Shulou(Shulou.com)06/01 Report--

I. Overview

The main content of this chapter is to use ONPN to connect the branch router and the headquarters route, and to use static route to achieve two-way mutual access.

Second, set up headquarters settings: 1. Enable ONPN

Click PPP and select the following settings:

Click OK when you are finished.

two。 Set up account number

Previously, we used L2TP-IPSEC as a dialing service, but now we change this service to any to support a variety of services, so that all subsequent experiments do not need to be adjusted.

Click Secrets, select the account, and double-click.

The final four clients are as follows:

The headquarters router side is set up.

The branch set up 1. Import certificate

First of all, we upload the two certificates stored on the desktop to Branch A first.

Open winbox to connect to the branch router.

Click Files to select Upload and upload our certificate and KEY. (you can also drag and drop directly into winbox)

Upload complete

two。 Add a certificate

Click Import to find the CA file in the drop-down arrow and import it directly.

To import a Client certificate, you need to write your certificate password. Click Import.

Import the key file in the same way.

At this point you can see that the certificate properties are LAT and KT.

3. Configure ONPN dialing

Click PPP, and we first delete the previous L2TP connection.

Click the + sign to select ONPN Client

Fill in the account number and select the certificate

Click OK when you are finished, and the branch office will start dialing.

Double-click this connection to see details

4. Configure routing interworking

In the route of the branch, specify the route of the headquarters

Click IP > Routes

Click the + sign to add the headquarters segment

Note: the purpose of link checking is that this route will not take effect when the ONPN link is down.

Similarly, we add 192.168.12.0 Universe 24 and 192.168.13.0 Universe 24 at headquarters.

The route of the headquarters is explained in the L2TP-IPSEC account and does not need to be added again.

Branch A setup completed

Similarly, we configure branch B and branch C, so we won't repeat them.

III. Testing

Headquarters

PC-1:192.168.12.21

PC-2:192.168.13.21

Branch A

PC-3:172.25.1.254

Branch B

PC-4:172.25.2.254

Branch C

PC-5:172.25.3.254

Headquarters, three branches of PC-1 ping

PC2 Test:

PC-3 Test:

PC-4 Test:

PC-5 Test:

End of this chapter!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.