1、juniperssg5L2TPVPNjuniper-ssg5-L2TPVPND3、创建一个test1用户,选择L2TP User,并添加user password,并关联IP地址池(vpn-ip-pool)4、创建一个L2TP-vpn用户组,并把available members下面test1账号添加到左边group members5、修改L2TP隧道的默认设置,关联IP地址池(vpn-ip-pool),选择chap的ppp认证及添加DNS6、在tunnel页面选择dialup group并以刚创建的L2TP-vpn作为拨号组,并选择外网端口Ethernet0/0,并关联IP地址池(vpn-i
2、p-pool),Tunnel的name为YS_VPN,由于截图没把name截出来7、创建一条策略from untrust to trust,源地址为Dial-UpVPN,由于拨号进来不只要访问本地网络还有公司网络,所以目的地址:ANY 并在Action修改为:tunnel,L2TP:YS_VPN,然后,在logging 与at session beginning打 以上配置部分内容引用自搭建Netscreen SSG5基于L2TP协议拨号平台其实步骤也不多,一共7步(现在熟练了感觉还是很好理解的,一开始摸索的时候相信大家也都是云里雾里的)。好了,现在可以用Windows自带VPN拨号连接了。看
3、到一些介绍说还需要改一下注册表,不过我是Win7 x64的倒是直接就连了上去。注册表文件内容如下,保存为.reg文件执行即可。Windows Registry Editor Version 5.00HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesRasManParametersServiceDll=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f, 00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,
4、00,32,00,5c,00, 72,00,61,00,73,00,6d,00,61,00,6e,00,73,00,2e,00,64,00,6c,00,6c,00,00,00Medias=hex(7):72,00,61,00,73,00,74,00,61,00,70,00,69,00,00,00,00,00CustomDLL=hex(7):43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00, 20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,4d,00,53,00,4e,00,5c,00,4d
5、,00,53, 00,4e,00,43,00,6f,00,72,00,65,00,46,00,69,00,6c,00,65,00,73,00,5c,00,63,00, 75,00,73,00,74,00,64,00,69,00,61,00,6c,00,2e,00,64,00,6c,00,6c,00,00,00,00, 00ServiceDllUnloadOnStop=dword:00000001AllowL2TPWeakCrypto=dword:00000000AllowPPTPWeakCrypto=dword:00000000KeepRasConnections=dword:00000000
6、ProhibitIpSec=dword:00000001AllocatedLuids=hex:HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesRasManParametersQuarantineAutoRefreshEnabled=dword:00000000AutoRefreshTimeout=dword:01808580Enabled=dword:00000001WorkItemTimeout=dword:00000bb8接着在设置vpn属性安全高级设置VPN类型手动选一下L2TP,自动识别很慢而且可能会失败。数据加密:可选加密或者加密质询握手身份验证协议(CHAP):打勾配置完成后,遇到NetScreen SSG5 L2TP VPN 可获取IP但无法访问其他资源的问题,不过顺利解决了。
copyright@ 2008-2022 冰豆网网站版权所有
经营许可证编号:鄂ICP备2022015515号-1