Typical Configuration of L2TP | Huawei v200r001 guide

User Manual - Configuration Guide (Volume 3)		Chapter 2
Versatile Routing Platform		Configuration of L2TP
	Table VPN-2-19Description of “show l2tp tunnel” command domain

	Domain name	Meaning

	Total tunnels	Tunnel number
	LocID	The unique value of local end to identify a channel.
	RemID	The unique value of opposite end to identify a channel.
	Remote Name	The name of opposite end.
	Remote Address	IP address of opposite end.
	Port	Port number of opposite end.
	Sessions	Sessions number on the tunnel.

2)Show the current L2TP session information. Quidway# show l2tp session

LocID RemID TunID

1	1	2
Total session = 1
Table VPN-2-20 Description of			“show l2tp session” command domain

		Domain name		Meaning

Total sessions				The sum of sessions.
LocID				The unique value of local end to identify a session.
RemID				The unique value of opposite end to identify a session.
TunID				Identification number of the channel.

2.4 Typical Configuration of L2TP

2.4.1NAS-Initialized VPN

I.Networking requirement

The users can access Intranet of the company through local dial-up access to the Internet. The tunnel is used to transmit data between NAS and LNS and authenticate the channel.

II. Networking diagram

	Internet
	PSTN/IS
VPN user	Tunne	LNS

NASl

Headquarter of the corporation

Figure VPN-2-4Networking diagram of NAS-Initialized VPN

2-14

Image 34

Huawei v200r001 user manual Typical Configuration of L2TP, NAS-Initialized VPN, Networking requirement, Domain name Meaning

Contents

Huawei V200R001 Manual Version T2-080168-20011213-C-1.5 BOM31010868 Contents About This Manual Key 1 + Key Format Description KeyBracket, e.g. Enter , Tab , Backspace , or a Key 1, Key Symbol Action Description Security Configuration SC Huawei Configuration of IKE II. IKE features IKE Configuration Task List Creating IKE Security Policy No IKE security policy is created by default Select Authentication AlgorithmSelect Encryption Algorithm Select Hashing Algorithm Set Pre-shared KeySelect DH Group ID Set Lifetime of IKE Association SA Show IKE SA parameter Quidway# show crypto ike sa Networking requirements Show IKE security policy Quidway# show crypto ike policy II. Networking diagram III. Configuration procedure Problem 1 Invalid user ID information VPN Configuration VPN Table of Contents VPN features VPN Overview According to operation mode Classification of IP VPN II. According to the layer where the tunnel is III. According to service purpose IV. According to networking model Overview of Vpdn Configuration of L2TPBrief Introduction to L2TP Protocol Brief induction to Vpdn III. Method to realize Vpdn 2 L2TP ProtocolTunnel and session II. Control message and data message III. Two typical L2TP tunnel modes IV. Call setup flow of L2TP tunnel Call setup flow of L2TP channel is shown in the following Features of L2TP protocol Figure VPN-2-3Call setup flow of L2TP channel 1 L2TP Configuration Task List Configuring L2TPConfiguring at LAC Side Disable Vpdn to run by default II. Create Vpdn group IV. Set the connection request to originate L2TP channel Configuring at LNS SideDisable Vpdn running by default Table VPN-2-4L2TP attribute table Accept dialin l2tp virtual-template virtual III. Create/delete virtual interface templateNo vpdn group group-number No accept dialin III. Force local end to perform Chap authentication Optional configurationSet local name of channel IV. LNS forces LCP to renegotiate Local end does not perform Chap authentication by defaultLCP does not renegotiate by default Set domain name delimiter and search sequence VII. Enable/disable hiding AV pairs Disable hiding AV pairs by default Monitoring and Maintenance of L2TP VIII. Force to disconnect tunnel NAS-Initialized VPN Typical Configuration of L2TPShow l2tp session command domain Networking requirement III. Configuration procedure Figure VPN-2-5Networking diagram of Client-Initialized VPN Client-Initialized VPN Single User Interconnects Headquarters via Router Chapter Fault Diagnosis of L2TP Brief Introduction to GRE Protocol Configuration of GREBrief introduction to the protocol II. Applicable range Figure VPN-3-2Format of transmission message in the tunnel Configuring GRE GRE Configuration Task List Setting the Destination Address of Tunnel Interface Setting the Source Address of Tunnel InterfaceCreating Virtual Tunnel Interface Setting the Identification Key Word of Tunnel Interface Setting the Network Address of Tunnel InterfaceSetting the Encapsulation Mode of Tunnel Interface Message Setting Tunnel Interface to Check with Check Sum Disable tunnel interface to check with check sum by default Monitoring and Maintenance of GREShow interface tunnel tunnel-number Typical Configuration of GRE Figure VPN-3-6Networking diagram of GRE application Chapter Troubleshooting GRE Reliability Configuration LC Configuration of Backup Center Configuration of Hsrp Configuring the Backup Center Configuration of Backup CenterBackup Center Overview Configuration Task List Backup logic-channel logic-channel No backup delay Backup state-down number Configuring Routes for Main and Backup InterfacesBackup state-up interval-time An example of Backup Between Interfaces Monitoring and Maintaining of Backup CenterTypical Configuration of Backup Center An Example of Multiple Backup Interfaces Chapter Chapter Configuration of Hsrp Hsrp Overview Configuring Hsrp Starting Hsrp Function Setting Hsrp Authorization Word Setting Router’s Priority in Hsrp Hot Standby GroupSetting Router’s Preemption Mode in Hsrp Standby Group Standby group-number preempt Standby group-numberauthentication string Setting Hsrp TimerTable LC-2-4Set Hsrp authorization word Monitoring the Specified Interface Modifying Virtual MAC Address Using Actual Interface MAC AddressTable LC-2-6Monitor the specified interface Monitoring and Maintaining Hsrp Typical Configurations of HsrpAn example for single hot standby group configuration Show relevant Hsrp information Quidway# show standby 202.38.160.111 An example for setting Hsrp to monitor a specified interface An example for multiple hot standby groups configuration Fault Diagnosis and Troubleshooting of Hsrp QoS Configuration QC Configure CAR Rules Based on the MAC Address CAR Configuration ExampleApply CAR Rules to Packets Which is Matched the ACL II.Integrated Service Three service types of QoSBest-effort Service QoS Overview III. Differentiated Service Functions of QoS Chapter Traffic Classification and Policing II. CAR Committed Access RateTraffic Classification and Policing Introduction to Traffic Classification Features of Token Bucket Introduction to Traffic Policing II.Traffic Measuring with Token Bucket Introduction to CARIII Complicacy Evaluation No CAR rule is specified by default CAR ConfigurationCAR Configuration Task List Specify CAR rules Apply the CAR Rule on the Interface Monitoring and Maintenance of CARTable QC-2-3Monitoring and maintenance of CAR Show CAR statistics Quidway# show car interface serial Applying CAR Rules to All Packets CAR Configuration ExampleII.Configuration Requirements III. Configuration Apply CAR Rules to Packets Which is Matched the ACL Configure CAR Rules Based on the MAC Address Configure CAR Rules Based on the Priority LevelII.Networking diagram Chapter About Congestion Congestion ManagementCongestion and Congestion Management Congestion Management Policy II. PQ Priority Queuing IV. WFQ Weighted Fair QueuingFifo Queuing III. CQ Custom Queuing Selecting Congestion Management Policy Working Principle of Congestion Management Policy No. Advantages Disadvantages Queue Fifo III. CQ Configuring PQ Configuration of Congestion ManagementPQ Configuration task list II. Configuring priority queue Priority-list list-number interface type number high medium Normal low III. Applying priority queue to the interface Table QC-3-7Configuration of queue length of priority queueInterface adopts Fifo queuing by default IV. Maintaining and monitoring the priority queue CQ configuration task list Configuring CQII. Configuring the custom queue Operation Command Configure the default custom queue No custom-list list-number interface type number Custom-list list-number queue queue-number byte-count III. Applying custom queue to the interfaceNo custom-list list-number queue queue-number limit No custom-list list-number queue queue-number byte-count II. Configuring the weighted fair queue Configuring WFQWFQ configuration task list III. Maintenance and monitoring of the weighted fair queue PQ Configuration Example Configuration Example of Congestion ManagementCQ Configuration Example Figre QC-3-6Networking diagram of CQ Configuration Versatile Routing Platform Troubleshooting of Congestion Management DDR Configuration DC DDR Configuration Configuring Synchronous/Asynchronous Serial Port Using DDRDDR in Which the Router Calls Back PC Configuration of Modem Management Brief Introduction to Dial Configuration DDR ConfigurationIntroduction to DDR Technology Preparing DDR Configuration Figure DC-1-1DDR configuration preparation flow Configuration tasks of Legacy DDR include Configuring DDRConfiguring Legacy DDR II. Configure an interface to send calls Dialer string dial-string isdn-address Dialer rotary-group number III. Configure an interface to receive calls Figure DC-1-2Schematic diagram of Dialer Rotary Group IV. Configure an interface to send and receive calls Versatile Routing Platform DDR Configuration Set the attribute parameters of Legacy DDR Table DC-1-13Set the idle time of busy interface Access-list access-list-number deny permit Table DC-1-16Set access control of the dial interfaceAccess-list access-list-numberdeny permit Permit deny Default interval is 300 seconds Configuring Dialer ProfileIntroduction to Dialer Profile III. Configure a logic dial interface II. Configuration task list of Dialer ProfileIV. Set the attribute parameters of a dial interface Significance of callback Configuring CallbackBind physical interfaces for a dialer pool II. Terms and abbreviations Or dialer caller remote-number IV. Configure Isdn calling line identification callbackDialer caller remote-number callback Interface dialer Configure PPP callback User name callback-dialstring telephone-number Chapter Table DC-1-28Client end using Legacy DDR to configure PPP Configuring DDR Special Functions Configure Isdn dedicated line III. Configure cyclic use of dialer map II. Configure autodialAutodial interval is 300 seconds by default Table DC-1-34Configure cyclic use of dialer map Monitoring and Maintenance of DDRName Meaning Legacy DDR DDR Typical Configuration ExampleNetwork requirements Chapter Dialer Profile Chapter II. Configuration procedure Networking diagramPoint-to-Point DDR Chapter Chapter Point-to-Multipoint DDR 8810063 Chapter Chapter 8810052 Multipoint-to-Multipoint DDR8810148 III. Configuration procedure Chapter Chapter Chapter Chapter DDR Bearing IPX Chapter Chapter Chapter DDR Bearing IP and IPX at the Same Time Chapter Chapter Chapter 2.2 Flow Control of Dialer Profile MP over Dialer Profile-CaseRouterA RouterB BRI0 661012 Chapter Figure DC-1-11Networking diagram of DDR Case Channels for Dial-up and Connection to the Remote End Case Chapter Two Serial Ports for Dial-up and Remote Dial Connection Case One Serial Port for Dial-up and Remote Dial Connection Case Chapter DDR for Access Service Chapter Chapter Chapter Chapter DDR for Inter-Router Callback Chapter DDR in Which the Router Calls Back PC III. Configuration procedure DDR for Autodial DDR Using Dialer Map Cyclically DDR Using Dialer Map as Backup Solution 1 Logical interface as backup interface Chapter Configuring Dialer-group Precautions for DDR ConfigurationConfiguring Synchronous/Asynchronous Serial Port Using DDR Configuring Network Layer Address Configuring PPP In Dialer Profile Configuration Mode Apply PAP authentication Chapter II. Apply Chap authentication Chapter Configuring PPP In Legacy DDR Configuration Mode Chapter II. Apply Chap authentication Chapter DDR Fault Diagnosis Troubleshooting DDRConfigure Dialer-list Whether modem is normal III. Check whether dialer-group is configured IV. Check whether dialer-list is configured correctly Chapter DDR Fault Elimination How to acquire DDR debugging information Troubleshooting with DDR Debugging InformationInformation displayed at the calling end Information displayed at the call receiving end DDR link negotiation Down on interface Modem Script Configuration of Modem ManagementModem Management Functions Provided by VRP1.4 Function Timeout seconds Key words Description Configuring Modem Call-In and Call-Out Authorities Configuring Modem ManagementModem Management Configuration Task List Configuring Modem Script Executing Modem Script Manually Configuring Modem Answer ModeSpecifying the Event to Trigger Modem Script Typical Configuration of Modem Management Managing Modem with Modem Script Networking requirements Router Initialization with Initialization Script Configuration requirementsDirect Dial with Script Interactively Connect Cisco Router Through Modem VoIP Configuration VC VoIP Configuration IP Fax Configuration GK Client Configuration E1 Voice ConfigurationIphc Configuration Versatile Routing Platform Table of Contents VoIP Configuration VoIP Overview Basic composition VoIP PrincipleII. H.323 protocol stack IP Voice Implementation over VRP III. a typical telephone call processing by VoIP IP Voice Feature over VRP Switch Router Capacity channel Chapter VoIP Configuration Task List Configuring Dial-peer Pots dial-peer configuration II. VoIP dial-peer configuration Configuring Dial Terminator Ip precedence priority-number By default, we do not configure the dial terminator Configuring Abbreviated DialingConfiguring Voice Port By default, we do not configure the abbreviated dialing Table VC-1-6Configuring voice-port Configuring the Recovery Method of Voice Board Configuring Global Number Match PolicyBy default, please use the shortest number match policy VoIP Monitoring and Maintenance By default, Watchdog is enabled KHT Rcvccactivecall Channel = Status = Chtransframe Typical VoIP Configuration Examples Configuring Router FXS Port for Interconnection III. Configuration procedures Shanghai Chapter Figure VC-1-7RouterShenzhen FXO works in the Plar mode LAN VoIP Troubleshooting III. Configuration description Task List of IP Fax Configuration IP Fax ConfigurationConfiguring IP Fax Overview to IP Fax Configuring Fax Rate Checking If Configuring Fax to Use ECM ModeGateway does not use ECM mode by default By default, the fax rate will be determined by voice mode Configuring Fax Train ModeConfiguring Fax Local-train Threshold Value Mode is local-train mode local by default No fax protocol t38 ls-redundancy Configuring Gateway Carrier Transmit Energy LevelFax protocol t38 ls-redundancy number Fax protocol t38 hs-redundancy number By default, T.38 protocol is used Monitoring and Maintenance of IP FaxBy default, rtp protocol is used Typical Configuration of IP Fax Versatile Routing Platform IP Fax Configuration Chapter Function of E1 Voice E1 Voice ConfigurationOverview of E1 Voice Configuration Usage of cE1/PRI Interface II. Protocols and standards supported Features of E1 VoiceSignaling modes supported III. Support single stage dialing and two-stage dialing Configuring Pots dial-peer E1 Voice ConfigurationConfiguration Task List of E1 Voice IV. Integrated transmission of voice and data Incoming called-number number Configuring VoIP dial-peerTable VC-3-1Configuration Commands of Pots dial-peer No incoming called-number Configuring the Basic Parameters of E1 Interface Table VC-3-2Configuration Commands of VoIP dial-peer Configuring Voice Port E1 Interface Table VC-3-3Configuration Commands of E1 Interface Configuring DS0 group Configuring E1 Voice R2 SignalingTable VC-3-4Configuration Commands of E1 Voice Port II. Configuring Related Parameters of R2 Signaling By default, the system has not created any DS0 group Table VC-3-6Configuration Commands of R2 Signaling No pri-group Configuring the Basic Parameters of Isdn PRI InterfacePri-group timeslots timeslots-list Interface serial serial-no Configuring Voice Port Isdn PRI Interface Monitoring and Maintenance of E1 VoiceMaintaining the MFC Channel and Circuit of the Specified TS II. show Command Related to E1 Voice Quidway# show voice-port III. debug Commands Related to E1 Voice R2 signalling call statistics Table VC-3-11debug Commands of E1 Voice Typical Configuration Examples of E1 VoiceRouter Connected to PBX through E1 Voice Port Versatile Routing Platform Router Connected to PBX in Isdn PRI Mode Two-stage Dialing Configuration II. Netwoking diagram Parameter configuration of Beijing-side router Transmission of Data and Voice Simultaneously Fault Diagnosis and Troubleshooting of E1 Voice Configuration Task List of GK Client GK Client ConfigurationConfiguration of GK Client Configuring One Interface as H.323 Gateway Interface By default, GK Client function is deactivated Configuring Gateway AliasConfigure the GK Server Name and Address Activating or Deactivate GK Client Function Configuring GK Interworking Mode Configuring Tech-PrefixBy default, there is not any tech-prefix Be default, the GK interworking mode is cisco mode Typical Configuration Examples of GK ClientVersatile Routing Platform GK Client Configuration Chapter Fault Diagnosis and Troubleshooting of GK Client Iphc Configuration Overview of Iphc Enable/disable RTP header compression Iphc ConfigurationConfiguration Task List of Iphc No ip rtp compression-connections By default, the udpchk field in UDP packet field is set to Configure the Cisco-compatible RTP header compressionConfigure the deleting of udpchk field from UDP header No ip tcp header-compression Monitoring and Maintenance of Iphc Table VC-5-6Monitoring and Maintenance of Iphc How Are We Doing Excellent Good Fair Poor Mistake Suggested Correction Line No