Cisco VPN 配置实例

!

配置AAA认证
aaa new-model

aaa authentication login default local

aaa authentication ppp default group radius local

aaa authorization network default group radius local
aaa accounting exec default start-stop group radius

aaa accounting network default start-stop group radius

enable secret 123

enable password 123

!
!

配置VPN基本参数
vpdn enable

!
vpdn-group 1

! Default L2TP VPDN group

accept-dialin
protocol l2tp

virtual-template 1

local name runway

lcp renegotiation always

no l2tp tunnel authentication

!
call rsvp-sync

!
interface FastEthernet0/0

ip address 192.168.0.1 255.255.255.0

duplex auto

speed 100

!
interface FastEthernet0/1

ip address 202.102.24.35 255.255.255.252

duplex auto

speed auto

!

配置VPN端口
interface Virtual-Template1

ip unnumbered FastEthernet0/1

ip mroute-cache

peer default ip address pool default

ppp authentication pap

!

设置VPN用户登录使用的IP池
ip local pool default 10.0.0.1 10.0.0.254

ip classless

ip route 0.0.0.0 0.0.0.0 202.102.24.34

ip http server

!

以下指定认证服务器IP与密码
radius-server host 192.168.0.9 auth-port 1812 acct-port 1813

radius-server key 123

!
dial-peer cor custom

!
!

Comments are closed.