cisco router l2tp 单臂模式（cisco anyconnect苹果下载）

cisco router l2tp 单臂模式（cisco anyconnect苹果下载）

拓扑说明：通过公网IP映射到cisco router内网口IP，所有流量丢向核心，互联网流量通过出口防火墙进行管控，上网。

Router#sh runBuilding configuration...

Current configuration : 2422 bytes!! Last configuration change at 11:32:24 UTC Fri Oct 16 2020 by vxiadminversion 15.1service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname Router!boot-start-markerboot-end-marker!!enable password vxinetadmin2982

-------------------本地账户认证----------------------aaa authentication ppp default local!-----------------------------------aaa认证 raduis----------------------------aaa new-modelaaa authentication login ias group radius localaaa authentication ppp default group radius localaaa authorization network default group radius local !aaa session-id common!!dot11 syslogip source-route!!ip cef!!!ip address-pool localno ipv6 cef!multilink bundle-name authenticated!!!-------------------VPDN拨号配置-------------------------------vpdn enable!vpdn-group 1! Default L2TP VPDN groupaccept-dialinprotocol l2tpvirtual-template 1no l2tp tunnel authentication!!!!!!!!voice-card 0!crypto pki token default removal timeout 0!!!!license udi pid CISCO2811 sn FHK1429F0LJusername vxiadmin password 0 vxinetadmin2982username cisco privilege 15 password 0 cisco!redundancy!!! --------------------------ipsec配置----------------crypto isakmp policy 10encr 3deshash md5authentication pre-sharegroup 2crypto isakmp key cisco address 0.0.0.0 0.0.0.0!!crypto ipsec transform-set cisco esp-3des esp-md5-hmac mode transport!crypto dynamic-map cisco 10set transform-set cisco !!crypto map cisco 10 ipsec-isakmp dynamic cisco !!!!!!interface Loopback0no ip address!interface FastEthernet0/0no ip addressduplex autospeed auto!-------------接口配置----------interface FastEthernet0/1ip address 172.28.192.249 255.255.255.0ip virtual-reassembly induplex autospeed autocrypto map cisco

--------------------虚拟模板----------------interface Virtual-Template1ip address X.118.139.254 255.255.255.0ip virtual-reassembly inpeer default ip address pool ciscoppp authentication ms-chap-v2 ms-chapppp ipcp dns X.118.145.252! ip local pool cisco X.118.139.1 X.118.139.100 -------------地址池ip forward-protocol ndno ip serverno ip secure-server!!ip route 0.0.0.0 0.0.0.0 172.28.192.254 -----------默认路由丢向核心!ip radius source-interface FastEthernet0/1 nls resp-timeout 1cpd cr-id 1!!!!!----------------raduis认证---------radius-server host 172.28.2.101 auth-port 1812 acct-port 1813radius-server key vxicisco!!control-plane!!!!mgcp profile default!!!!!gatekeepershutdown!!!line con 0line aux 0line vty 0 4password vxinetadmin2982login authentication iastransport input all!scheduler allocate 20000 1000end

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。