H3C路由器配置 L2tp + GRE

[H3C]dis cur

version 5.20, Release 2104P02

sysname H3C

l2tp enable--------------------开启 L2tp 服务器

nat address-group 1 209.9.9.24 209.9.9.24 -------------------------NAT地址池，由GRE 对端路由过来

domain default enable system

telnet server enable ----------------------------------------开启Telnet 服务

dar p2p signature-file flash:/p2p_default.mtd

port-security enable

acl number 2000-----------------------------------------用于策略路由的ACL ：1网段走 GRE ，2 网段走CT
rule 10 permit source 172.16.1.0 0.0.0.255
rule 20 deny
acl number 2001
rule 10 permit source 172.16.2.0 0.0.0.255
rule 20 deny
acl number 2003
rule 10 permit

vlan 1

domain system
access-limit disable
state active
idle-cut disable
self-service-url disable

user-group system

local-user admin---------------------------------------------------登陆用户名
password cipher XMVOHW99DISQ=-------------------------密码
authorization-attribute level 3--------------------最高登陆等级 3
service-type telnet------------------------用于 telnet
local-user cao001 -----------------------------------l2tp 账户
password cipher OUM!K%F<+$[Q<1!!--------------l2tp 密码
service-type ppp ------------------------------用于 l2tp 拨号

cwmp
undo cwmp enable

l2tp-group 10 ----------------------------------------------创建 l2tp 拨号组
undo tunnel authentication
tunnel name H3C-l2tp
start l2tp ip 121.33.66.25 fullusername cao001 -----------------------输入服务器IP地址和用户名

interface Aux0
async mode flow
link-protocol ppp

interface Cellular0/0
async mode protocol
link-protocol ppp

interface Ethernet0/0
port link-mode route

interface Ethernet0/1
port link-mode route
ip address 192.168.11.220 255.255.255.0

interface Ethernet0/4
port link-mode route
ip address 172.16.1.1 255.255.255.0

interface Virtual-Template10 ---------------------------------------------配置 l2tp 拨号接口
ppp authentication-mode chap
ppp chap user cao001 -------------------用户名
ppp chap password cipher OUM!K%F<+$[Q=^----------密码
ppp timer negotiate 5
l2tp-auto-client enable
ip address ppp-negotiate

interface NULL0

interface LoopBack0
ip address 208.9.9.24 255.255.255.255

interface Vlan-interface1
ip address 172.16.2.1 255.255.255.0

interface Ethernet0/2
port link-mode bridge

interface Ethernet0/3
port link-mode bridge

interface Tunnel275 ---------------------------------拨号成功后得到的IP段，再用来建立GRE
nat outbound 2003 address-group 1
ip address 192.168.102.46 255.255.255.252
source 10.10.90.85
destination 10.90.30.1
keepalive 10 2

route-policy ct permit node 10----------------------策略路由这里没有应用在接口上面
if-match acl 2000
apply tag 1 ----------------------------路由标记
route-policy ct permit node 20

ip route-static 0.0.0.0 0.0.0.0 192.168.102.45
ip route-static 120.31.66.215 255.255.255.255 192.168.11.1

load xml-configuration

load tr069-configuration

user-interface tty 12
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3

return
[H3C]
[H3C]
[H3C]dis ver
[H3C]dis version
H3C Comware Platform Software
Comware Software, Version 5.20, Release 2104P02
Copyright © 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved.
H3C MSR20-10 uptime is 0 week, 0 day, 4 hours, 16 minutes
Last reboot 2007/01/01 00:00:26
System returned to ROM By Command.

CPU type: FREESCALE MPC8323E 333MHz
256M bytes DDR SDRAM Memory
32M bytes Flash Memory
Pcb Version: 3.0
Logic Version: 1.0
Basic BootROM Version: 2.21
Extended BootROM Version: 2.23
[SLOT 0]AUX (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/0 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/1 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/2 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/3 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/4 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]CELLULAR0/0 (Hardware)3.0 (Driver)1.0, (Cpld)1.0

[H3C]
[H3C]
[H3C]dis ip int bei
[H3C]dis ip int bri
[H3C]dis ip int brief
*down: administratively down
(s): spoofing
Interface Physical Protocol IP Address Description
Aux0 down down unassigned Aux0 Inte…
Cellular0/0 down down unassigned Cellular0…
Ethernet0/0 down down unassigned Ethernet0…
Ethernet0/1 up up 192.168.11.220 Ethernet0…
Ethernet0/4 up up 172.16.1.1 Ethernet0…
LoopBack0 up up(s) 208.9.9.24 LoopBack0…
Tunnel275 up up 192.168.102.46 Tunnel275…
Virtual-Template10 up up(s) 10.10.90.85 Virtual-T…
Vlan-interface1 up up 172.16.2.1 Vlan-inte…
[H3C]
[H3C]
[H3C]dis cpu
[H3C]dis cpu-usage
[H3C]dis cpu-usage hi
[H3C]dis cpu-usage history
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
40%|
35%|
30%|
25%|
20%| ## # #
15%| # # # ## # # #
10%| # # # # # # # ## # # #
5%|############################################################
------------------------------------------------------------
10 20 30 40 50 60 (minutes)
cpu-usage last 60 minutes(SYSTEM)
[H3C]
[H3C]dis mem
[H3C]dis memory
System Total Memory(bytes): 171296000
Total Used Memory(bytes): 106179756
Used Rate: 61%
[H3C]
[H3C]

H3C路由器配置 L2tp + GRE相关推荐

万众期待的《Cisco/H3C路由器配置与管理完全手册》开锣了
自<Cisco/H3C交换机配置与管理完全手册>一书上市以来,得到许多热心网友和读者的支持与关注.虽然也有不少反对的声音,但听到最多的还是许多读者的真正肯定与对在书中提到的下一本图 ...
H3C路由器配置忘记密码恢复
H3C路由器配置忘记密码恢复 1,中端路由器1.74: ******************************************** * ...
华三路由交换配置命令_h3c路由器配置命令都有哪些 h3c路由器配置命令大全【详解】...
对于一般的家庭路由器而言,我们是不需要对他进行配置的.因为家庭路由器这一种小型路由器一般都已经了确定的指令去执行.但是对于一些大型路由器而言,配置命令是非常重要的.正是因为有了配置命令的存在,才能够使 ...
H3C路由器配置命令.doc
H3C 相关 1.system-view 进入系统视图模式 2.sysname 为设备命名 3.display current-configuration 当前配置情况 4. lang ...
H3C路由器配置DHCP,交换机透明。
要求PC设置dhcp自动从路由器处获得IP地址. 路由器配置: [H3C]sysname R1 [R1]int ge0/0 [R1-GigabitEthernet0/0]ip address 192. ...
H3C路由器配置——静态路由
一.网络畅通条件及排错思路 1.网络畅通的条件网络畅通的条件:数据包能去能回,也是我们排除网络故障的理论依据. 2.网络不畅通示列 ①.目标主机不可达原因分析:可能是数据包没有到达目的地,在中途就 ...
企业路由器配置L2TP 站点到站点模式Virtual Private Network指南_3（外网访问内网资源）
应用场景: 企业路由器提供多类VPN功能.其中L2TP VPN可以实现企业站点之间搭建安全的数据传输通道,将接入Internet的企业分支机构与总部网络通过安全隧道互联,实现资源.信息共享. 资源说 ...
H3C路由器配置——动态路由RIP协议
一.静态路由的不足静态路由适用于:小规模的网络.架构不怎么调整的网络.没有环路的网络二.RIP协议工作过程 2.1.工作特点 n路由信息协议RIP(Routing Information Prot ...
H3C路由器配置NAT
system-view System View: return to User View with Ctrl+Z. [H3C]interface GigabitEthernet 0/0 [H3C-Gi ...

H3C路由器配置 L2tp + GRE

H3C路由器配置 L2tp + GRE相关推荐

最新文章

热门文章