防火墙PPTP+路由器NAT配置.docxVIP

防火墙PPTP+路由器NAT配置实例实验设备：锐捷w1600防火墙+cisco2600路由器防火墙设置：配置【网络接口】配置【端口ip】定义【路由规则】开启PPTP-VPAN和L2TP-VPN 服务添加VPN的认证用户和密码划分区域，定义介入“vpn”分配的地址范围定义【服务组】定义【安全规则】： 路由器上的配置：RA：RA#show running-configBuilding configuration...Current configuration : 916 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname RA!boot-start-markerboot-end-marker!!no network-clock-participate slot 1no network-clock-participate wic 0no aaa new-modelip subnet-zeroip cef!!!vpdn enable!no ftp-server write-enable!!!!interface FastEthernet0/0ip address ip nat i