R3303-HP HSR6800 Routers Layer 2 - WAN Configuration Guide

93
# Modify the connection attributes, setting the protocol to L2TP, the encryption attribute to
customized and the authentication mode to CHAP.
3. Verify the configuration:
# On the user host, initiate the L2TP connection. After the connection is established, the user host
can obtain the IP address 192.168.0.2 and ping the private IP address of the LNS (192.168.0.1).
# On the LNS, use the display l2tp session command to check the established L2TP session.
[LNS-l2tp1] display l2tp session
Total session = 1
LocalSID RemoteSID LocalTID
647 1 1
# On the LNS, use the display l2tp tunnel command to check the established L2TP tunnel.
[LNS-l2tp1] display l2tp tunnel
Total tunnel = 1
LocalTID RemoteTID RemoteAddress Port Sessions RemoteName
1 5 2.1.1.1 1701 1 l2tpuser
Configuration example for L2TP multi-domain application
Network requirements
As shown in Figure 30, multiple enterprises share an LNS and use the same tunnel name for the LAC end.
Users of different enterprises access their corporate servers through L2TP VPDNs.
Host A is a user from enterprise 1, which has the domain name aaa.net.
Host B is a user from enterprise 2, which has the domain name bbb.net.
Figure 30 Network diagram
Configuration procedure
1. Configure the LAC:
In this example, GigabitEthernet 1/0/1 and GigabitEthernet 1/0/3 on the LAC are both user
access interfaces. The IP address of GigabitEthernet 1/0/2, through which the LAC connects to
the tunnel, is 1.1.2.1. The IP address of GigabitEthernet 1/0/1, through which the LNS connects
to the tunnel, is 1.1.2.2.
# Create two local users, set the passwords, and enable the PPP service.
<LAC> system-view