|
|
实验环境, k2 X* |1 Q2 l# j+ H
K' q% s1 f! E( Z* v X; q
pppoe-client上面的接口信息
- ^8 Y+ H# {/ V* w, p; t+ h! w9 k" C3 o
[AR1]dis ip interface brief
. c/ F1 f+ L, J' m; I3 h*down: administratively down
4 \! h, ?5 H8 e+ I) p^down: standby
9 ]- Q- u$ o/ `" H- M1 ~7 _(l): loopback- g3 X# h" P- o
(s): spoofing! S3 c! H$ E2 c. T$ h7 e
The number of interface that is UP in Physical is 27 T; }. y! J+ G) F# ~4 J; v' u; p
The number of interface that is DOWN in Physical is 1
: Q; I/ H8 _; G& e* P% g2 \1 R; {The number of interface that is UP in Protocol is 1
# j3 @/ G9 O9 s% b8 T( l- YThe number of interface that is DOWN in Protocol is 2' Q7 v |" @ E- [. _0 N
1 i9 D6 X8 O2 y5 f$ Q" |Interface IP Address/Mask Physical Protocol ) {" T8 B% A. }6 V0 i. B
GigabitEthernet0/0/0 unassigned up down
% k6 U; y% N8 Z; V5 Q5 Y AGigabitEthernet0/0/1 192.168.1.254/24 down down
8 x* B8 L1 j6 a& D& c& M" ]$ O$ xNULL0 unassigned up up(s) " _) u9 @+ s( [: J6 ]
7 G8 Z* ]0 O2 C3 Q- ~- o
: C# f- m$ P$ u
配置了基于接口的DHCP
% H1 z7 [0 Z% f* h( Y# p* k. [0 \: ~% T% G$ f5 I) U4 m1 ]
interface GigabitEthernet0/0/15 L( i" N$ e0 d/ [# o V0 q5 \
ip address 192.168.1.254 255.255.255.0
6 W( j6 ~4 M& P$ m* B dhcp select interface
1 I7 e" |) B' ?5 T dhcp server dns-list 8.8.8.8 ( [! S; C5 B" x9 u) N' D2 I" b
dhcp server domain-name pokes.com
- Z. P- c) }& [$ G
/ X$ N( M3 h# J" y+ S7 h$ N注意事项:AR1、AR2的物理接口g0/0/0不配地址.. w+ W% h7 U6 Z6 q4 ]
/ Z* w2 t9 ~% Z* |" @! D9 O
一、pppoe-server的配置
f8 |' m, q+ F5 n1、pppoe-server 配置地址池$ F+ ^& i* T' ^ P( U7 m
[pppoe-server]ip pool pokes #创建名为pokes的地址池,名字可以随便起,后面要调用
- X- `! f+ T& F. S6 o7 w8 nInfo: It's successful to create an IP address pool." v3 h) L' \9 `$ \( e/ M
[pppoe-server-ip-pool-pokes]network 10.1.12.0 mask 24 #地址池为10.1.12.0/24
! \' w) ` W# E( j8 T) j: k9 o3 u, Y5 n[pppoe-server-ip-pool-pokes]dis th
6 W0 H; s5 i$ d, i7 H[V200R003C00]) x B+ S# \0 o5 }* q
#
7 I* i8 O3 E2 a3 e( I" ^+ Kip pool pokes
0 ]9 D! U$ ^! V+ W network 10.1.12.0 mask 255.255.255.0 ?: N: |* i- g7 O8 [% V" k
#
+ P/ h. N' n4 U8 U2 S# Creturn* _- S; ` e' a
[pppoe-server-ip-pool-pokes]q
1 f# A# s. }( c: P3 M" l( U% h4 Q m0 V7 }& R
2、配置虚拟口关联地址池
3 h$ X& V+ L* B* d配置虚拟口关联地址池,即创建Virtual-Template 1模版。
. C: r& d" q. t" m2 Z4 a, H4 A, b. Y; X8 o: W
[pppoe-server]interface Virtual-Template 1 #创建虚拟接口1
, L9 X5 t8 @: p1 H5 ?) z% k[pppoe-server-Virtual-Template1]ip add 10.1.12.2 24 #虚拟接口1的地址4 ? @7 \; ~1 z6 {2 J/ f3 f) d
[pppoe-server-Virtual-Template1]ppp authentication-mode chap #认证类型& f' }9 B% v0 b4 M
[pppoe-server-Virtual-Template1]remote address pool pokes #客户端的地址池pokes
' s7 H7 t- T) T[pppoe-server-Virtual-Template1]dis th: O# p, w0 ~" _) l/ D- M' B: C
interface Virtual-Template1
: G b8 L, v3 E; H+ c ppp authentication-mode chap % Y. P& ~/ S/ G& s0 C0 u
remote address pool pokes6 E& ?6 w. g7 U) f( U9 ]8 l8 n
ip address 10.1.12.2 255.255.255.0& A3 D2 V! H& X E2 N
5 J, @/ r* N1 O& Z9 ~2 J
[pppoe-server]int g0/0/0 4 D. h( c' [* x" R
[pppoe-server-GigabitEthernet0/0/0]pppoe-server bind virtual-template 1 #将虚拟接口1关联到g0/0/0接口
2 W+ u( r1 ^8 y% Z' _, G. A[pppoe-server-GigabitEthernet0/0/0]dis th
1 [# g. _" t1 ?( r0 M \$ W8 a[V200R003C00]
* {( T# O# r+ @ V# O#
( V! S$ y9 h/ l$ jinterface GigabitEthernet0/0/0
! M: n" }7 D6 t8 i# j5 @! r2 I" w pppoe-server bind Virtual-Template 1. i0 f5 i7 I' a+ e. Q* A
#
) ]) U- O/ B6 K1 _9 c! freturn5 }7 F" ^* P3 h% ]; r
[pppoe-server-GigabitEthernet0/0/0]
2 M& H/ v- M3 n( |3 n6 R% {% ]' r# ~ x$ V7 B
3、创建pppoe拨号的账号
! h2 ^: `" F; F1 Z& ~; L按理我们应该创建pppoe拨号的账号。
' w$ B/ s" T% p' R8 i这里为了演示拨号失败,我们这里先不新建账号,后面再新建。7 m' f; Z: p" M. i
$ |3 l- e8 I$ l$ H' h% o0 y7 c二、pppoe-client的配置
( F7 z5 N/ T& u[pppoe-client]dialer-rule 6 W6 z8 d# ]2 k
[pppoe-client-dialer-rule]dialer-rule 1 ?2 S: x7 c: V% q9 [% z5 F
acl Permit or deny based on access-list
4 m [- G) J7 N, x1 j ip Ip
* K, c4 y" k$ j ipv6 Ipv6
M/ |) ~) {+ u# n6 z0 s. F[pppoe-client-dialer-rule]dialer-rule 1 ip permit #创建拨号规则,允许ip流量触发拨号2 P" g: s) U8 f) d) p+ M
( C4 S4 d: d5 v* s& W$ ^" ]
[pppoe-client]interface Dialer 1" Z" m7 F9 G( Y5 V9 }
Jul 15 2021 18:55:22-08:00 pppoe-client %%01IFPDT/4/IF_STATE(l)[0]:Interface Dia
9 }1 R: O! G4 z# C5 a' S, ller1 has turned into UP state.
0 Y2 g# D# T8 g4 y7 D[pppoe-client-Dialer1]ip add
( k h0 w" G: v2 }[pppoe-client-Dialer1]ip address ppp
, n. h3 N3 I" A/ K[pppoe-client-Dialer1]ip address ppp-negotiate #地址采用ppp协商2 @0 k8 }3 B4 Z8 m3 a; D% m- Q
6 Y* O! ]/ K0 \1 n( J% G0 w7 U, g[pppoe-client]interface Dialer 1 #创建接口拨号组1
* e, B3 U: {' {, y6 a[pppoe-client-Dialer1]ip address ppp-negotiate #ip地址采用ppp协商
0 M' b+ C/ M2 H) @ |% E[pppoe-client-Dialer1]dialer user zhprny #此用户不用于认证,是标识作用以及和dialer绑定: p: e2 D+ O2 m
[pppoe-client-Dialer1]dialer bundle 1 #设备通过Dialer bundle将物理接口与拨号接口关联起来。
, s" L, |- }) h[pppoe-client-Dialer1]dialer-group 1 #放到一个拨号访问组1中
3 f& C0 B2 x0 _. V7 ^[pppoe-client-Dialer1]ppp chap user pokes #指定dialer1接口的编号,拨号账号6 I9 B% n" l; U; O' U
[pppoe-client-Dialer1]ppp chap password 123456 #拨号的密码
3 m6 P/ {! x) ~/ {
3 w0 |/ c2 O2 S; b: a2 F$ v0 O" d. m! D4 {
[pppoe-client-Dialer1]dis th/ ^% k$ K9 ~' ~
[V200R003C00]6 ]0 F- z5 Q5 Z* q/ S! B
#6 g. e8 K) W" L3 X+ X
interface Dialer1
( ?0 R; C( _& i. i# N8 v$ u4 m link-protocol ppp
0 r9 `$ o* k2 h" { ppp chap user pokes
+ f4 E6 X9 J% w ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$* R! o# q/ i$ y8 q5 `1 B4 b) ]# o
ip address ppp-negotiate' w- \( R! \/ x9 y( L4 A
dialer user zhprny
4 e3 c- E; j( ]$ Y& K4 w dialer bundle 1 H F3 D! a% x% a
dialer-group 1& Q' r+ K# B- a
0 I4 T. s, I u
[pppoe-client-GigabitEthernet0/0/0]" D6 S4 F1 @- D! Y9 Q* L
Jul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[0]:The line pr
# v+ ^6 l3 e1 _% o: @2 Motocol PPP on the interface Dialer1:0 has entered the UP state. #PPP已进入启动状态
. s; |5 t8 i b0 }4 h[pppoe-client-GigabitEthernet0/0/0]
~; F5 h% ~+ X2 I4 `+ c4 CJul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[1]:The line pr% g' T$ @6 S8 X2 G
otocol PPP on the interface Dialer1:0 has entered the DOWN state. #PPP已进入关闭状态
! \/ Y# A: u- {8 V! G: N. A# D+ h
$ t$ f1 X2 U5 W9 H#不停的循环。。。。* ?; }" G% \0 c' y: \ s" w
: |' H: T7 N' e. S0 L8 M g" `$ u9 r V. P) e4 y/ p
#原因是没有认证成功,因为我们在PPPOE-server上面还没有创建认证用户和密码! ?6 r% B$ f; F$ F: t7 T( E) |4 q' L
. X0 `0 e, P4 f0 k0 ?, Y: C7 G% w
三、pppoe服务器上新建认证用户
& q }* B: `8 ?% ~- A) Z, G$ z. j. D我们到服务器上直接新建认证用户:9 t7 |' G7 O& q0 I
; Z* H0 |; G9 b+ l) _) ^0 o[pppoe-server]aaa0 O5 S# E/ y0 r$ ~
[pppoe-server-aaa]local-user pokes password cipher 123456
! L" ^# v0 k' y0 b+ |* u2 z: k& cInfo: Add a new user.
# }6 Q! I" g2 |[pppoe-server-aaa]local-user pokes service-type ppp #类型为ppp
4 V {4 V+ w0 E/ G% v& r1 \' \2 C, \; u, L% ?9 E
! [' C, g, ?% _3 \/ M* j6 w/ w/ |四、客户端验证结果+ m5 @/ Y ^' }4 ~: o6 X
1、认证成功信息) C8 M6 ~" W S, w7 N/ h9 g J/ ], v
然后客户端就会出现认证成功的提示:
- `! v, Q0 \1 ?& J$ |" B6 t: ]: K/ f7 }% H0 `, X
[pppoe-client-GigabitEthernet0/0/0]
) q4 q! Y2 |! t- Q6 q* m. z: nJul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[10]:The line p
8 `; c: m+ ~0 U8 K9 `, Q6 g+ I N. vrotocol PPP on the interface Dialer1:0 has entered the UP state.
) E4 U% w% @. {4 V$ [[pppoe-client-GigabitEthernet0/0/0]
- O: U- \ C# c8 b( b* t# XJul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[11]:The line p
% c$ v% O% d; `" T% n& R* M2 Srotocol PPP IPCP on the interface Dialer1:0 has entered the UP state. - @# M3 w) }* k$ B4 Z) M& i
[pppoe-client-GigabitEthernet0/0/0]q
- y% t% h3 f2 Y8 ^5 F: y0 X[pppoe-client]dis ip in b
4 h6 g- o! a \*down: administratively down
8 ?& V2 H4 Y$ {/ H. v) S^down: standby& M% `3 \. Y# V+ s
(l): loopback* N! x' p1 q% X) k. o
(s): spoofing
' q' P: Y' H8 T$ f e. gThe number of interface that is UP in Physical is 41 B) V' g F2 n" x
The number of interface that is DOWN in Physical is 0
2 u) \# a1 z- Q# BThe number of interface that is UP in Protocol is 3
$ }( \# e& Q1 T2 r5 @% jThe number of interface that is DOWN in Protocol is 18 @( d/ U3 ~5 \5 G5 r- T1 P- F
2 v0 _# ? k+ K8 q5 e$ Z8 h
Interface IP Address/Mask Physical Protocol 0 N f: Z' V5 _
Dialer1 10.1.12.254/32 up up(s) #拿到了PPPOE服务器上的地址* N/ B2 Q9 F5 D
GigabitEthernet0/0/0 unassigned up down
1 ^" @4 _& R+ C1 A2 bGigabitEthernet0/0/1 192.168.1.254/24 up up . D3 L# }0 G. K* E7 c8 [2 I
NULL0 unassigned up up(s) 4 C: G$ N5 p" V5 S1 ?
% B2 r+ U5 s$ H# Q/ R% h
2 n5 u8 c& `, D$ o2、pppoe-server 信息
8 `! K: l" f. K; g# x: r$ w<pppoe-server>dis interface Virtual-Template 14 X( V' g+ x) S0 C0 A6 N
Virtual-Template1 current state : UP
l7 c, y0 K6 d# g& zLine protocol current state : UP) Z" P/ J% t2 C- \
Last line protocol up time : 2021-07-15 19:09:22 UTC-08:00
- V* ~: L. P U' c- M- `7 DDescription:HUAWEI, AR Series, Virtual-Template1 Interface
$ ~+ M& y8 [8 Y+ eRoute Port,The Maximum Transmit Unit is 1492, Hold timer is 10(sec)
& K4 `9 v e9 {; z( B# dInternet Address is 10.1.12.2/24( S' n4 b- s1 E; N( q
Link layer protocol is PPP( d+ h! _9 s( b, \" ~) c y, M
LCP initial
0 @$ M- p0 ~; R% H; j( _) `- }Physical is None
! Y: j; ]% K( ?Current system time: 2021-07-15 20:27:28-08:00) K% z+ m% r: q, Y$ [. p
Last 300 seconds input rate 0 bits/sec, 0 packets/sec
4 I/ u1 I, ?7 D# C& ~6 E* ^ Last 300 seconds output rate 0 bits/sec, 0 packets/sec
2 }! y$ r: I6 m0 U; N5 k( ?/ ] Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec5 q1 h* ^% a8 ~: w' t; [
Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
2 T$ O. d, [8 Y4 A3 Y6 V Input: 0 bytes
/ O5 N* ?! r: \$ ], s8 X! S, E Output:0 bytes) G# o1 P5 @2 Q6 ?: r
Input bandwidth utilization : 0%9 l3 t4 C; F1 V" a+ B$ k
Output bandwidth utilization : 0%1 T; K7 _! W/ }) i" S' V
, Y' `1 }( h a% G
<pppoe-server>/ S1 Z+ t' x' _1 K9 k) e
) x( `; M( Z% ~3 z2 m# a# Y
* P) c' @1 ?% B G3、pppoe-client信息) B' \$ O' x& [, A% @
<pppoe-client>dis interface Dialer 1
& k9 K6 l3 V7 D% tDialer1 current state : UP
0 n8 c6 {! S7 S9 l8 p! X7 H7 r/ g$ XLine protocol current state : UP (spoofing)7 T5 `9 K, u- e9 K3 T. P# N, k
Description:HUAWEI, AR Series, Dialer1 Interface" D: V* _3 Y# M7 u: L
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)' [5 m6 z4 R$ F5 s; m
Internet Address is negotiated, 10.1.12.254/32" L" c- y2 a" y6 E6 r0 u" C% D
Link layer protocol is PPP
) e5 ] v( D! g8 k% `LCP initial' K6 w0 S* k; `
Physical is Dialer
4 K( ?: l8 d5 ?' ?+ J7 C0 T( d8 qCurrent system time: 2021-07-15 20:23:56-08:00! }* {$ s" {& E F' e) P6 ~& n
Last 300 seconds input rate 0 bits/sec, 0 packets/sec" E" N) `# Y( r8 i" Z
Last 300 seconds output rate 0 bits/sec, 0 packets/sec1 Z5 R6 v, a2 c, w1 N4 A% n6 f* X
Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
7 h% \2 z+ T4 K4 l( o Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec- l- v* P5 P. e9 A: u! e, e' g0 P
Input: 0 bytes1 s# p m% H# H! U: G# c
Output:0 bytes
4 U, w" \/ L+ i) T3 f/ A _ Input bandwidth utilization : 0%
/ H3 o1 ]( d" w2 S Output bandwidth utilization : 0%5 Z9 \4 \# u% W1 s' ]( F, ?
Bound to Dialer1:0:
/ a* K8 h, f& f! [. Y5 r- x* RDialer1:0 current state : UP ,
. x: a8 r1 F% O8 [; I* g( k$ e2 p3 iLine protocol current state : UP
" E K( b, c6 S7 [" [! W' f9 k8 Y! f
Link layer protocol is PPP
$ [- i7 |7 H1 w; z: mLCP opened, IPCP opened
3 b. }* ?8 {- U9 L% NPackets statistics:: {" \2 y# Y: X7 ^2 O* S
Input packets:0, 0 bytes% }# u# u- @7 Y p \8 ]# G, X
Output packets:4, 336 bytes
8 n. _+ W# R' m& ] FCS error packets:0, }( N0 b# ]1 Z9 f. \9 M' N3 K
Address error packets:0
! N) F; P) n# y* l: i% d Control field control error packets:0
3 Z9 ~: p0 T5 y: l9 e+ `6 s7 u& s3 Z( t/ |# l7 F
* w2 p6 u/ \5 D+ ~# w<pppoe-client>! l/ t9 z( H# n& f0 O( H$ A! V' u9 i& d
" C5 A) c: r7 |+ H! q
五、NAT的配置: `5 Y" W0 j4 j1 ^' G! e
用PC2直接ping 10.1.12.254是可以通的。10.1.12.254是AR1的g0/0/0口获取到的地址,其实就是我们常说的WAN口地址。
: u' k: m8 y; l# O$ v4 B+ \ o5 M/ g6 \0 B- X$ p
PC2>ping 10.1.12.254
; F8 o D, C" [% E: ^
7 x9 Q$ m9 \( d; J/ z# D+ pPing 10.1.12.254: 32 data bytes, Press Ctrl_C to break: |9 |- @9 w, N$ d; i, q
From 10.1.12.254: bytes=32 seq=1 ttl=255 time=63 ms
( I6 Z* p3 }* GFrom 10.1.12.254: bytes=32 seq=2 ttl=255 time=31 ms" M) S; ]1 m( O; c( Z3 A: V$ e
From 10.1.12.254: bytes=32 seq=3 ttl=255 time=47 ms
% f) \: [8 n. U1 LFrom 10.1.12.254: bytes=32 seq=4 ttl=255 time=31 ms7 ~/ T0 u& V8 ^# X: S
From 10.1.12.254: bytes=32 seq=5 ttl=255 time=47 ms. }! y8 [4 c8 j O$ o7 P
0 b, y9 n% [3 _/ l: S--- 10.1.12.254 ping statistics ---; a. ?4 L$ F" u# y9 v; u
5 packet(s) transmitted
" L5 }3 w7 r; q* M 5 packet(s) received5 ?4 k0 o! e t4 A7 U/ C$ Q
0.00% packet loss
/ K3 ~1 n9 l, B! a0 i round-trip min/avg/max = 31/43/63 ms! z& {9 V( d/ C
; n6 s& F/ k' O+ R0 z \: ^, h9 X
PC2>ping 10.1.12.2' g$ O2 E" j& y0 }' p
7 i. N( L, A1 x1 c) B1 N; x- A% u8 ]Ping 10.1.12.2: 32 data bytes, Press Ctrl_C to break
# f, A. t* S: q7 U: g1 m* TRequest timeout!* C6 d, ~! |# b' w" [/ d
Request timeout!% s1 b4 f& ]8 N8 e! O- W! X
Request timeout!. p& a+ W; K" ?9 C/ i3 B" m
Request timeout!. q* m0 o4 d2 I( w1 }9 j8 \0 U
Request timeout!
, k9 c( W3 f9 U: y6 ?* F8 C4 N7 C# K* p9 @% o! J. M
--- 10.1.12.2 ping statistics ---
8 v6 h f" f5 I" |4 g' o C 5 packet(s) transmitted
* m# O+ K# d7 z 0 packet(s) received
* a0 V( b) i& n, o5 i 100.00% packet loss
& }) P$ h$ W: S x#但是无法ping通10.1.12.2
5 h4 [/ k( [, L$ E9 t& b# j/ g& k# a* p! j) t& L6 c7 E
5 [) J/ B6 V" L# c7 P无法ping通10.1.12.2的原因是:我们没有做NAT .接下来我们在pppoe-client上面做NAT
. W0 F+ [. E+ V4 y4 L6 o* {9 A! S( ~# y9 O
1、这里配置规则20005 {: [/ S$ j+ F
[pppoe-client]acl number 2000
* ^7 n; y! ~+ E7 I' }8 F0 l$ r[pppoe-client-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
/ z3 ~0 s. C1 U2 i/ N, x* |5 @+ d8 V/ c+ t1 K$ `' r
2、将规则2000绑定到接口
/ `" i8 r- {3 ^7 c5 X如下接口信息,需要注意的是pppoe的接口是Dialer1,并不是GigabitEthernet0/0/0口。我们必须将规则绑定在Dialer1口,最容易犯错的就是直接绑定在g0/0/0口。
" d+ o. U# J/ u9 M l
]/ K6 H& n( t+ U8 L[pppoe-client]dis ip int b; R' N" I9 P9 C) \; T! g, C$ P7 Y+ r
*down: administratively down
2 d( F% U: l1 V^down: standby
8 b" i% G9 w! O(l): loopback
# L( ]# e) T5 X7 b# E* {(s): spoofing
; |) ]* S" z' k$ d$ |+ VThe number of interface that is UP in Physical is 4
' w2 z$ I3 I$ `: D. }The number of interface that is DOWN in Physical is 0
, z: [+ s7 s8 L4 x; YThe number of interface that is UP in Protocol is 3. J q" B: n! i; n
The number of interface that is DOWN in Protocol is 19 n3 ~) H3 O: ?; n9 c
[ L! | L! X
Interface IP Address/Mask Physical Protocol
9 \; ~7 w( I0 `$ P# s9 v# pDialer1 10.1.12.254/32 up up(s)
) k& C1 X) A" ^' K& m3 I- M8 nGigabitEthernet0/0/0 unassigned up down
& m3 O& v' R+ ~% ~. c: Z' ZGigabitEthernet0/0/1 192.168.1.254/24 up up ' Z2 p- B& ]6 s5 x. T
NULL0 unassigned up up(s)
; z* n8 ], n: a, K( g[pppoe-client]
5 K5 n/ m) b3 i! i8 c0 f7 L7 b# Y4 ?2 c- P/ v
[pppoe-client]int Dialer 1 & `* L* @& C% X, a, @/ k
[pppoe-client-Dialer1]nat outbound 2000
" o% _$ t5 F+ ^[pppoe-client-Dialer1]dis th; Q1 b9 C6 a1 S5 W9 E
[V200R003C00]5 n; q3 r" P2 ?8 t" F
#
" O9 A! K5 ]7 l) Y! iinterface Dialer1
. K9 z: ~/ X/ ?1 C) F3 Q: K) X link-protocol ppp/ I# E4 `& @9 I% _
ppp chap user pokes7 D6 F& G4 Y/ I2 h* ]
ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$
; A4 L: b; o4 z8 ?) n! u ip address ppp-negotiate$ j1 D# D1 N$ p8 n. ^
dialer user zhprny
, y3 D9 K' h' ]+ {7 l% ? dialer bundle 17 X' b; `9 ?& V
dialer-group 1; {% P* y; R- d# |0 f# z! [: k0 {
nat outbound 20006 @; P0 r3 u5 t/ c; z
#
4 L8 R: ]& Q8 V4 U1 y- {return
8 {: n$ a: I0 s4 t [. N[pppoe-client-Dialer1]! r {# @3 X8 N& S$ `" v
4 a4 u' ]( a0 m$ v4 Z% ^; B
接下来我们就可以ping通10.1.12.2 了。3 i% F, M* B+ Y8 c
% u) g( Y% G9 l! ~8 F& i, r
PC2>ping 10.1.12.2! @8 [3 [0 n! }4 }5 u) X" \; s
8 M6 }; ~- P, X3 s/ vPing 10.1.12.2: 32 data bytes, Press Ctrl_C to break
6 G4 f0 @/ C2 m2 z2 E, ?. }From 10.1.12.2: bytes=32 seq=1 ttl=254 time=31 ms. j2 j7 b: E) h1 g! n
From 10.1.12.2: bytes=32 seq=2 ttl=254 time=32 ms; ~+ h2 P& C3 K' M3 R* r8 A
From 10.1.12.2: bytes=32 seq=3 ttl=254 time=46 ms
# D, ]& o! {9 b" DFrom 10.1.12.2: bytes=32 seq=4 ttl=254 time=32 ms
5 G+ O' Q& B$ v, q% V0 H- cFrom 10.1.12.2: bytes=32 seq=5 ttl=254 time=31 ms- G; w2 J% a7 H* J
+ o1 ?: j3 n; e- l' y5 ?- z--- 10.1.12.2 ping statistics ---% R2 R! Z8 f5 d# S
5 packet(s) transmitted. M# v5 v* `& l: @' p
5 packet(s) received3 h+ Y4 M5 R, @- j/ H& |
0.00% packet loss: A: q, K7 l! F7 d) ?0 @1 ^' O' G; k
round-trip min/avg/max = 31/34/46 ms2 t; D0 [+ H/ z# Y6 F3 s
( W3 q0 ~2 D8 f+ [' H2 O
3 n) \9 P$ U! v |
|