User Manual - Configuration Guide (Volume 3)

Chapter 2

Versatile Routing Platform

Configuration of L2TP

Quidway(config-vpdn1)# local name LAC

Quidway(config-vpdn1)# request dialin l2tp ip 202.38.160.2 domain huawei.com Quidway(config-vpdn1)# ppp authentication pap

!Set user name and password. Quidway(config)# user vpnuser password 0 hello

!Start channel authentication and set channel authentication password. Quidway(config-vpdn1)# l2tp tunnel authentication Quidway(config-vpdn1)# l2tp tunnel password 0 quidway

!Set the suffix delimiter of a domain name to '@'.

Quidway(config)# vpdn domain-delimiter suffix @

!Search sequence: first search according to domain name, then according to called number.

Quidway(config)# vpdn search-order domaindnis

!Adopt AAA authentication. Quidway(config)# aaa-enable

Quidway(config)# aaa authentication ppp default local

3)The configuration of the router Quidway2 (at LNS side) ! Set a VPDN group and configure relative attributes

Quidway(config)# vpdn enable

Quidway(config)# vpdn-group 1

Quidway(config-vpdn1)# local name LNS

Quidway(config-vpdn1)# force local chap

Quidway(config-vpdn1)# accept dialin l2tp virtual-template 1 remote LAC

!Set user name and password (consistent with the user name and password at LAC side).

Quidway(config)# user vpnuser@huawei.com password 0 hello

!Start channel authentication and set channel authentication password to “quidway”. Quidway(config-vpdn1)# l2tp tunnel authentication

Quidway(config-vpdn1)# l2tp tunnel password 0 quidway

!Force local end to perform CHAP authentication

Quidway(config-vpdn1)# force-local-chap

!Set an address pool 1 and the address ranges between 192.168.0.2 and 192.168.0.100.

Quidway(config)# ip local poo1 1 192.168.0.2 192.168.0.100 ! Configure Virtual-Template 1.

2-18

Page 38
Image 38
Huawei v200r001 user manual Chapter