L2TP实验作业

最新推荐文章于 2026-08-22 23:28:00 发布

原创最新推荐文章于 2026-08-22 23:28:00 发布 · 263 阅读

0 ·

本内容遵循CC 4.0 BY-SA版权协议

GEO检测

收录于

作业

一，实验拓扑

第一步：建立PPPoE连接，设定拨号接口VT接口 PPPoE发明了两个虚拟接口，Dialer接口(客户端)，VT接口(服务端)。

二，基础配置

1.防火墙接口配置

2.建立PPPoE连接，设定拨号接口

[FW1]interface Dialer 1
[FW1-Dialer1]
[FW1-Dialer1]dialer user user1
[FW1-Dialer1]dialer-group 1
[FW1-Dialer1]dialer bundle 1
[FW1-Dialer1]ip address ppp-negotiate
[FW1-Dialer1]ppp chap user user1
[FW1-Dialer1]ppp chap password cipher Password123
[FW1-Dialer1]q
[FW1]dialer-rule 1 ip permit
[FW1]int g 1/0/0
[FW1-GigabitEthernet1/0/0]pppoe-client dial-bundle-number 1
[FW1-GigabitEthernet1/0/0]

[FW2]interface Virtual-Template 1	
[FW2-Virtual-Template1]ppp authentication-mode chap	
[FW2-Virtual-Template1]ip address 2.2.2.2 24 
[FW2-Virtual-Template1]q
[FW2] 
[FW2]firewall zone dmz
[FW2-zone-dmz]add int Virtual-Template 1
[FW2]int g 1/0/0
[FW2-GigabitEthernet1/0/0]pppoe-server bind virtual-template 1 
[FW2]aaa
[FW2-aaa]domain default
[FW2-aaa-domain-default]service-type l2tp
[FW2]user-manage user user1 domain default
[FW2-localuser-user1]password Password123

3. 建立l2tp通道

[FW2]l2tp enable
[FW2]l2tp-group 1
[FW2-l2tp-1]tunnel authentication
[FW2-l2tp-1]tunnel password cipher Hello123
[FW2-l2tp-1]tunnel name lac
[FW2-l2tp-1]start l2tp ip 20.1.1.2 fullusername user1

4.lns配置

地址池

5.安全策略

只需要配置一条从Local区域--->Untrust区域的安全策略，允许LAC和LNS建立L2TP隧道。

[FW2]security-policy 
[FW2-policy-security]rule name local-untrust	
[FW2-policy-security-rule-local-untrust]source-zone local	
[FW2-policy-security-rule-local-untrust]destination-zone untrust 
[FW2-policy-security-rule-local-untrust]source-address 20.1.1.1 32
[FW2-policy-security-rule-local-untrust]destination-address 20.1.1.2 32
[FW2-policy-security-rule-local-untrust]service l2tp
[FW2-policy-security-rule-local-untrust]service protocol udp source-port 0 to 5335 destination-port 1701

三，测试fw1 ping server1

标签

#网络