Create two vpn instances – Panasonic NN46240-710 User Manual

Page 35

Attention! The text in this document has been recognized automatically. To view the original document, you can use the "Original mode".

Nortel Secure Router 8000 Series

Troubleshooting - VPN___________

1 L2TP troubleshooting

[Nortel] l2tp enable

[Nortel] l2tp domain suffix-separator @

[Nortel] l2tp-group 1

[Nortel-l2tp1] tunnel name LNS

[Nortel-l2tp1] allow l2tp virtual-template 1

[Nortel-l2tp1] tunnel authentication

[Nortel-l2tp1] tunnel password simple 12345

[Nortel-l2tp1] tunnel destination loopback 0

# When the Nortel LAC device is connected with the device of another company, the

user authentication on the LNS side uses LCP renegotiation. You can configure the

Nortel LAC device according to your actual requirements.

[Nortel-l2tp1]

mandatory-lcp

quit

# Create two domains and configure the corresponding address pool in the domain.

[Nortel] aaa

[Nortel-aaa] domain 263.net

[Nortel-aaa-domain-263.net] binding virtual-template 8

[Nortel-aaa-domain-263.net] ip pool 8 8.1.1.2 8.1.1.10

[Nortel-aaa-domain-263.net] quit

[Nortel-aaa] domain 163.net

[Nortel-aaa-domain-163.net] binding virtual-template 9

[Nortel-aaa-domain-163.net] ip pool 9 9.1.1.2 9.1.1.10

[Nortel-aaa] quit

# Create two VPN instances.

[Nortel] ip vpn-instance vpn1

[Nortel-vpn-instance-vpn1] route-distinguisher 1:10

[Nortel-vpn-instance-vpn1] vpn-target 1:10 export-extcommunity

[Nortel-vpn-instance-vpn1] vpn-target 1:10 import-extcommunity

[Nortel-vpn-instance-vpn1] ^it

[Nortel] ip vpn-instance vpn2

[Nortel-vpn-instance-vpn2] route-distinguisher 1:11

[Nortel-vpn-instance-vpn2] vpn-target 1:11 export-extcommunity

[Nortel-vpn-instance-vpn2] vpn-target 1:11 import-extcommunity

[Nortel-vpn-instance-vpn2] ^it

# Create two corresponding virtual templates and bind them with VPN instances.

[Nortel] interface virtual-

[Nortel-Virtual-Template8]

[Nortel] interface virtual

[Nortel-Virtual-Template9]

template 8

ip binding vpn-instance vpn1

ip address 8.1.1.1 255.255.255.0

mtu 1450

remote address pool 8

ppp authentication-mode pap

quit

template 9

ip binding vpn-instance vpn2

ip address 9.1.1.1 255.255.255.0

mtu 1450

remote address pool 9

ppp authentication pap

quit

Issue 5.3 (19 January 2009)

Nortel Networks Inc.

1-15