- 积分
- 16843
在线时间 小时
最后登录1970-1-1
|
马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有账号?开始注册
x
实验环境2 F4 Q! ~! M0 O' t) |
2 }1 l1 l2 N6 }0 i! G
pppoe-client上面的接口信息
; X) F3 [: Y* u3 |/ w2 p
* j$ m; e' ^! C- C3 d( y[AR1]dis ip interface brief
6 n* D3 j. n9 x# o( b6 b) W*down: administratively down
+ e. W4 s& i) `& I+ b' M^down: standby5 {7 ? l+ U9 F8 a. S6 Q
(l): loopback
0 N' H: s5 p( {: v6 z$ a(s): spoofing; l" d' p# Z1 @- H
The number of interface that is UP in Physical is 2
2 j% `) Q# a X8 z' G( MThe number of interface that is DOWN in Physical is 18 r( ~: H1 ~% y# M, Y- ]
The number of interface that is UP in Protocol is 1
) j3 L y2 V7 J1 w! K% X; b3 WThe number of interface that is DOWN in Protocol is 2; }, u- H1 g3 |0 n7 \& P- \
( W9 F: V6 k" h( C6 L0 lInterface IP Address/Mask Physical Protocol - D3 @& H6 l# S3 ?
GigabitEthernet0/0/0 unassigned up down : N- b0 ?; |' ]7 E
GigabitEthernet0/0/1 192.168.1.254/24 down down , c' w7 l) e( @! K
NULL0 unassigned up up(s)
: y; ]( }& ^7 i" R. W2 v
% A- c, H5 l- ]( `/ k# |9 o2 n: H7 }3 a# U1 E9 H
配置了基于接口的DHCP
1 S/ l0 M8 V" s0 P- E8 N- ~4 o) o5 _9 V+ F/ N8 o
interface GigabitEthernet0/0/1
. X7 v; i" J6 L9 i ip address 192.168.1.254 255.255.255.0 * B8 r" R/ b4 F: {1 {
dhcp select interface
' r1 x2 l: N" W: |5 Q6 R dhcp server dns-list 8.8.8.8 , W, B) N; p N; W7 Z+ j9 S( N
dhcp server domain-name pokes.com
3 Y6 N/ I; T0 B+ C9 d) v6 ^$ h2 E6 W2 L2 O4 G
注意事项:AR1、AR2的物理接口g0/0/0不配地址.
0 ~1 }6 O" b4 B) ^2 R: H3 Q f% N: b" p
一、pppoe-server的配置6 b B9 B- t) v8 J
1、pppoe-server 配置地址池
5 S/ x+ z3 b) A( G! \6 h[pppoe-server]ip pool pokes #创建名为pokes的地址池,名字可以随便起,后面要调用
, b. q/ F7 ?8 KInfo: It's successful to create an IP address pool.
. t2 e$ r( ~1 l& D[pppoe-server-ip-pool-pokes]network 10.1.12.0 mask 24 #地址池为10.1.12.0/24- `8 h* l+ U, D/ ` q
[pppoe-server-ip-pool-pokes]dis th: b1 M$ P) g) N0 k9 P
[V200R003C00]
7 N2 I; D+ \/ k5 e#% F& J' y6 a: H" j+ d, F) y
ip pool pokes/ b# ?# x8 d2 @0 [/ a: ?
network 10.1.12.0 mask 255.255.255.0
' T: a2 }" U6 E+ H8 N#1 L8 P2 ^, }; q* G' T
return. N6 D0 c; u0 w6 T" a0 z. a# _
[pppoe-server-ip-pool-pokes]q& U. _/ y3 i# N5 L- h! Q8 I
& C3 v" V7 b k- M/ x. R7 Q
2、配置虚拟口关联地址池5 E) R9 z3 q: K
配置虚拟口关联地址池,即创建Virtual-Template 1模版。
% I4 j f* @+ I/ G" S4 A" Y
1 E `4 [6 A2 D$ c A[pppoe-server]interface Virtual-Template 1 #创建虚拟接口1
: o3 I4 A4 i6 m9 t[pppoe-server-Virtual-Template1]ip add 10.1.12.2 24 #虚拟接口1的地址
6 ?5 g4 b: i" g. h/ v[pppoe-server-Virtual-Template1]ppp authentication-mode chap #认证类型7 B, A* ^$ L- B `% `2 K
[pppoe-server-Virtual-Template1]remote address pool pokes #客户端的地址池pokes& i1 Z3 M& G6 x; ^4 J: O2 U; e
[pppoe-server-Virtual-Template1]dis th
8 @; M* N2 H3 {! Sinterface Virtual-Template1
" E; v; Z C: c+ T3 a2 h! } ppp authentication-mode chap / c; X7 e/ W% Y9 a! w r
remote address pool pokes, A4 b5 B6 V5 X- v7 m! @
ip address 10.1.12.2 255.255.255.0
# y1 }0 S4 Q- Z% |: M
2 c9 E3 j4 V& H+ y- C7 q7 v3 J# l[pppoe-server]int g0/0/0 ) |$ X- r2 p8 h
[pppoe-server-GigabitEthernet0/0/0]pppoe-server bind virtual-template 1 #将虚拟接口1关联到g0/0/0接口! N4 w- }3 Y% d# x. S; h
[pppoe-server-GigabitEthernet0/0/0]dis th
2 V" _: r* I( Y7 J( n; v[V200R003C00]
, V! H2 a& k+ [- X% `#
4 q" J0 `9 q" o2 w% ^8 j$ Q! Binterface GigabitEthernet0/0/0
* B. ?% r+ a9 [/ S; H) k- P2 G% s pppoe-server bind Virtual-Template 1
$ p: Z0 R+ Y! M1 A#/ b8 l A* s9 ]: }/ d3 N
return- i3 f' p- F$ W3 d% a! U8 c
[pppoe-server-GigabitEthernet0/0/0]
$ Q: L6 H4 w1 U$ M6 l0 l' V# s ^) d. Z4 A1 c( {! H: e
3、创建pppoe拨号的账号
2 I0 R: S6 H4 }& B! R0 c按理我们应该创建pppoe拨号的账号。
+ y& \' i- J" O2 S这里为了演示拨号失败,我们这里先不新建账号,后面再新建。
, Q; d5 x! H# G& L! o3 e
- j$ u8 @/ p+ O' w7 W9 |+ L二、pppoe-client的配置+ e$ O9 x/ l5 U5 }0 I
[pppoe-client]dialer-rule
: K* I2 _$ P8 U2 w* x. T/ ?# J; a[pppoe-client-dialer-rule]dialer-rule 1 ?; C" ~1 ^ D5 C& {. V% G
acl Permit or deny based on access-list
% D. T: Y; A" A) |) W; b ip Ip5 \5 w$ H8 t. a/ q u9 L" S
ipv6 Ipv6 / f) v+ O B9 H0 H
[pppoe-client-dialer-rule]dialer-rule 1 ip permit #创建拨号规则,允许ip流量触发拨号' Y. V0 E/ A/ }: C2 _' H* D3 x
$ M4 ~7 J$ Y1 n$ P4 }) Z' Y[pppoe-client]interface Dialer 1; ~. q5 h4 w7 M6 }% k$ G: z) e& \
Jul 15 2021 18:55:22-08:00 pppoe-client %%01IFPDT/4/IF_STATE(l)[0]:Interface Dia
6 P5 z" @; @0 D2 uler1 has turned into UP state.
% t$ [. ^3 d# F- M* `[pppoe-client-Dialer1]ip add " a8 K3 A" a! w
[pppoe-client-Dialer1]ip address ppp ; s, B8 H2 _6 x" y
[pppoe-client-Dialer1]ip address ppp-negotiate #地址采用ppp协商
' I: \; j& A& ]* T w# z I: v: u* }' x
[pppoe-client]interface Dialer 1 #创建接口拨号组1
4 m$ }4 o$ o1 g2 c& E2 T3 ~[pppoe-client-Dialer1]ip address ppp-negotiate #ip地址采用ppp协商
/ I+ u+ W* r+ F1 e$ h+ h0 }8 G[pppoe-client-Dialer1]dialer user zhprny #此用户不用于认证,是标识作用以及和dialer绑定3 ]7 b5 X& j' S" d
[pppoe-client-Dialer1]dialer bundle 1 #设备通过Dialer bundle将物理接口与拨号接口关联起来。
# m8 k4 T8 Z* V; H B( l[pppoe-client-Dialer1]dialer-group 1 #放到一个拨号访问组1中% y3 w2 o0 ^) {
[pppoe-client-Dialer1]ppp chap user pokes #指定dialer1接口的编号,拨号账号. P& W7 Y% C; M9 a+ n
[pppoe-client-Dialer1]ppp chap password 123456 #拨号的密码. C$ W- U, K" m; u
6 S. A1 e ^+ B. l
) i; n! T' b. K- j0 v0 [; W[pppoe-client-Dialer1]dis th. ?2 p! `/ f _8 j7 z3 A8 I6 P4 O1 c
[V200R003C00]" K) T3 x& C P! x3 P/ Y
#
$ ~) N# S# x' a% q8 M- y/ @# s2 hinterface Dialer1
- L% j& g# A5 p7 A link-protocol ppp
$ Z* P0 C* {6 q% o! k2 S, `) N ppp chap user pokes T. O. h, T8 D( u
ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$) Q6 v8 w4 }2 j- K- ]: R
ip address ppp-negotiate
6 g3 G$ \( ?, b, B dialer user zhprny) Q# b. C2 F. T
dialer bundle 12 d2 b1 h4 j$ v
dialer-group 1
( y4 [# a0 S% r9 ?: b& T& g3 z
# U# h1 C( `0 _' ?6 V[pppoe-client-GigabitEthernet0/0/0]
; K5 r% J& Q% X ^) q3 h* k8 D7 mJul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[0]:The line pr) X0 m/ m* @7 ?6 a
otocol PPP on the interface Dialer1:0 has entered the UP state. #PPP已进入启动状态
4 v2 D% w( H, h9 w9 d1 Z' B7 Q, @[pppoe-client-GigabitEthernet0/0/0]6 ^9 r3 O; p8 f8 J6 t H) f
Jul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[1]:The line pr
' f5 c, t4 H* e2 Xotocol PPP on the interface Dialer1:0 has entered the DOWN state. #PPP已进入关闭状态8 R9 x. V6 K$ e; q
" n5 H2 N* X, f1 f8 x# v1 X4 U& ^
#不停的循环。。。。
7 k7 j5 l$ _8 A4 U$ W5 T" }
, P8 e) \- I( c2 |+ n( v' O; L, D
#原因是没有认证成功,因为我们在PPPOE-server上面还没有创建认证用户和密码5 |2 g5 t5 k6 d
8 @" B) P' q, L8 _
三、pppoe服务器上新建认证用户: E; ]' |" c' t0 i
我们到服务器上直接新建认证用户:* { f1 y7 y# b: r- j) p2 g2 ]) D! `
; `* I1 n+ _2 x( ~9 s
[pppoe-server]aaa
, {. }" X" d5 S3 D4 J) |0 t[pppoe-server-aaa]local-user pokes password cipher 123456& b/ Z( A% D( D( K. T: J
Info: Add a new user.' R- ]! g( ^$ j! V5 z. p
[pppoe-server-aaa]local-user pokes service-type ppp #类型为ppp* E; W2 F+ e) h
- U" p4 @- P W( `5 X
/ ]( m" q7 b; P; [. M" Q2 z四、客户端验证结果# p6 U5 L' {2 z f
1、认证成功信息* y. h! X5 ^# ^8 c
然后客户端就会出现认证成功的提示:
: z; @0 v0 @& U: U& Z+ `
% b: l2 O' }% i3 G" x3 h; D% v[pppoe-client-GigabitEthernet0/0/0]
N, g7 k5 c7 }+ T1 eJul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[10]:The line p% f4 T/ y. h, B1 b4 w6 T
rotocol PPP on the interface Dialer1:0 has entered the UP state.
4 f" D% K, r# t[pppoe-client-GigabitEthernet0/0/0]
1 x. w1 \; l* ?9 O4 lJul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[11]:The line p6 V& n' m; K# ~# T2 d( I$ E
rotocol PPP IPCP on the interface Dialer1:0 has entered the UP state.
- m: A0 L/ j, f( |[pppoe-client-GigabitEthernet0/0/0]q
+ p; `0 V. H+ s[pppoe-client]dis ip in b$ O2 U) d, h$ z% N, q
*down: administratively down9 I4 B' w' B" f5 `8 t
^down: standby5 I; k% I4 G2 P; ^+ P( m
(l): loopback
* k7 q# S6 c* y- M* @: W! d(s): spoofing
& ^( `$ X0 b. R. uThe number of interface that is UP in Physical is 4
( A! Z t$ D9 h$ jThe number of interface that is DOWN in Physical is 0
8 T& o" D; W! W b# ]The number of interface that is UP in Protocol is 3. Y' m6 j# I* W0 L: y3 a! v5 _ x5 [
The number of interface that is DOWN in Protocol is 1. @, F- V0 N# m- d+ [ w, `
1 W( |5 n8 |8 f% VInterface IP Address/Mask Physical Protocol
4 y% j: ?+ ]) G$ Y9 lDialer1 10.1.12.254/32 up up(s) #拿到了PPPOE服务器上的地址
/ t6 \3 P, q0 ]$ V) U' v C8 EGigabitEthernet0/0/0 unassigned up down
) H0 b, j2 Z3 y2 ^5 i5 u, cGigabitEthernet0/0/1 192.168.1.254/24 up up " `% o2 s' c, n, G, T0 ?3 B' F5 b
NULL0 unassigned up up(s) " @1 a4 ~& u# C2 g7 D6 `
% k! j3 J8 ?4 Y6 \9 T/ X e* ^+ \
; W5 a/ O2 _5 Q% J, |
2、pppoe-server 信息
& ]3 _! [9 Z7 Q) I<pppoe-server>dis interface Virtual-Template 1
+ V2 |# O5 v! p4 q3 K/ y. eVirtual-Template1 current state : UP8 \" o0 f3 X& c" f8 D# l, f2 m, M( a
Line protocol current state : UP
- J8 H' F* g1 P5 b% ^Last line protocol up time : 2021-07-15 19:09:22 UTC-08:00
. b* l' o* I) {) l0 [. JDescription:HUAWEI, AR Series, Virtual-Template1 Interface
% p1 ]1 J) @' d$ _4 J" i. y5 O7 v: ZRoute Port,The Maximum Transmit Unit is 1492, Hold timer is 10(sec)
# S5 T; S) _9 Z2 ?: T) ?Internet Address is 10.1.12.2/24
' e1 Z; _, O4 n- ~: |* n2 h- I2 TLink layer protocol is PPP+ |6 E. i9 Q7 j9 E6 V5 v
LCP initial
: X4 o$ `7 h7 T h/ w" tPhysical is None
7 S& @( ?/ A: T5 w9 SCurrent system time: 2021-07-15 20:27:28-08:00
) P+ L& I8 f1 u# U% }' Y* ~ Last 300 seconds input rate 0 bits/sec, 0 packets/sec( s' \5 i' S( J2 |$ l$ |
Last 300 seconds output rate 0 bits/sec, 0 packets/sec
/ q; _0 d9 m, `/ O1 G Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
6 h- j& m- i( `& S! R Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
6 {2 Q& @% F" \. T" ^3 k& E Input: 0 bytes
0 Z5 t4 {5 q$ j4 W; A9 ?: S6 { Output:0 bytes( L+ S% `) A) L O/ }1 H
Input bandwidth utilization : 0%& S5 X1 }3 U( t& b, L& [ z) V+ C
Output bandwidth utilization : 0%. H; q2 H5 E, K5 G9 z% }6 D( F
* {+ m3 j& H1 C6 ?$ D<pppoe-server>, O1 ?$ P9 Z/ N7 o" c5 A
% q! v. b" `2 R, w, {; g
8 y2 N' \1 p: N5 d- l' O3 M8 g3 T3、pppoe-client信息
k* e: a! i$ S<pppoe-client>dis interface Dialer 1
2 x" c4 f# K2 lDialer1 current state : UP0 S8 |; u8 o$ ~
Line protocol current state : UP (spoofing)
5 E& n8 c1 C$ bDescription:HUAWEI, AR Series, Dialer1 Interface; D N6 \0 R8 ^" r4 b: D) M
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
8 u9 f% Y2 H3 U. IInternet Address is negotiated, 10.1.12.254/32 G/ j: }' l/ v4 A0 i; [& G4 n
Link layer protocol is PPP
8 a( g% i$ ?! [; vLCP initial9 g6 a' \) `+ m' @; @0 P
Physical is Dialer) E' ?# W+ ^- ^9 x) P! j
Current system time: 2021-07-15 20:23:56-08:00" A, v: J" X( M3 o
Last 300 seconds input rate 0 bits/sec, 0 packets/sec8 b4 d" D# v! ^& m! J6 B# V3 F
Last 300 seconds output rate 0 bits/sec, 0 packets/sec, Q& U) ~) A4 [' ^3 W
Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
) d( Q8 T( F) e5 Y* X% a/ ~ Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
9 t+ |6 {; c2 @+ Q% L Input: 0 bytes/ @' [8 n) P; ~
Output:0 bytes
4 x2 t1 [$ v D$ ^/ d Input bandwidth utilization : 0%
( v w* a% }" h5 E, S Output bandwidth utilization : 0%
$ x2 [0 I6 K' p% s7 RBound to Dialer1:0:4 B0 H. L& a! t8 | H
Dialer1:0 current state : UP ,7 ~8 i2 s1 W6 b. E% J
Line protocol current state : UP+ \ d( G2 h/ z
( n( b% @) d" n1 H: ]' O+ i3 K' MLink layer protocol is PPP
/ L" `- q) D$ O' @& [2 e' o/ LLCP opened, IPCP opened" b8 j7 P5 y4 a' w
Packets statistics:
: J7 l6 d8 G! Z, r" \ Input packets:0, 0 bytes; e4 b& g* T$ x$ c5 i! W) {: R
Output packets:4, 336 bytes' f- n$ R0 z5 I; J: m
FCS error packets:03 K) v, z# Y4 V$ T# q; o
Address error packets:0
: m9 Z, L8 |/ r) G1 Y0 Z Control field control error packets:03 q% j. `* D/ T$ i2 F/ _
' Z2 U9 g! e' S' b, y1 U" H+ m1 D2 N+ x2 c# I+ d
<pppoe-client>1 S& }& Y2 b% B2 Q1 x A. G* l6 X s
: n+ I% v* y' x; o4 O, V五、NAT的配置
+ ?, C5 k9 l o+ C# q1 G( {用PC2直接ping 10.1.12.254是可以通的。10.1.12.254是AR1的g0/0/0口获取到的地址,其实就是我们常说的WAN口地址。
2 O7 ^! ?/ D3 L( |. c
( X! Y7 W7 q# m( R( `4 BPC2>ping 10.1.12.254
$ f- p% p9 F3 w# Z+ t. Y5 M; f
9 H. [: V. W3 j' L r) R! w; LPing 10.1.12.254: 32 data bytes, Press Ctrl_C to break- }0 J: }2 m8 {& t- a- |
From 10.1.12.254: bytes=32 seq=1 ttl=255 time=63 ms. q1 c4 b1 \9 c; n4 Z
From 10.1.12.254: bytes=32 seq=2 ttl=255 time=31 ms
6 m" F0 `8 M% `; v, l1 O- AFrom 10.1.12.254: bytes=32 seq=3 ttl=255 time=47 ms
) {" r6 ^/ ^8 W2 v7 ^% qFrom 10.1.12.254: bytes=32 seq=4 ttl=255 time=31 ms
. g: g' ]2 I! z- |7 OFrom 10.1.12.254: bytes=32 seq=5 ttl=255 time=47 ms
: x* X2 a# f- n/ o$ d, X8 Z* }/ y: ^6 B0 P4 k2 y# `3 O7 D) s
--- 10.1.12.254 ping statistics ---+ ^/ V5 N( f. o! x. ]
5 packet(s) transmitted+ Q4 ` v' t8 u+ V- v/ A5 @, L6 K
5 packet(s) received9 t8 \$ G: s# [$ u7 c
0.00% packet loss
' y j: }+ j: }- o; @( f round-trip min/avg/max = 31/43/63 ms( l, C1 y+ `- }: ^" {; G; C
4 [6 ~8 S; v, t" J5 m2 }PC2>ping 10.1.12.2) ^7 G2 `- f4 J) t1 O2 F
' E D8 ]! |, R9 ^! T
Ping 10.1.12.2: 32 data bytes, Press Ctrl_C to break
3 ? I N/ ^& `# Q( H" d7 LRequest timeout!
# |: {, k) N. g- ORequest timeout!
+ }3 t! `; ~3 T5 o. c3 d7 e; I) zRequest timeout! ]) D5 c5 z- J1 ?$ Q" M1 |
Request timeout!+ f( |1 {+ n2 q0 M) j8 L
Request timeout!# \, c( M- u/ ^' S2 }0 S
; a$ p% R( ~" {--- 10.1.12.2 ping statistics ---
T3 v+ u& q; Z: [4 d" f+ o6 M! D 5 packet(s) transmitted0 G, z) K. W T8 N+ V/ B
0 packet(s) received0 P1 P7 _: M X$ B0 v
100.00% packet loss4 p2 E ~6 ^: R# @ t( h6 m
#但是无法ping通10.1.12.2
0 u7 ^& D2 x+ t7 D1 I* n l. k8 [
( ^& r* _" @, x: O无法ping通10.1.12.2的原因是:我们没有做NAT .接下来我们在pppoe-client上面做NAT
! s* _6 c4 L" {* S* Q) [4 y' H# K7 H2 t8 y( ~$ ^
1、这里配置规则2000, Q9 r* v5 l' l( Y( X. M
[pppoe-client]acl number 2000
2 d8 r |3 g8 b. M[pppoe-client-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.2557 S4 C7 ]% I: P7 O
3 o. i+ v. B4 P2、将规则2000绑定到接口
8 T( X/ m9 l) X$ s5 v+ w如下接口信息,需要注意的是pppoe的接口是Dialer1,并不是GigabitEthernet0/0/0口。我们必须将规则绑定在Dialer1口,最容易犯错的就是直接绑定在g0/0/0口。
6 A9 H6 O2 y3 G# o, N+ ~
. Y U% n2 G8 C4 r& }" l[pppoe-client]dis ip int b
- {( x8 r" f, a0 L: ~5 M1 r. k*down: administratively down
* K% ~7 Q& E/ H^down: standby
2 U6 h! Q4 c+ g; K3 _) v2 A) P- `(l): loopback
9 f; h+ ~. q1 A" h(s): spoofing
- z/ A& c: a: ?; k9 RThe number of interface that is UP in Physical is 4$ s f$ A8 a/ { u; D
The number of interface that is DOWN in Physical is 0
. a7 r8 N0 D% T3 {9 p# h# p# {: fThe number of interface that is UP in Protocol is 3
0 {% _1 x6 l2 n8 b: M. jThe number of interface that is DOWN in Protocol is 1) j& S8 O* z1 E8 y( v/ y0 `
! e1 }5 {7 k0 `Interface IP Address/Mask Physical Protocol 5 L3 E6 T k: J z: W5 O) B Z6 u: a
Dialer1 10.1.12.254/32 up up(s) 1 {5 q2 s* f! p/ `; B2 u9 T* d
GigabitEthernet0/0/0 unassigned up down
3 N3 j" V+ s2 O; Z3 C# {) b% P' mGigabitEthernet0/0/1 192.168.1.254/24 up up
0 G3 \! K# ?, V4 }4 b. a) P& BNULL0 unassigned up up(s)
3 U5 @+ Q8 ?4 A1 Q1 ~& |9 e0 w[pppoe-client]
; m# Q% g) s# |& m m: }. K/ `; I
8 o% Y3 b. o k[pppoe-client]int Dialer 1 4 A S, K7 A! i( `4 V
[pppoe-client-Dialer1]nat outbound 2000
3 A7 ^5 b) w% k[pppoe-client-Dialer1]dis th' {3 x7 K4 @4 K0 Y4 K) y+ ~- H
[V200R003C00]
7 o6 w+ O5 ?+ T+ t! P" F#" B3 e1 z& a$ [6 t" x7 q9 d z& _% h
interface Dialer1
5 R5 X9 q5 |2 F, k2 D+ N* n7 ] link-protocol ppp
# f; g) O7 X0 f* o0 G2 K ppp chap user pokes0 B. k: b% V7 t7 {# }
ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$1 D) Z0 |. j# {8 @' s
ip address ppp-negotiate
( t$ ?! o }, ~% |0 A dialer user zhprny
' R, q0 b: {1 T: W$ L3 D7 N+ r dialer bundle 1& h7 U: o- c; y: F# S, k
dialer-group 1
6 E7 B, `! d& D3 \5 A nat outbound 2000
/ {3 Y; q6 x. }& O#
$ @. C/ l, S6 E+ C( creturn }4 v$ x2 w/ F
[pppoe-client-Dialer1]* f9 d# o, D: e+ z$ _/ \
; Y+ w: Z' w, f0 o6 o) X! n接下来我们就可以ping通10.1.12.2 了。
+ b2 e9 }0 V$ z# x1 R
2 A" M+ z" x. G& h0 L* s- |5 UPC2>ping 10.1.12.2
* u. c. Q/ j- M+ g. F
% w! ]: v2 W) w8 _; TPing 10.1.12.2: 32 data bytes, Press Ctrl_C to break: Y7 O5 r& }8 \) j2 L; t
From 10.1.12.2: bytes=32 seq=1 ttl=254 time=31 ms d- L- }3 W! R& |1 H5 d* ^
From 10.1.12.2: bytes=32 seq=2 ttl=254 time=32 ms
1 e# _3 x: O6 g$ ?From 10.1.12.2: bytes=32 seq=3 ttl=254 time=46 ms
* _$ M+ n9 p/ ?! | ?From 10.1.12.2: bytes=32 seq=4 ttl=254 time=32 ms
7 h8 x# c2 o: l0 Q. I2 dFrom 10.1.12.2: bytes=32 seq=5 ttl=254 time=31 ms
& E( p5 a& D+ s/ C! [6 t8 v$ X$ o- v2 o
--- 10.1.12.2 ping statistics --- ~/ o+ [" x$ L8 b& H
5 packet(s) transmitted
6 n/ D$ b, s8 ]' q4 b 5 packet(s) received$ ?, X( v* U4 E
0.00% packet loss2 o' J! j5 V! I: G/ R) b
round-trip min/avg/max = 31/34/46 ms
8 K; T+ ]8 r3 ^6 m/ j
/ i% J K; I5 T0 ]$ O8 s; d8 g# s1 U$ n M1 a( R/ c( X
|
|