VPN 故障情况.docx
- 文档编号:30499615
- 上传时间:2023-08-16
- 格式:DOCX
- 页数:17
- 大小:51.99KB
VPN 故障情况.docx
《VPN 故障情况.docx》由会员分享,可在线阅读,更多相关《VPN 故障情况.docx(17页珍藏版)》请在冰豆网上搜索。
VPN故障情况
JuniperSSG520作为总公司的接入设备,同时作为VPNserver。
其IP地址为x.x.x.226。
应用服务器的IP地址为x.x.x.227(NAT一对一)。
分公司的软件需要通过VPN接入总公司的网络访问应用服务器。
H3CAR18-23S-1作为分公司的接入设备,其IP地址为y.y.y.161。
现在遇到的问题是分公司的PC用L2TP拨226不正常,有时能够成功,有时不成功,成功也是经过多次连接重试之后才成功的。
但在分公司之外用L2TP拨226很正常。
成功率100%,而且连接非常的迅速。
如将分公司的PC拿到分公司以外的网络就很正常。
以下是H3CAR18-23s-1的配置。
SystemView:
returntoUserViewwithCtrl+Z.
[H3C]disp
[H3C]displaycurr
[H3C]displaycurrent-configuration
#
sysnameH3C
#
clocktimezonegmt+08:
004add08:
00:
00
#
cpu-usagecycle1min
#
firewallenable
#
connection-limitenable
connection-limitdefaultactiondeny
connection-limitdefaultamountupper-limit50lower-limit20
#
nataddress-group1y.y.y.162y.y.y.166
#
qoscarl1source-ip-addressrange192.168.1.10to192.168.1.255per-address
qoscarl2destination-ip-addressrange192.168.1.10to192.168.1.255per-address
#
DNSresolve
DNSserver219.150.32.132
DNSserver202.99.96.68
DNS-proxyenable
#
webset-packageforceflash:
/http.zip
#
iphttpacl2000
#
radiusschemesystem
#
domainsystem
#
local-useradmin
passwordcipherY5^4NI&IO:
MLaN9G%UD&AA!
!
service-typetelnetterminal
level3
service-typeftp
local-userlaso
passwordsimplelaso24
service-typetelnet
level3
#
detect-group1
detect-list1ipaddressy.y.y.161nexthopy.y.y.161
#
detect-group2
detect-list1ipaddress60.28.137.9nexthop60.28.137.9
#
aclnumber2000
rule0permitsource192.168.1.00.0.0.255
rule1deny
#
aclnumber3000
rule3permitipsource192.168.1.60
rule100permitipdestination202.99.96.680
rule100commentMainDNSServer
rule101permitipdestination219.150.32.1320
rule101commentSecendryDNSServer
rule102permitipdestination218.68.250.1170
rule110permitipdestinationx.x.x.2290
rule110commentOAandE-emailserver
rule111permitipdestination65.55.15.1220
rule111commentE-email
rule112permitipdestination207.46.0.00.0.255.255
rule112commentMSNServer
rule113permitipdestination218.68.250.1190
rule113commentE-email
rule114permitipdestination65.54.0.00.0.255.255
rule114comment
rule116permitipdestination202.108.5.00.0.0.255
rule116comment
rule117permitipdestination220.181.12.1010
rule118permitipdestination60.211.251.00.0.0.255
rule118comment
rule119permitipsource192.168.1.1600
rule120permitipsource192.168.1.1610
rule121permitipsource192.168.1.1620
rule122permitipsource192.168.1.1630
rule123permitipsource192.168.1.1640
rule124permitipsource192.168.1.1650
rule125permitipsource192.168.1.1660
rule126permitipsource192.168.1.1670
rule127permitipsource192.168.1.1680
rule128permitipsource192.168.1.1690
rule129permitipsource192.168.1.1700
rule130permitipsource192.168.1.1710
rule131permitipsource192.168.1.1720
rule132permitipsource192.168.1.1730
rule133permitipsource192.168.1.1740
rule134permitipsource192.168.1.1750
rule135permitipsource192.168.1.1760
rule136permitipsource192.168.1.1770
rule137permitipsource192.168.1.1780
rule138permitipsource192.168.1.1790
rule139permitipsource192.168.1.1800
rule140permitipsource192.168.1.1810
rule141permitipsource192.168.1.1820
rule142permitipsource192.168.1.1830
rule143permitipsource192.168.1.1840
rule144permitipsource192.168.1.1850
rule145permitipsource192.168.1.1980
rule146permitipsource192.168.1.1870
rule147permitipsource192.168.1.1880
rule148permitipsource192.168.1.1900
rule149permitipsource192.168.1.1910
rule151permitipsource192.168.1.2210
rule152permitipsource192.168.1.2200
rule153permitipsource192.168.1.2410
rule157permitipsource192.168.1.1920
rule158permitipsource192.168.1.1930
rule159permitipsource192.168.1.1940
rule160permitipsource192.168.1.2350
rule161permitipsource192.168.1.1950
rule162permitipsource192.168.1.2400
rule163permitipsource192.168.1.2360
rule195permitipsource192.168.1.330destination202.108.3.1900
rule196permitipsource192.168.1.1940destination218.68.250.1170
rule197permitipsource192.168.1.330destination202.108.3.2420
rule201permitipsource192.168.1.50destination211.151.252.00.0.0.255
rule202permitipsource192.168.1.150destination211.151.252.00.0.0.255
rule205permitipsource192.168.1.150destination123.103.65.00.0.0.255
rule206permitipsource192.168.1.150destination60.28.183.00.0.0.255
rule207permitipsource192.168.1.50destination123.103.65.00.0.0.255
rule208permitipsource192.168.1.50destination60.28.183.00.0.0.255
rule211permitipsource192.168.1.50destination60.30.26.00.0.0.255
rule212permitipsource192.168.1.150destination60.30.26.00.0.0.255
rule214permitipsource192.168.1.50destination116.213.92.2050
rule214comment
rule215permitipsource192.168.1.150destination116.213.92.2050
rule217permitipsource192.168.1.50destination125.39.33.1630
rule217comment
rule218permitipsource192.168.1.150destination125.39.33.1630
rule223permitipsource192.168.1.50destination210.192.125.290
rule224permitipsource192.168.1.50destination60.28.124.00.0.0.255
rule225permitipsource192.168.1.50destination61.129.48.1910
rule226permitipsource192.168.1.150destination210.192.125.290
rule227permitipsource192.168.1.150destination60.28.124.00.0.0.255
rule228permitipsource192.168.1.150destination61.129.48.1910
rule231permitipsource192.168.1.50destination211.99.188.00.0.0.255
rule232permitipsource192.168.1.150destination211.99.188.00.0.0.255
rule234permitipsource192.168.1.50destination60.30.83.930
rule235permitipsource192.168.1.150destination60.30.83.930
rule237permitipsource192.168.1.50destination61.136.19.660
rule238permitipsource192.168.1.150destination61.136.19.660
rule241permitipsource192.168.1.50destination60.28.158.2470
rule242permitipsource192.168.1.150destination60.28.158.2470
rule243permitipsource192.168.1.50destination222.73.161.1680
rule244permitipsource192.168.1.150destination222.73.161.1680
rule247permitipsource192.168.1.50destination61.129.52.1930
rule248permitipsource192.168.1.150destination61.129.52.1930
rule250permitipsource192.168.1.50destination61.155.43.2030
rule251permitipsource192.168.1.150destination61.155.43.2030
rule256permitipdestination124.40.42.1260
rule257permitipsource192.168.1.150destination202.108.22.00.0.0.255
rule258permitipsource192.168.1.50destination202.108.22.00.0.0.255
rule260permitipsource192.168.1.40destination202.108.3.2420
rule261permitipsource192.168.1.40destination202.108.3.1900
rule262permitipsource192.168.1.350destination202.108.3.00.0.0.255
rule264permitipsource192.168.1.150destination202.108.3.00.0.0.255
rule265permitipsource192.168.1.40destination202.165.103.1620
rule265comment
rule266permitipsource192.168.1.290destination202.165.103.1620
rule267permitipsource192.168.1.290destination203.209.228.2410
rule270permitipsource192.168.1.40destination221.12.118.20
rule270comment
rule271permitipsource192.168.1.40destination61.156.39.350
rule271comment
rule272permitipsource192.168.1.40destination210.51.168.130
rule272comment
rule273permitipsource192.168.1.40destination221.194.137.00.0.0.255
rule273comment
rule274permitipsource192.168.1.520destination221.12.118.20
rule275permitipsource192.168.1.520destination61.156.39.350
rule276permitipsource192.168.1.520destination210.51.168.130
rule277permitipsource192.168.1.40destination202.99.102.300
rule279permitipsource192.168.1.410destination202.99.102.00.0.0.255
rule280permitipsource192.168.1.50destination204.2.0.00.0.255.255
rule280commenthotmail
rule281permitipsource192.168.1.50destination64.4.0.00.0.255.255
rule281commenthotmail
rule282permitipsource192.168.1.50destination221.192.148.580
rule282commenthotmail
rule283permitipsource192.168.1.420destination202.99.102.00.0.0.255
rule283comment
rule293permitipsource192.168.1.50destination65.55.15.00.0.0.255
rule293commenthotmail
rule294permitipsource192.168.1.50destination157.238.197.00.0.0.255
rule294commenthotmail
rule295permitipsource192.168.1.50destination60.28.252.00.0.0.255
rule295commenthotmail
rule296permitipsource192.168.1.460destination202.99.102.00.0.0.255
rule300permitipdestination210.13.74.670
rule300comment
rule301permitipdestination210.51.39.1650
rule301comment
rule302permitipdestination161.165.206.200
rule302commenthttps:
//retaillink.wal-
rule303permitipdestination203.86.31.1130
rule303comment
rule304permitipdestination202.106.132.70
rule304commenthttp:
//bjvrm.wu-
rule305permitipdestination218.69.108.1880
rule305comment
rule306permitipdestination210.51.45.2420
rule306comment
rule307permitipdestination211.152.35.50
rule307commenth
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- VPN 故障情况 故障 情况