MSR30系列路由器配置实例

[MSR30]dis cur

#

sysname MSR30

#

super password level 3 cipher KM]Y#9;CaE(&B30RC6MN61!!

#

l2tp enable

#

undo firewall ipv6 session link-state check

#

undo firewall session link-state check

#

#

web-manager enable

#

interface Cellular0/1/0

link-protocol ppp

#

interface Virtual-Template2

ppp authentication-mode pap

ip address unnumbered interface LoopBack1

remote address pool 1

#

interface GigabitEthernet0/0/0

ip address 10.90.18.2 255.255.255.252

#

interface GigabitEthernet0/0/1

ip address 10.143.25.226 255.255.255.252

#

interface NULL0

#

interface LoopBack1

description LT-L2TP

ip address 10.143.130.21 255.255.255.255

#

firewall zone local

set priority 100

#

firewall zone trust

set priority 85

#

firewall zone untrust

set priority 5

#

firewall zone dmz

set priority 50

#

l2tp-group 1

undo tunnel authentication

allow l2tp virtual-template 2

tunnel name lns-lt

#

aaa

local-user admin password cipher :D84\\K7*%0N,YWX*NZ55OA!!

local-user admin service-type web terminal telnet

local-user vpdnuser password cipher H`B(72!\"D>'Q=^Q`MAF4<1!!

local-user user1 password cipher 8(D0\\D\\;)DL5S[+;EA,3R!!!

ip pool 1 10.90.18.130 10.90.18.2

#

authentication-scheme default

#

authorization-scheme default

#

accounting-scheme default

#

domain default

domain dot1x

#

#

nqa-jitter tag-version 1

#

ip route-static 0.0.0.0 0.0.0.0 10.143.25.225

ip route-static 10..0.0 255.255.0.0 10.90.18.1

ip route-static 10.90.0.0 255.255.0.0 10.90.18.1

#

banner enable

#

user-interface con 0

user-interface tty 2

authentication-mode none

modem both

user-interface vty 0 4

authentication-mode aaa

#

slb

#

cwmp

#

right-manager server-group

#

return