《SE800几个常见的配置》.docVIP

admin_acl的配置 ip access-list admin_acl seq 10 permit ip 55 any seq 20 permit ip 55 any seq 30 permit ip 92 5 any seq 31 permit ip 8 5 any seq 32 permit ip host 2 any seq 40 deny tcp any any eq telnet seq 50 deny tcp any any eq ssh seq 60 deny tcp any any eq ftp seq 70 deny tcp any any eq ftp-data seq 80 deny tcp any any eq 161 seq 90 deny udp any any eq tftp seq 91 deny udp any any eq snmp seq 100 permit ip any any ! admin-access-group admin_acl in count log 用户绑定 interface one multibind ip address /24 subscriber name dslam password dslam ip address ip address ip address ip address ip address port ethernet 1/7 no shutdown encapsulation dot1q dot1q pvc 100 bind subscriber dslam@local password dslam L2TP配置 context tunnel_mi domain libellotest1 domain libellotest2 ! no ip domain-lookup ! interface To_MI_LNS1 ?ip address 13/28 no logging console aaa authentication subscriber none ! subscriber default ? tunnel domain service telnet client ! l2tp-peer name MI_LNS1 media udp-ip remote ip 14 local 13 ?function lac-only ?local-name MT_LAC1 ?tunnel-auth key mi_access1 ! l2tp-peer name MI_LNS2 media udp-ip remote ip 14 local 13 ?local-name MT_LAC2 ?function lac-only ?tunnel-auth key mi_access2 ! l2tp-group name grp_routeur1 ?algorithm priority ?deadtime 5 ?domain libellotest1 ?domain libellotest2 ?peer name MI_LNS1 preference 10 ?peer name MI_LNS2 preference 20 4、The network topology as shown below: the SE800 configuration is? attached in the file config.txt SE800 function as LTS box, using unnamed peer accept l2tp tunnel from LAC, and switch the tunnel to LNS. LNS terminate PPPoE session and assign IP address. In the SE800, the tunnel between LAC and LTS is created on loopback ipaddress, and 0, the slot 11 and slot 11 are GE module and used for route traffic between and 0, card 11 and card 12 configed slot redundant, with same priority. When slot 11 and slot 12 are both on