Allied Telesis AlliedWare AR440S - Manual (Page 52)

Page 52 | AlliedWare™ OS How To Note: VPNs for Corporate Networks
Extra configuration scripts for lab testing the VPN
solution
This section provides additional configuration that you may need if you want to lab test the
VPN solution. It has scripts for:
z setting up a PPPoE access concentrator for branch office 2 to connect to. In a test
network, this access concentrator plays the role of the PPPoA or PPPoEoA service from
your ISP or Telco
z setting up a NAT gateway so you can verify your VPN clients passing through NAT-T. In a
test network, this NAT gateway router plays the role of the hotel’s NAT gateway.
ISP's PPPoE access concentrator configuration
This configuration is provided only to allow you to bench test this VPN solution. In the live
installation, your ISP or Telco provides your PPPoEoA or PPPoA service.
# SYSTEM configuration
set system name=ISP
# USER configuration
# Create user definitions for authenticating incoming PPPoE
# connections
add user="branch office 1" pass="branch 1" lo=no ip=222.222.222.1
mask=255.255.255.255 telnet=no
# For the branch office 2 user, use 222.222.222.3. This represents
# the dynamically assigned address that the ISP assigns in a live
# network.
add user="branch office 2" pass="branch 2" lo=no ip=222.222.222.3
mask=255.255.255.255 telnet=no
# PPP templates configuration
create ppp template=1
set ppp template=1 authentication=chap echo=10 lqr=off bap=off
idle=off
# PPP configuration
# Enable the PPPoE access concentrator service
add ppp acservice=training template=1 maxsessions=20
ena ppp accessconcentrator
# IP configuration
enable ip
add ip int=eth0 ip=222.222.222.254
add ip int=eth1 ip=200.200.200.254
add ip int=eth2 ip=211.211.211.254