Nortel 4134 用户指南

Configuring an IPv4 tunnel

243

Step

Action

Configure the L2TP server:

interface l2tp-server l2tp1

ip address 192.169.100.1

remote-config my.domain.com

address-pool 192.168.100.2 192.168.100.100

dns 192.168.100.1

nbns 0.0.0.0

exit

Configure the users:

remote-user alice password1

remote-user bob password2

ipsec-protection l2tp1 192.168.10.2

exit l2tp-server

To configure the internet firewall:

firewall internet

interface wan1

policy 100 in self service ike

policy 101 in self protocol udp port any 4500

policy 102 in self protocol udp port any 1701

policy 200 in self protocol icmp

is optional. It can be

helpful for debugging, but is not a necessary configuration.

To configure the corp firewall:

firewall corp

interface ethernet0/1

policy 101 in address 192.168.100.2 192.168.100.100 any

any

The source address specified here matches the address pool
specified in step 2.

—End—

Configuring an IPv4 tunnel

The following figure shows an IPv4 tunnel configuration.

Nortel Secure Router 4134

Security — Configuration and Management

NN47263-600

01.02

Standard

10.0

3 August 2007