CX-SJZ-TS-QX-R-CO-C2610#sh run
Building configuration...
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname CX-SJZ-TS-QX-R-CO-C2610
!
aaa new-model
aaa authentication login default local（认证）
aaa authentication ppp default local
aaa authorization exec default local
aaa accounting delay-start
enable secret 5 $1$C2Jk$kVdjGQl93Yv94OIp84j5x.
!
username super password 0 qianxi
username test password 0 test
username tstbcx01@tstbcx.133vpdn.he password 0 tstbcx01（定义VPDN登陆的帐号密码）
!
!
!
!
ip subnet-zero
no ip ftp passive
!
ip address-pool local
virtual-profile virtual-template 1（定义虚端口）
vpdn enable（VPDN 功能启动）
!
vpdn-group 1 （定义VPDN组）
! Default L2TP VPDN group（启动VPDN的默认的L2TP协议）
accept-dialin
protocol l2tp
virtual-template 1
lcp renegotiation always
l2tp tunnel password 7 09585D1D1B060F43595F（定义隧道的帐号密码）
!
!
!
!
!
!
interface Ethernet0/0
ip address 10.3.85.200 255.255.255.0
ip access-group ruchong in
ip access-group ruchong out
no ip directed-broadcast
ip mtu 1000 （定义最大传输单元为 1000 ）
!
interface Ethernet0/0.1
no ip directed-broadcast
!
interface Ethernet0/0.2
no ip directed-broadcast
!
interface Serial0/0
ip address 10.3.84.14 255.255.255.252
no ip directed-broadcast
encapsulation frame-relay
no ip mroute-cache
shutdown
no fair-queue
frame-relay interface-dlci 521
frame-relay lmi-type ansi
!
interface Serial0/1
ip address
no ip directed-broadcast
encapsulation frame-relay IETF
frame-relay interface-dlci 100
frame-relay lmi-type ansi
!
interface Virtual-Template1
mtu 1000
ip unnumbered Ethernet0/0
no ip directed-broadcast
peer default ip address pool 1（默认的地址池指向 pool 1)
ppp authentication pap (采用 PAP 验证）
!
ip local pool 1 10.3.85.195 10.3.85.223 （定义默认的地址池）
ip classless
ip route 0.0.0.0 0.0.0.0 211.90.71.238
ip route 10.3.0.0 255.255.0.0 10.3.85.254
ip route 10.203.0.0 255.255.0.0 10.3.85.254
no ip http server
!
!
ip access-list extended ruchong
deny udp any any eq 1434
deny tcp any any eq 1434
deny tcp any any eq 445
deny tcp any any eq 5800
deny tcp any any eq 5900
deny tcp any any eq 6667
deny tcp any any eq 2500
deny tcp any any eq 6346
deny tcp any any eq 139
deny tcp any any eq 137
deny tcp any any eq 135
deny tcp any any eq 593
deny tcp any any eq 4444
deny tcp any any eq 9393
deny tcp any any eq 5554
deny tcp any any eq 1068
deny udp any any eq 445
deny udp any any eq netbios-ss
deny udp any any eq 135
deny udp any any eq 593
deny udp any any eq netbios-dgm
deny udp any any eq netbios-ns
permit ip any any
snmp-server engineID local 0000000902000005328E1520
radius-server host （认证服务器地址 ）
radius-server key tstbcx123（隧道的 VPDN 的认证密码）
!
line con 0
transport input none
line aux 0
line vty 0 4
password tangshan
!
no scheduler allocate
end