H3C路由器配置 L2tp + GRE

[H3C]dis cur

version 5.20, Release 2104P02

sysname H3C

enable--------------------开启 L2tp 服务器

nat address-group 1 209.9.9.24 209.9.9.24 -------------------------NAT地址池，由GRE 对端路由过来

domain default enable system

telnet server enable ----------------------------------------开启Telnet 服务

dar p2p signature-file flash:/p2p_default.mtd

port-security enable

acl number 2000-----------------------------------------用于策略路由的ACL ：1网段走 GRE ，2 网段走CT
rule 10 permit source 172.16.1.0 0.0.0.255
rule 20 deny
acl number 2001
rule 10 permit source 172.16.2.0 0.0.0.255
rule 20 deny
acl number 2003
rule 10 permit

vlan 1

domain system
access-limit disable
state active
idle-cut disable
self-service-url disable

user-group system

local-user admin---------------------------------------------------登陆用户名
password cipher XMVOHW99DISQ=-------------------------密码
authorization-attribute level 3--------------------最高登陆等级 3
service-type telnet------------------------用于 telnet
local-user cao001 ----------------------------------- 账户
password cipher OUM!K%F<+$[Q<1!!-------------- 密码
service-type ppp ------------------------------用于 拨号

cwmp
undo cwmp enable

-group 10 ----------------------------------------------创建 拨号组
undo tunnel authentication
tunnel name H3C-
start ip 121.33.66.25 fullusername cao001 -----------------------输入服务器IP地址 和 用户名

interface Aux0
async mode flow
link-protocol ppp

interface Cellular0/0
async mode protocol
link-protocol ppp

interface Ethernet0/0
port link-mode route

interface Ethernet0/1
port link-mode route
ip address 192.168.11.220 255.255.255.0

interface Ethernet0/4
port link-mode route
ip address 172.16.1.1 255.255.255.0

interface Virtual-Template10 ---------------------------------------------配置 拨号接口
ppp authentication-mode chap
ppp chap user cao001 -------------------用户名
ppp chap password cipher OUM!K%F<+$[Q=^----------密码
ppp timer negotiate 5
-auto-client enable
ip address ppp-negotiate

interface NULL0

interface LoopBack0
ip address 208.9.9.24 255.255.255.255

interface Vlan-interface1
ip address 172.16.2.1 255.255.255.0

interface Ethernet0/2
port link-mode bridge

interface Ethernet0/3
port link-mode bridge

interface Tunnel275 ---------------------------------拨号成功后得到的IP段，再用来建立GRE
nat outbound 2003 address-group 1
ip address 192.168.102.46 255.255.255.252
source 10.10.90.85
destination 10.90.30.1
keepalive 10 2

route-policy ct permit node 10----------------------策略路由 这里没有应用在接口上面
if-match acl 2000
apply tag 1 ----------------------------路由标记
route-policy ct permit node 20

ip route-static 0.0.0.0 0.0.0.0 192.168.102.45
ip route-static 120.31.66.215 255.255.255.255 192.168.11.1

load xml-configuration

load tr069-configuration

user-interface tty 12
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3

return
[H3C]
[H3C]
[H3C]dis ver
[H3C]dis version
H3C Comware Platform Software
Comware Software, Version 5.20, Release 2104P02
Copyright © 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved.
H3C MSR20-10 uptime is 0 week, 0 day, 4 hours, 16 minutes
Last reboot 2007/01/01 00:00:26
System returned to ROM By Command.

CPU type: FREESCALE MPC8323E 333MHz
256M bytes DDR SDRAM Memory
32M bytes Flash Memory
Pcb Version: 3.0
Logic Version: 1.0
Basic BootROM Version: 2.21
Extended BootROM Version: 2.23
[SLOT 0]AUX (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/0 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/1 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/2 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/3 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]ETH0/4 (Hardware)3.0 (Driver)1.0, (Cpld)1.0
[SLOT 0]CELLULAR0/0 (Hardware)3.0 (Driver)1.0, (Cpld)1.0

[H3C]
[H3C]
[H3C]dis ip int bei
[H3C]dis ip int bri
[H3C]dis ip int brief
*down: administratively down
(s): spoofing
Interface Physical Protocol IP Address Description
Aux0 down down unassigned Aux0 Inte…
Cellular0/0 down down unassigned Cellular0…
Ethernet0/0 down down unassigned Ethernet0…
Ethernet0/1 up up 192.168.11.220 Ethernet0…
Ethernet0/4 up up 172.16.1.1 Ethernet0…
LoopBack0 up up(s) 208.9.9.24 LoopBack0…
Tunnel275 up up 192.168.102.46 Tunnel275…
Virtual-Template10 up up(s) 10.10.90.85 Virtual-T…
Vlan-interface1 up up 172.16.2.1 Vlan-inte…
[H3C]
[H3C]
[H3C]dis cpu
[H3C]dis cpu-usage
[H3C]dis cpu-usage hi
[H3C]dis cpu-usage history
100%|
95%|
90%|
85%|
80%|
75%|
70%|
65%|
60%|
55%|
50%|
45%|
40%|
35%|
30%|
25%|
20%| ## # #
15%| # # # ## # # #
10%| # # # # # # # ## # # #
5%|############################################################
------------------------------------------------------------
10 20 30 40 50 60 (minutes)
cpu-usage last 60 minutes(SYSTEM)
[H3C]
[H3C]dis mem
[H3C]dis memory
System Total Memory(bytes): 171296000
Total Used Memory(bytes): 106179756
Used Rate: 61%
[H3C]
[H3C]