R3303-HP HSR6800 Routers Layer 2 - WAN Configuration Guide

Figure 29 Network diagram

Configuration procedure

1. Configure the LNS:

# Configure IP addresses for the interfaces. (Details not shown.)

# Configure the route between the LNS and the user host. (Details not shown.)

# Create a local user named vpdnuser, set the password, and enable the PPP service. The

username and password must match those configured on the client.

<LNS> system-view

[LNS] local-user vpdnuser

[LNS-luser-vpdnuser] password simple Hello

[LNS-luser-vpdnuser] service-type ppp

[LNS-luser-vpdnuser] quit

# Configure local authentication for the VPN user.

[LNS] domain system

[LNS-isp-system] authentication ppp local

[LNS-isp-system] ip pool 1 192.168.0.2 192.168.0.100

[LNS-isp-system] quit

# Enable L2TP.

[LNS] l2tp enable

# Configure the VT interface.

[LNS] interface virtual-template 1

[LNS-virtual-template1] ip address 192.168.0.1 255.255.255.0

[LNS-virtual-template1] ppp authentication-mode chap domain system

[LNS-virtual-template1] remote address pool 1

[LNS-virtual-template1] quit

# Create an L2TP group and specify the VT interface for receiving calls.

[LNS] l2tp-group 1

[LNS-l2tp1] tunnel name LNS

[LNS-l2tp1] allow l2tp virtual-template 1

2. Configure the VPN user host:

{ Configure the IP address of the user host as 2.1.1.1, and configure a route to the LNS (1.1.2.2).

{ Create a virtual private network connection by using the Windows system, or install the L2TP

client software, such as WinVPN Client.

{ Complete the following configuration procedure (the procedure depends on the client

software):

# Specify the VPN username as vpdnuser and the password as Hello.

# Specify the Internet interface address of the security gateway as the IP address of the LNS. In this

example, the Ethernet interface for the tunnel on the LNS has an IP address of 1.1.2.2.