1、Good is good, but better carries it.精益求精，善益求善。VPN故障情況-JuniperSSG520作為總公司的接入設(shè)備，同時(shí)作為VPNserver。其IP地址為x.x.x.226。應(yīng)用服務(wù)器的IP地址為x.x.x.227(NAT一對(duì)一)。分公司的軟件需要通過VPN接入總公司的網(wǎng)絡(luò)訪問應(yīng)用服務(wù)器。H3CAR18-23S-1作為分公司的接入設(shè)備，其IP地址為y.y.y.161?，F(xiàn)在遇到的問題是分公司的PC用L2TP撥226不正常，有時(shí)能夠成功，有時(shí)不成功，成功也是經(jīng)過多次連接重試之后才成功的。但在分公司之外用L2TP撥226很正常。成功率100%，而且連接非常的

2、迅速。如將分公司的PC拿到分公司以外的網(wǎng)絡(luò)就很正常。以下是H3CAR18-23s-1的配置。sysSystemView:returntoUserViewwithCtrl+Z.H3CdispH3CdisplaycurrH3Cdisplaycurrent-configuration#sysnameH3C#clocktimezonegmt+08:004add08:00:00#cpu-usagecycle1min#firewallenable#connection-limitenableconnection-limitdefaultactiondenyconnection-limitdefaultam

3、ountupper-limit50lower-limit20#nataddress-group1y.y.y.162y.y.y.166#qoscarl1source-ip-addressrange0to55per-addressqoscarl2destination-ip-addressrange0to55per-address#DNSresolveDNSserver32DNSserver8DNS-proxyenable#webset-packageforceflash:/http.zip#iphttpacl2000#radiusschemesystem#domainsystem#local-u

4、seradminpasswordcipherY54NI&IO:MLaN9G%UD&AA!service-typetelnetterminallevel3service-typeftplocal-userlasopasswordsimplelaso24service-typetelnetlevel3#detect-group1detect-list1ipaddressy.y.y.161nexthopy.y.y.161#detect-group2detect-list1ipaddressnexthop#aclnumber2000rule0permitsource55rule1deny#aclnum

5、ber3000rule3permitipsource0rule100permitipdestination80rule100commentMainDNSServerrule101permitipdestination320rule101commentSecendryDNSServerrule102permitipdestination170rule110permitipdestinationx.x.x.2290rule110commentOAandE-emailserverrule111permitipdestination220rule111commentE-emailrule112perm

6、itipdestination55rule112commentMSNServerrule113permitipdestination190rule113commentE-emailrule114permitipdestination55rule116permitipdestination55rule117permitipdestination010rule118permitipdestination55rule119permitipsource600rule120permitipsource610rule121permitipsource620rule122permitipsource630r

7、ule123permitipsource640rule124permitipsource650rule125permitipsource660rule126permitipsource670rule127permitipsource680rule128permitipsource690rule129permitipsource700rule130permitipsource710rule131permitipsource720rule132permitipsource730rule133permitipsource740rule134permitipsource750rule135permit

8、ipsource760rule136permitipsource770rule137permitipsource780rule138permitipsource790rule139permitipsource800rule140permitipsource810rule141permitipsource820rule142permitipsource830rule143permitipsource840rule144permitipsource850rule145permitipsource980rule146permitipsource870rule147permitipsource880r

9、ule148permitipsource900rule149permitipsource910rule151permitipsource210rule152permitipsource200rule153permitipsource410rule157permitipsource920rule158permitipsource930rule159permitipsource940rule160permitipsource350rule161permitipsource950rule162permitipsource400rule163permitipsource360rule195permit

10、ipsource30destination900rule196permitipsource940destination170rule197permitipsource30destination420rule201permitipsource0destination55rule202permitipsource50destination55rule205permitipsource50destination55rule206permitipsource50destination55rule207permitipsource0destination55rule208permitipsource0d

11、estination55rule211permitipsource0destination55rule212permitipsource50destination55rule214permitipsource0destination050rule215permitipsource50destination050rule217permitipsource0destination630rule218permitipsource50destination630rule223permitipsource0destination90rule224permitipsource0destination55r

12、ule225permitipsource0destination910rule226permitipsource50destination90rule227permitipsource50destination55rule228permitipsource50destination910rule231permitipsource0destination55rule232permitipsource50destination55rule234permitipsource0destination30rule235permitipsource50destination30rule237permiti

13、psource0destination60rule238permitipsource50destination60rule241permitipsource0destination470rule242permitipsource50destination470rule243permitipsource0destination680rule244permitipsource50destination680rule247permitipsource0destination930rule248permitipsource50destination930rule250permitipsource0de

14、stination030rule251permitipsource50destination030rule256permitipdestination260rule257permitipsource50destination55rule258permitipsource0destination55rule260permitipsource0destination420rule261permitipsource0destination900rule262permitipsource50destination55rule264permitipsource50destination55rule265

15、permitipsource0destination620rule266permitipsource90destination620rule267permitipsource90destination410rule270permitipsource0destination0rule270comment/rule271permitipsource0destination50rule271comment/rule272permitipsource0destination30rule272comment/rule273permitipsource0destination55rule274permit

16、ipsource20destination0rule275permitipsource20destination50rule276permitipsource20destination30rule277permitipsource0destination00rule279permitipsource10destination55rule280permitipsource0destination55rule280commenthotmailrule281permitipsource0destination55rule281commenthotmailrule282permitipsource0d

17、estination80rule282commenthotmailrule283permitipsource20destination55rule283comment/rule293permitipsource0destination55rule293commenthotmailrule294permitipsource0destination55rule294commenthotmailrule295permitipsource0destination55rule295commenthotmailrule296permitipsource60destination55rule300permi

18、tipdestination70rule300comment/rule301permitipdestination650rule301comment/rule302permitipdestination00rule302comment/rule303permitipdestination130rule303comment/rule304permitipdestination0rule304comment/rule305permitipdestination880rule305commentrule306permitipdestination420rule306comment/rule307pe

19、rmitipdestination0rule307comment/rule308permitipdestination450rule308comment/rule309permitipdestination0rule309comment/rule310permitipdestination470rule310comment/rule311permitipdestination280rule311comment/rule312permitipdestination20rule312comment/rule313permitipdestination00rule313comment/rule314

20、permitipdestination060rule314comment/rule315permitipdestination740rule315comment74/exchangerule316permitipdestination790rule316comment/rule317permitipdestination580rule317comment/rule318permitipdestination0rule318comment/jkl/login.jsprule319permitipdestination90rule319comment/rule440permitipsource0d

21、estination55rule441permitipsource0destination55rule442permitipsource0destination0rule443permitipsource0destination55rule444permitipsource0destination55rule500permitipsource0destination90rule500comment/rule501permitipsource0destination70rule502permitipsource0destination60rule502comment/rule503permiti

22、psource0destination100rule503comment/rule504permitipsource0destination30rule504comment/rule505permitipsource0destination55rule506permitipsource0destination00rule506comment/rule507permitipsource0destination80rule507comment/rule510permitipsource30destination30rule511permitipsource70destination30rule51

23、2permitipsource30destination90rule513permitipsource70destination90rule514permitipsource30destination70rule515permitipsource70destination70rule516permitipsource30destination60rule517permitipsource70destination60rule518permitipsource30destination100rule519permitipsource70destination100rule520permitips

24、ource30destination30rule521permitipsource70destination30rule523permitipsource70destination55rule524permitipsource70destination00rule525permitipdestination90rule526permitipdestination10rule527permitipdestination030rule528permitipdestination580rule529permitipdestination450rule530permitipdestination00r

25、ule531permitipdestination180rule532permitipsourcex.x.x.2290rule533permitipdestination20rule534permitipdestination30rule535permitipdestination450rule536permitipdestination80rule537permitipdestination930rule538permitipdestination520rule539permitipdestination220rule540permitipdestination200rule541permi

26、tipdestination500rule542permitipdestination400rule543permitipdestination50rule544permitipdestination400rule545permitipdestination430rule546permitipdestination400rule547permitipdestination270rule548permitipsource490rule549permitipdestination070rule550permitipdestination900rule551permitipdestinationx.

27、x.x.2260rule552permitipdestination40rule553permitipdestination780rule554permitipsourcex.x.x.2260rule2025permitipdestination80rule2026permitipdestination00rule2027permitipdestination40rule2028permitipdestination250rule2029permitipdestination00rule2030denyipdestination190rule2040denyipdestination330ru

28、le2060denyipdestination000rule2070denyipdestination55rule2080denyipdestination55rule2090denyipdestination55rule3000denyipdestination55rule3001denyipdestination55rule3002denyipdestination55rule3003denyipdestination55rule3004denyipdestination55rule3100denyudpdestination-porteq8000rule3101denyudpdestin

29、ation-porteq4000rule60255denyipsource55rule60256permitipdestination000rule60257permitipsource60destinationx.x.x.2260rule60258permitipsource10destinationx.x.x.2260aclnumber3001rule0permitipaclnumber3014#connection-limitpolicy0limit0acl2001per-sourceamount201limit1acl3002per-sourceamount2541#aclnumber4000#interf