L2TP实验

1、拓扑图

 2、需求

LAC自动拨号到LNS来建立通道

3、配置
LAC

[LAC]l2tp enable 

[LAC]interface Virtual-Template 1
[LAC-Virtual-Template1]ppp authentication-mode chap 
 The command is used to configure the PPP authentication mode on the local end. 
Confirm that the peer end adopts the corresponding PPP authentication. Continue[
Y/N]:y
[LAC-Virtual-Template1]ppp chap user user0001
[LAC-Virtual-Template1]ppp chap password cipher password123
[LAC-Virtual-Template1]ip address ppp-negotiate 
[LAC-Virtual-Template1]call-lns local-user user0001 binding l2tp-group l2tp

[LAC]ip route-static 0.0.0.0 0 20.1.1.2 

LNS

[LAC]nat-policy 
[LAC-policy-nat]rule name aa
[LAC-policy-nat-rule-aa]source-zone trust 
[LAC-policy-nat-rule-aa]source-address 10.1.1.0 24
[LAC-policy-nat-rule-aa]egress-interface Virtual-Template 1
[LAC-policy-nat-rule-aa]action source-nat easy-ip 

安全策略配置

4、测试

l2tp通道建立成功

成功ping通