HP VPN Firewall Appliances VPN Configuration Guide

253
[LAC-luser-vpdn2] service-type ppp
[LAC-luser-vpdn2] quit
# Configure local authentication for the users.
[LAC] domain aaa.net
[LAC-isp-aaa.net] authentication ppp local
[LAC-isp-aaa.net] quit
[LAC] domain bbb.net
[LAC-isp-bbb.net] authentication ppp local
[LAC-isp-bbb.net] quit
# Configure PPPoE servers on interface GigabitEthernet 0/1 and GigabitEthernet 0/3.
[LAC] interface gigabitethernet 0/3
[LAC-GigabitEthernet0/3] pppoe-server bind virtual-template 100
[LAC-GigabitEthernet0/3] quit
[LAC] interface gigabitethernet 0/1
[LAC-GigabitEthernet0/1] pppoe-server bind virtual-template 101
[LAC-GigabitEthernet0/1] quit
# Configure an IP address for interface GigabitEthernet 0/2.
[LAC] interface gigabitethernet 0/2
[LAC-GigabitEthernet0/2] ip address 1.1.2.1 255.255.255.0
[LAC-GigabitEthernet0/2] quit
# Create the VT interfaces and configure CHAP authentication.
[LAC] interface virtual-template 100
[LAC-Virtual-Template100] ppp authentication-mode chap domain aaa.net
[LAC-Virtual-Template100] quit
[LAC] interface virtual-template 101
[LAC-Virtual-Template101] ppp authentication-mode chap domain bbb.net
[LAC-Virtual-Template101] quit
# Create two L2TP groups and configure the related attributes.
[LAC] l2tp enable
[LAC] l2tp-group 1
[LAC-l2tp1] tunnel name LAC-1
[LAC-l2tp1] start l2tp ip 1.1.2.2 domain aaa.net
[LAC-l2tp1] quit
[LAC] l2tp-group 2
[LAC-l2tp2] tunnel name LAC-1
[LAC-l2tp2] start l2tp ip 1.1.2.2 domain bbb.net
# Enable the tunnel authentication and specify a tunnel authentication key.
[LAC-l2tp2] tunnel authentication
[LAC-l2tp2] tunnel password simple 12345
[LAC-l2tp2] quit
[LAC] l2tp-group 1
[LAC-l2tp1] tunnel authentication
[LAC-l2tp1] tunnel password simple 12345
2. Configure the LNS:
# Enable L2TP.
<LNS> system-view
[LNS] l2tp enable