VPN的操作手册

说明：华为路由器VRP3.4 VPN/L2TP配置手册
目录：
第 1章 VPN概述 ............................................................... ....................................................1-1
1.1 VPN 简介 ...........................................................................................................................1-1
1.2 VPN 基本组网应用.............................................................................................................1-2
1.3 VPN 的分类........................................................................................................................1-2
第 2章 L2TP 配置..................................................................................................................2-1
2.1 L2TP简介..........................................................................................................................2-1
2.1.1 VPDN概述..............................................................................................................2-1
2.1.2 L2TP规范................................................................................................................2-3
2.2 LAC侧的基本 .............................................................................................................2-7
2.2.1 启用 L2TP...............................................................................................................2-7
2.2.2 创建 L2TP组..........................................................................................................2-7
2.2.3 配置发起 L2TP连接请求及LNS地址.....................................................................2-8
2.2.4 配置 AAA认证和本地用户......................................................................................2-8
2.3 LNS侧的基本 .............................................................................................................2-9
2.3.1 启用 L2TP.............................................................................................................2-10
2.3.2 创建 L2TP组........................................................................................................2-10
2.3.3 创建虚拟接口模板.................................................................................................2-10
2.3.4 配置接收呼叫的隧道对端名称...............................................................................2-11
2.3.5 配置本地 VPN用户...............................................................................................2-11
2.4 LAC和 LNS侧的高级配置...............................................................................................2-12
2.4.1 配置本端名称........................................................................................................2-13
2.4.2 启用隧道验证及配置密码......................................................................................2-13
2.4.3 配置隧道 Hello报文发送时间间隔........................................................................2-14
2.4.4 配置域名分隔符及查找顺序..................................................................................2-15
2.4.5 配置强制挂断隧道.................................................................................................2-15
2.4.6 配置强制本 CHAP验证.....................................................................................2-16
2.4.7 配置强制 LCP重新协商........................................................................................2-17
2.4.8 配置本端地址及分配的地址池...............................................................................2-18
2.4.9 配置隧道流控接收窗口的大小...............................................................................2-18
2.4.10 允许/禁止隐藏 AV属性对...................................................................................2-19
2.4.11 配置L2TP最大会话数........................................................................................2-19
2.5 L2TP的显示和调试..........................................................................................................2-20
2.6 L2TP典型配置举例..........................................................................................................2-20
2.6.1 NAS发起 VPN的组网应用....................................................................................2-20
2.6.2 Client发起 VPN 的组网应用..................................................................................2-26
2.6.3 单用户通过路由器与总部 VPN 连接..............................................................2-30
2.6.4 由 IPSec保护的 VPN 组网应用............................................................................2-32
2.7 L2TP常见故障的诊断与排除...........................................................................................2-35
第 3章 GRE 协议配置............................................................................................................3-1
3.1 GRE协议简介....................................................................................................................3-1
3.2 GRE的配置 .......................................................................................................................3-3
3.2.1 创建 Tunnel 接口.............................................................................................3-4
3.2.2 Tunnel接口的源端地址..................................................................................3-4
3.2.3 Tunnel接口的目的端地址...............................................................................3-5
3.2.4 Tunnel接口的网络地址..................................................................................3-5
3.2.5 Tunnel接口的识别关键字...............................................................................3-6
3.2.6 Tunnel接口使用校验和校验...........................................................................3-6
3.2.7 Tunnel接口进行数据报序列号同步................................................................3-6
3.3 GRE的显示和调试.............................................................................................................3-7
3.4 GRE的典型配置案例.........................................................................................................3-7
3.4.1 IP承载IP的 GRE应用...........................................................................................3-7
3.4.2 IP承载IPX的 GRE应用.........................................................................................3-9
3.5 GRE常见故障的诊断与排除............................................................................................3-11