VPN 故障情况.docx

VPN 故障情况.docx

《VPN 故障情况.docx》由会员分享，可在线阅读，更多相关《VPN 故障情况.docx（17页珍藏版）》请在冰点文库上搜索。

VPN故障情况

JuniperSSG520作为总公司的接入设备，同时作为VPNserver。

其IP地址为x.x.x.226。

应用服务器的IP地址为x.x.x.227（NAT一对一）。

分公司的软件需要通过VPN接入总公司的网络访问应用服务器。

H3CAR18-23S-1作为分公司的接入设备，其IP地址为y.y.y.161。

现在遇到的问题是分公司的PC用L2TP拨226不正常，有时能够成功，有时不成功，成功也是经过多次连接重试之后才成功的。

但在分公司之外用L2TP拨226很正常。

成功率100%，而且连接非常的迅速。

如将分公司的PC拿到分公司以外的网络就很正常。

以下是H3CAR18-23s-1的配置。

sys

SystemView:

returntoUserViewwithCtrl+Z.

[H3C]disp

[H3C]displaycurr

[H3C]displaycurrent-configuration

#

sysnameH3C

#

clocktimezonegmt+08:

004add08:

00:

00

#

cpu-usagecycle1min

#

firewallenable

#

connection-limitenable

connection-limitdefaultactiondeny

connection-limitdefaultamountupper-limit50lower-limit20

#

nataddress-group1y.y.y.162y.y.y.166

#

qoscarl1source-ip-addressrange192.168.1.10to192.168.1.255per-address

qoscarl2destination-ip-addressrange192.168.1.10to192.168.1.255per-address

#

DNSresolve

DNSserver219.150.32.132

DNSserver202.99.96.68

DNS-proxyenable

#

webset-packageforceflash:

/http.zip

#

iphttpacl2000

#

radiusschemesystem

#

domainsystem

#

local-useradmin

passwordcipherY5^4NI&IO:

MLaN9G%UD&AA!

!

service-typetelnetterminal

level3

service-typeftp

local-userlaso

passwordsimplelaso24

service-typetelnet

level3

#

detect-group1

detect-list1ipaddressy.y.y.161nexthopy.y.y.161

#

detect-group2

detect-list1ipaddress60.28.137.9nexthop60.28.137.9

#

aclnumber2000

rule0permitsource192.168.1.00.0.0.255

rule1deny

#

aclnumber3000

rule3permitipsource192.168.1.60

rule100permitipdestination202.99.96.680

rule100commentMainDNSServer

rule101permitipdestination219.150.32.1320

rule101commentSecendryDNSServer

rule102permitipdestination218.68.250.1170

rule110permitipdestinationx.x.x.2290

rule110commentOAandE-emailserver

rule111permitipdestination65.55.15.1220

rule111commentE-email

rule112permitipdestination207.46.0.00.0.255.255

rule112commentMSNServer

rule113permitipdestination218.68.250.1190

rule113commentE-email

rule114permitipdestination65.54.0.00.0.255.255

rule114comment

rule116permitipdestination202.108.5.00.0.0.255

rule116comment

rule117permitipdestination220.181.12.1010

rule118permitipdestination60.211.251.00.0.0.255

rule118comment

rule119permitipsource192.168.1.1600

rule120permitipsource192.168.1.1610

rule121permitipsource192.168.1.1620

rule122permitipsource192.168.1.1630

rule123permitipsource192.168.1.1640

rule124permitipsource192.168.1.1650

rule125permitipsource192.168.1.1660

rule126permitipsource192.168.1.1670

rule127permitipsource192.168.1.1680

rule128permitipsource192.168.1.1690

rule129permitipsource192.168.1.1700

rule130permitipsource192.168.1.1710

rule131permitipsource192.168.1.1720

rule132permitipsource192.168.1.1730

rule133permitipsource192.168.1.1740

rule134permitipsource192.168.1.1750

rule135permitipsource192.168.1.1760

rule136permitipsource192.168.1.1770

rule137permitipsource192.168.1.1780

rule138permitipsource192.168.1.1790

rule139permitipsource192.168.1.1800

rule140permitipsource192.168.1.1810

rule141permitipsource192.168.1.1820

rule142permitipsource192.168.1.1830

rule143permitipsource192.168.1.1840

rule144permitipsource192.168.1.1850

rule145permitipsource192.168.1.1980

rule146permitipsource192.168.1.1870

rule147permitipsource192.168.1.1880

rule148permitipsource192.168.1.1900

rule149permitipsource192.168.1.1910

rule151permitipsource192.168.1.2210

rule152permitipsource192.168.1.2200

rule153permitipsource192.168.1.2410

rule157permitipsource192.168.1.1920

rule158permitipsource192.168.1.1930

rule159permitipsource192.168.1.1940

rule160permitipsource192.168.1.2350

rule161permitipsource192.168.1.1950

rule162permitipsource192.168.1.2400

rule163permitipsource192.168.1.2360

rule195permitipsource192.168.1.330destination202.108.3.1900

rule196permitipsource192.168.1.1940destination218.68.250.1170

rule197permitipsource192.168.1.330destination202.108.3.2420

rule201permitipsource192.168.1.50destination211.151.252.00.0.0.255

rule202permitipsource192.168.1.150destination211.151.252.00.0.0.255

rule205permitipsource192.168.1.150destination123.103.65.00.0.0.255

rule206permitipsource192.168.1.150destination60.28.183.00.0.0.255

rule207permitipsource192.168.1.50destination123.103.65.00.0.0.255

rule208permitipsource192.168.1.50destination60.28.183.00.0.0.255

rule211permitipsource192.168.1.50destination60.30.26.00.0.0.255

rule212permitipsource192.168.1.150destination60.30.26.00.0.0.255

rule214permitipsource192.168.1.50destination116.213.92.2050

rule214comment

rule215permitipsource192.168.1.150destination116.213.92.2050

rule217permitipsource192.168.1.50destination125.39.33.1630

rule217comment

rule218permitipsource192.168.1.150destination125.39.33.1630

rule223permitipsource192.168.1.50destination210.192.125.290

rule224permitipsource192.168.1.50destination60.28.124.00.0.0.255

rule225permitipsource192.168.1.50destination61.129.48.1910

rule226permitipsource192.168.1.150destination210.192.125.290

rule227permitipsource192.168.1.150destination60.28.124.00.0.0.255

rule228permitipsource192.168.1.150destination61.129.48.1910

rule231permitipsource192.168.1.50destination211.99.188.00.0.0.255

rule232permitipsource192.168.1.150destination211.99.188.00.0.0.255

rule234permitipsource192.168.1.50destination60.30.83.930

rule235permitipsource192.168.1.150destination60.30.83.930

rule237permitipsource192.168.1.50destination61.136.19.660

rule238permitipsource192.168.1.150destination61.136.19.660

rule241permitipsource192.168.1.50destination60.28.158.2470

rule242permitipsource192.168.1.150destination60.28.158.2470

rule243permitipsource192.168.1.50destination222.73.161.1680

rule244permitipsource192.168.1.150destination222.73.161.1680

rule247permitipsource192.168.1.50destination61.129.52.1930

rule248permitipsource192.168.1.150destination61.129.52.1930

rule250permitipsource192.168.1.50destination61.155.43.2030

rule251permitipsource192.168.1.150destination61.155.43.2030

rule256permitipdestination124.40.42.1260

rule257permitipsource192.168.1.150destination202.108.22.00.0.0.255

rule258permitipsource192.168.1.50destination202.108.22.00.0.0.255

rule260permitipsource192.168.1.40destination202.108.3.2420

rule261permitipsource192.168.1.40destination202.108.3.1900

rule262permitipsource192.168.1.350destination202.108.3.00.0.0.255

rule264permitipsource192.168.1.150destination202.108.3.00.0.0.255

rule265permitipsource192.168.1.40destination202.165.103.1620

rule265comment

rule266permitipsource192.168.1.290destination202.165.103.1620

rule267permitipsource192.168.1.290destination203.209.228.2410

rule270permitipsource192.168.1.40destination221.12.118.20

rule270comment

rule271permitipsource192.168.1.40destination61.156.39.350

rule271comment

rule272permitipsource192.168.1.40destination210.51.168.130

rule272comment

rule273permitipsource192.168.1.40destination221.194.137.00.0.0.255

rule273comment

rule274permitipsource192.168.1.520destination221.12.118.20

rule275permitipsource192.168.1.520destination61.156.39.350

rule276permitipsource192.168.1.520destination210.51.168.130

rule277permitipsource192.168.1.40destination202.99.102.300

rule279permitipsource192.168.1.410destination202.99.102.00.0.0.255

rule280permitipsource192.168.1.50destination204.2.0.00.0.255.255

rule280commenthotmail

rule281permitipsource192.168.1.50destination64.4.0.00.0.255.255

rule281commenthotmail

rule282permitipsource192.168.1.50destination221.192.148.580

rule282commenthotmail

rule283permitipsource192.168.1.420destination202.99.102.00.0.0.255

rule283comment

rule293permitipsource192.168.1.50destination65.55.15.00.0.0.255

rule293commenthotmail

rule294permitipsource192.168.1.50destination157.238.197.00.0.0.255

rule294commenthotmail

rule295permitipsource192.168.1.50destination60.28.252.00.0.0.255

rule295commenthotmail

rule296permitipsource192.168.1.460destination202.99.102.00.0.0.255

rule300permitipdestination210.13.74.670

rule300comment

rule301permitipdestination210.51.39.1650

rule301comment

rule302permitipdestination161.165.206.200

rule302commenthttps:

//retaillink.wal-

rule303permitipdestination203.86.31.1130

rule303comment

rule304permitipdestination202.106.132.70

rule304commenthttp:

//bjvrm.wu-

rule305permitipdestination218.69.108.1880

rule305comment

rule306permitipdestination210.51.45.2420

rule306comment

rule307permitipdestination211.152.35.50

rule307commenth