.L2TP OVER IPSEC(LNS地址在内网,通过公网映射)组网LAC公网地址为202.109.207.163,LNS在用户内网地址为172.20.210.10,通过映射为公网地址117.27.234.103。用户需求:PC用户通过PPPOE拨号到LAC出发L2TP隧道建立,同时要求做IPSEC加密。配置:LAC:dis cu# version 5.20, Release 2512P04# sysname lac# l2tp enable# domain default enable system# ipv6# telnet server enable# port-security enable# password-recovery enable#acl number 3500 rule 5 permit ip source 202.109.207.163 0 destination 172.20.210.10 0 rule 10 permit