版权说明：本文档由用户提供并上传，收益归属内容提供方，若内容存在侵权，请进行举报或认领
文档简介
1、Good is good, but better carries it.精益求精，善益求善。VPN故障情况-JuniperSSG520作为总公司的接入设备，同时作为VPNserver。其IP地址为x.x.x.226。应用服务器的IP地址为x.x.x.227(NAT一对一)。分公司的软件需要通过VPN接入总公司的网络访问应用服务器。H3CAR18-23S-1作为分公司的接入设备，其IP地址为y.y.y.161。现在遇到的问题是分公司的PC用L2TP拨226不正常，有时能够成功，有时不成功，成功也是经过多次连接重试之后才成功的。但在分公司之外用L2TP拨226很正常。成功率100%，而且连接非常的
2、迅速。如将分公司的PC拿到分公司以外的网络就很正常。以下是H3CAR18-23s-1的配置。sysSystemView:returntoUserViewwithCtrl+Z.H3CdispH3CdisplaycurrH3Cdisplaycurrent-configuration#sysnameH3C#clocktimezonegmt+08:004add08:00:00#cpu-usagecycle1min#firewallenable#connection-limitenableconnection-limitdefaultactiondenyconnection-limitdefaultam
3、ountupper-limit50lower-limit20#nataddress-group1y.y.y.162y.y.y.166#qoscarl1source-ip-addressrange0to55per-addressqoscarl2destination-ip-addressrange0to55per-address#DNSresolveDNSserver32DNSserver8DNS-proxyenable#webset-packageforceflash:/http.zip#iphttpacl2000#radiusschemesystem#domainsystem#local-u
4、seradminpasswordcipherY54NI&IO:MLaN9G%UD&AA!service-typetelnetterminallevel3service-typeftplocal-userlasopasswordsimplelaso24service-typetelnetlevel3#detect-group1detect-list1ipaddressy.y.y.161nexthopy.y.y.161#detect-group2detect-list1ipaddressnexthop#aclnumber2000rule0permitsource55rule1deny#aclnum
5、ber3000rule3permitipsource0rule100permitipdestination80rule100commentMainDNSServerrule101permitipdestination320rule101commentSecendryDNSServerrule102permitipdestination170rule110permitipdestinationx.x.x.2290rule110commentOAandE-emailserverrule111permitipdestination220rule111commentE-emailrule112perm
6、itipdestination55rule112commentMSNServerrule113permitipdestination190rule113commentE-emailrule114permitipdestination55rule116permitipdestination55rule117permitipdestination010rule118permitipdestination55rule119permitipsource600rule120permitipsource610rule121permitipsource620rule122permitipsource630r
7、ule123permitipsource640rule124permitipsource650rule125permitipsource660rule126permitipsource670rule127permitipsource680rule128permitipsource690rule129permitipsource700rule130permitipsource710rule131permitipsource720rule132permitipsource730rule133permitipsource740rule134permitipsource750rule135permit
8、ipsource760rule136permitipsource770rule137permitipsource780rule138permitipsource790rule139permitipsource800rule140permitipsource810rule141permitipsource820rule142permitipsource830rule143permitipsource840rule144permitipsource850rule145permitipsource980rule146permitipsource870rule147permitipsource880r
9、ule148permitipsource900rule149permitipsource910rule151permitipsource210rule152permitipsource200rule153permitipsource410rule157permitipsource920rule158permitipsource930rule159permitipsource940rule160permitipsource350rule161permitipsource950rule162permitipsource400rule163permitipsource360rule195permit
10、ipsource30destination900rule196permitipsource940destination170rule197permitipsource30destination420rule201permitipsource0destination55rule202permitipsource50destination55rule205permitipsource50destination55rule206permitipsource50destination55rule207permitipsource0destination55rule208permitipsource0d
11、estination55rule211permitipsource0destination55rule212permitipsource50destination55rule214permitipsource0destination050rule215permitipsource50destination050rule217permitipsource0destination630rule218permitipsource50destination630rule223permitipsource0destination90rule224permitipsource0destination55r
12、ule225permitipsource0destination910rule226permitipsource50destination90rule227permitipsource50destination55rule228permitipsource50destination910rule231permitipsource0destination55rule232permitipsource50destination55rule234permitipsource0destination30rule235permitipsource50destination30rule237permiti
13、psource0destination60rule238permitipsource50destination60rule241permitipsource0destination470rule242permitipsource50destination470rule243permitipsource0destination680rule244permitipsource50destination680rule247permitipsource0destination930rule248permitipsource50destination930rule250permitipsource0de
14、stination030rule251permitipsource50destination030rule256permitipdestination260rule257permitipsource50destination55rule258permitipsource0destination55rule260permitipsource0destination420rule261permitipsource0destination900rule262permitipsource50destination55rule264permitipsource50destination55rule265
15、permitipsource0destination620rule266permitipsource90destination620rule267permitipsource90destination410rule270permitipsource0destination0rule270comment/rule271permitipsource0destination50rule271comment/rule272permitipsource0destination30rule272comment/rule273permitipsource0destination55rule274permit
16、ipsource20destination0rule275permitipsource20destination50rule276permitipsource20destination30rule277permitipsource0destination00rule279permitipsource10destination55rule280permitipsource0destination55rule280commenthotmailrule281permitipsource0destination55rule281commenthotmailrule282permitipsource0d
17、estination80rule282commenthotmailrule283permitipsource20destination55rule283comment/rule293permitipsource0destination55rule293commenthotmailrule294permitipsource0destination55rule294commenthotmailrule295permitipsource0destination55rule295commenthotmailrule296permitipsource60destination55rule300permi
18、tipdestination70rule300comment/rule301permitipdestination650rule301comment/rule302permitipdestination00rule302comment/rule303permitipdestination130rule303comment/rule304permitipdestination0rule304comment/rule305permitipdestination880rule305commentrule306permitipdestination420rule306comment/rule307pe
19、rmitipdestination0rule307comment/rule308permitipdestination450rule308comment/rule309permitipdestination0rule309comment/rule310permitipdestination470rule310comment/rule311permitipdestination280rule311comment/rule312permitipdestination20rule312comment/rule313permitipdestination00rule313comment/rule314
20、permitipdestination060rule314comment/rule315permitipdestination740rule315comment74/exchangerule316permitipdestination790rule316comment/rule317permitipdestination580rule317comment/rule318permitipdestination0rule318comment/jkl/login.jsprule319permitipdestination90rule319comment/rule440permitipsource0d
21、estination55rule441permitipsource0destination55rule442permitipsource0destination0rule443permitipsource0destination55rule444permitipsource0destination55rule500permitipsource0destination90rule500comment/rule501permitipsource0destination70rule502permitipsource0destination60rule502comment/rule503permiti
22、psource0destination100rule503comment/rule504permitipsource0destination30rule504comment/rule505permitipsource0destination55rule506permitipsource0destination00rule506comment/rule507permitipsource0destination80rule507comment/rule510permitipsource30destination30rule511permitipsource70destination30rule51
23、2permitipsource30destination90rule513permitipsource70destination90rule514permitipsource30destination70rule515permitipsource70destination70rule516permitipsource30destination60rule517permitipsource70destination60rule518permitipsource30destination100rule519permitipsource70destination100rule520permitips
24、ource30destination30rule521permitipsource70destination30rule523permitipsource70destination55rule524permitipsource70destination00rule525permitipdestination90rule526permitipdestination10rule527permitipdestination030rule528permitipdestination580rule529permitipdestination450rule530permitipdestination00r
25、ule531permitipdestination180rule532permitipsourcex.x.x.2290rule533permitipdestination20rule534permitipdestination30rule535permitipdestination450rule536permitipdestination80rule537permitipdestination930rule538permitipdestination520rule539permitipdestination220rule540permitipdestination200rule541permi
26、tipdestination500rule542permitipdestination400rule543permitipdestination50rule544permitipdestination400rule545permitipdestination430rule546permitipdestination400rule547permitipdestination270rule548permitipsource490rule549permitipdestination070rule550permitipdestination900rule551permitipdestinationx.
27、x.x.2260rule552permitipdestination40rule553permitipdestination780rule554permitipsourcex.x.x.2260rule2025permitipdestination80rule2026permitipdestination00rule2027permitipdestination40rule2028permitipdestination250rule2029permitipdestination00rule2030denyipdestination190rule2040denyipdestination330ru
28、le2060denyipdestination000rule2070denyipdestination55rule2080denyipdestination55rule2090denyipdestination55rule3000denyipdestination55rule3001denyipdestination55rule3002denyipdestination55rule3003denyipdestination55rule3004denyipdestination55rule3100denyudpdestination-porteq8000rule3101denyudpdestin
29、ation-porteq4000rule60255denyipsource55rule60256permitipdestination000rule60257permitipsource60destinationx.x.x.2260rule60258permitipsource10destinationx.x.x.2260aclnumber3001rule0permitipaclnumber3014#connection-limitpolicy0limit0acl2001per-sourceamount201limit1acl3002per-sourceamount2541#aclnumber4000#interf
温馨提示
- 1. 本站所有资源如无特殊说明，都需要本地电脑安装OFFICE2007和PDF阅读器。图纸软件为CAD,CAXA,PROE,UG,SolidWorks等.压缩文件请下载最新的WinRAR软件解压。
- 2. 本站的文档不包含任何第三方提供的附件图纸等，如果需要附件，请联系上传者。文件的所有权益归上传用户所有。
- 3. 本站RAR压缩包中若带图纸，网页内容里面会有图纸预览，若没有图纸预览就没有图纸。
- 4. 未经权益所有人同意不得将文件中的内容挪作商业或盈利用途。
- 5. 人人文库网仅提供信息存储空间，仅对用户上传内容的表现方式做保护处理，对用户上传分享的文档内容本身不做任何修改或编辑，并不能对任何下载内容负责。
- 6. 下载文件中如有侵权或不适当内容，请与我们联系，我们立即纠正。
- 7. 本站不保证下载资源的准确性、安全性和完整性, 同时也不承担用户因使用这些下载资源对自己和他人造成任何形式的伤害或损失。
评论
0/150
提交评论