigabitEthernet0/2
arp static 192.168.0.252 6451-0624-6a2e 1 GigabitEthernet0/2
#
dialer-rule 10 ip permit
#
nms primary monitor-interface Dialer10
#
ip flow-ordering stat-interval 60
#
load xml-configuration
#
load tr069-configuration
#
user-interface tty 12
user-interface aux 0
user-interface vty 0 4
acl 2000 inbound
authentication-mode scheme
#
return