H3C Secpath防火墙组合配置 实现移动用户VPN连接

#
sysname center
#
super password level 3 cipher
#
l2tp enable
#
local-user xxx password simple xxx
local-user xxx service-type telnet
local-user zzz password simple zzz
local-user zzz service-type ppp
#
ip pool 1 192.168.100.2 192.168.100.100
#
aaa enable
aaa authentication-scheme local-first
#
ike local-name center
#
ike peer l2tpuser
exchange-mode aggressive
pre-shared-key yyyyy
id-type name
remote-name client
nat traversal
max-connections 1000
#
ipsec proposal l2tp
#
ipsec policy-template test 1
ike-peer l2tpuser
proposal l2tp
#
ipsec policy l2tp 1 isakmp template test
#
interface Virtual-Template1
ppp authentication-mode pap
ip address 192.168.100.1 255.255.255.0
remote address pool 1
#
interface Aux0
undo detect dsr-dtr
async mode flow
link-protocol ppp
#
interface Ethernet0/0
ip address
ipsec policy l2tp
#
interface Ethernet0/1
tcp mss 1350
ip address
#
interface NULL0
#
l2tp-group 1
mandatory-chap
undo tunnel authentication
allow l2tp virtual-template 1
#
ip route-static 0.0.0.0 0.0.0.0 vvvvvvv preference 60
#
snmp-agent
snmp-agent local-engineid 000007DB7F00000100000026
snmp-agent sys-info version v3
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode local
idle-timeout 0 0
#
return

【相关文章】

• H3C SecPath“F”系列防火墙基本配置

• 利用H3C Secpath防火墙限制TCP会话连接

• Secpath1800F策略路由功能的配置