华为路由器：PPPOE配置模拟实验及NAT配置

admin

实验环境

9 v# k7 ~" }% t: u% {# rpppoe-client上面的接口信息
) U( [# o* _/ d" H; r" ]1 W( H
, H. _8 K/ C+ b, Q6 E[AR1]dis ip interface brief
4 |4 {+ X/ F( W5 f*down: administratively down
  p& u1 g$ b+ s; u( w^down: standby
(l): loopback
(s): spoofing
; ~! A1 X: h+ |& i- YThe number of interface that is UP in Physical is 2
1 I1 D. ]% M' M2 A6 n* a' p) B0 i2 QThe number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 1
# A6 K; K2 v6 ~; H" M+ v  J. P! FThe number of interface that is DOWN in Protocol is 2

Interface                         IP Address/Mask      Physical   Protocol  
" H9 t6 O5 c1 DGigabitEthernet0/0/0              unassigned           up         down      
GigabitEthernet0/0/1              192.168.1.254/24     down       down      
2 s0 N# x- P# K* TNULL0                             unassigned           up         up(s)     


3 L! @8 F2 q0 |' C! O8 U2 \, R配置了基于接口的DHCP
0 K- [# l$ E- B
8 M: S4 p$ B2 o3 ~3 L& kinterface GigabitEthernet0/0/1
& H! Y1 W) F: R3 A3 E$ h& ?7 K ip address 192.168.1.254 255.255.255.0
dhcp select interface
% Y, d& L. U! O: q% N dhcp server dns-list 8.8.8.8
dhcp server domain-name pokes.com

注意事项：AR1、AR2的物理接口g0/0/0不配地址.

: O- z, n0 t  t" y& @" ]* F一、pppoe-server的配置
7 l/ @, [1 o8 F8 i1、pppoe-server 配置地址池
% e/ u; m. U2 A4 e' c[pppoe-server]ip pool pokes            #创建名为pokes的地址池，名字可以随便起，后面要调用
: g6 y8 [/ a- u& ?6 r' tInfo: It's successful to create an IP address pool.
1 J3 F4 S% {( ?  h[pppoe-server-ip-pool-pokes]network 10.1.12.0 mask 24   #地址池为10.1.12.0/24
' A& D( W2 h' A% w[pppoe-server-ip-pool-pokes]dis th
" e( h- v9 t7 P[V200R003C00]
#
ip pool pokes
  i2 y6 |- B2 Y. p network 10.1.12.0 mask 255.255.255.0
1 w! ?& ^% H2 e#
/ b) C, N1 X4 z. }3 v% {2 |return
[pppoe-server-ip-pool-pokes]q

+ w4 g; K3 ^4 H1 E% X/ T2、配置虚拟口关联地址池
2 h8 h! {" a+ M/ }( B$ c. @3 S配置虚拟口关联地址池，即创建Virtual-Template 1模版。
; S: w0 V/ T! D" u# |
[pppoe-server]interface Virtual-Template 1    #创建虚拟接口1
# h  E& J! E1 i; h* l1 D% j- G/ D, ~[pppoe-server-Virtual-Template1]ip add 10.1.12.2 24                   #虚拟接口1的地址
7 h# P, e. X; T, ^& z1 y  n[pppoe-server-Virtual-Template1]ppp authentication-mode chap   #认证类型
[pppoe-server-Virtual-Template1]remote address pool pokes      #客户端的地址池pokes
[pppoe-server-Virtual-Template1]dis th
interface Virtual-Template1
ppp authentication-mode chap
; H  d0 p: L: U4 C& O remote address pool pokes
2 b7 o& `! Q% O: I' M  b ip address 10.1.12.2 255.255.255.0

[pppoe-server]int g0/0/0       
[pppoe-server-GigabitEthernet0/0/0]pppoe-server bind virtual-template 1   #将虚拟接口1关联到g0/0/0接口
* u- V# t/ O# c2 E[pppoe-server-GigabitEthernet0/0/0]dis th
[V200R003C00]
#
$ c) `6 C( X! A5 z3 ~interface GigabitEthernet0/0/0
: B1 {% h6 u  [# r% ~ pppoe-server bind Virtual-Template 1
#
return
( `5 C, Z4 B9 A9 U. h[pppoe-server-GigabitEthernet0/0/0]

3、创建pppoe拨号的账号
按理我们应该创建pppoe拨号的账号。
6 v. a1 m9 L2 y3 a' j; @4 ]这里为了演示拨号失败，我们这里先不新建账号，后面再新建。

二、pppoe-client的配置
  U2 m% @" C+ E[pppoe-client]dialer-rule   
+ W7 f7 Q9 d' ][pppoe-client-dialer-rule]dialer-rule 1 ?
  acl   Permit or deny based on access-list   
  ip    Ip
  ipv6  Ipv6       
[pppoe-client-dialer-rule]dialer-rule 1 ip permit   #创建拨号规则，允许ip流量触发拨号

[pppoe-client]interface Dialer 1
Jul 15 2021 18:55:22-08:00 pppoe-client %%01IFPDT/4/IF_STATE(l)[0]:Interface Dia
3 ?. J8 a6 f/ \ler1 has turned into UP state.
3 P$ A) n6 L. p[pppoe-client-Dialer1]ip add       
[pppoe-client-Dialer1]ip address ppp       
[pppoe-client-Dialer1]ip address ppp-negotiate  #地址采用ppp协商
" `6 Q' x+ a( \; z4 l$ t) N( @% d! L
[pppoe-client]interface Dialer 1                #创建接口拨号组1
4 s1 q, o) x5 o' j# S# x[pppoe-client-Dialer1]ip address ppp-negotiate  #ip地址采用ppp协商
[pppoe-client-Dialer1]dialer user zhprny        #此用户不用于认证，是标识作用以及和dialer绑定
[pppoe-client-Dialer1]dialer bundle 1           #设备通过Dialer bundle将物理接口与拨号接口关联起来。
* j7 W3 \6 D3 [6 w2 \[pppoe-client-Dialer1]dialer-group 1             #放到一个拨号访问组1中
[pppoe-client-Dialer1]ppp chap user pokes        #指定dialer1接口的编号，拨号账号
[pppoe-client-Dialer1]ppp chap password 123456   #拨号的密码
' d0 i; q; R: }/ x
* ^- a4 e. L. F4 E+ h% n
[pppoe-client-Dialer1]dis th
% _, R4 A0 r; I[V200R003C00]
' T9 p# y- c; M/ W1 _% V#
interface Dialer1
. n' Y$ q& F* K( ?% h/ T2 V link-protocol ppp
ppp chap user pokes
7 @& m1 d+ _* i& O$ i ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$
ip address ppp-negotiate
% P; Y$ d' D( D- S( @0 r dialer user zhprny
0 C. g) ?1 g. y. q dialer bundle 1
dialer-group 1
' F2 L8 H4 g8 m% @
[pppoe-client-GigabitEthernet0/0/0]
Jul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[0]:The line pr
  U) ]3 ]+ f6 r, s  I0 aotocol PPP on the interface Dialer1:0 has entered the UP state.  #PPP已进入启动状态
[pppoe-client-GigabitEthernet0/0/0]
5 O' u& A- A% V2 v8 m% yJul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[1]:The line pr
otocol PPP on the interface Dialer1:0 has entered the DOWN state. #PPP已进入关闭状态

) K! D) E; D0 W6 ~( Q; o5 ~3 [1 T& o# X#不停的循环。。。。
3 R6 `6 w4 R1 N. [8 Z9 Z3 S" A

9 r: V5 k" z5 g& L+ ]3 Y% j3 D: P#原因是没有认证成功，因为我们在PPPOE-server上面还没有创建认证用户和密码

3 y; U' x5 Q" D: {三、pppoe服务器上新建认证用户
我们到服务器上直接新建认证用户：
. x  x! {# S" @0 n
[pppoe-server]aaa
[pppoe-server-aaa]local-user pokes password cipher 123456
1 t$ h5 o2 U! t  x( X, u+ N! ZInfo: Add a new user.
1 e* P4 p( T5 a( f, Y+ Q[pppoe-server-aaa]local-user pokes service-type ppp    #类型为ppp

! G0 i# N1 v8 v
) R1 v1 Y8 t. V; ~四、客户端验证结果
1、认证成功信息
% {* z  z4 G/ k. L5 A. ~然后客户端就会出现认证成功的提示：

[pppoe-client-GigabitEthernet0/0/0]
Jul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[10]:The line p
$ k4 J7 S3 f  ]2 z' d( Vrotocol PPP on the interface Dialer1:0 has entered the UP state.
[pppoe-client-GigabitEthernet0/0/0]
Jul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[11]:The line p
, @$ M, i5 [0 j, g9 v! ^) Mrotocol PPP IPCP on the interface Dialer1:0 has entered the UP state.
[pppoe-client-GigabitEthernet0/0/0]q
* b( i/ \6 }7 x5 w3 A" k[pppoe-client]dis ip in b
*down: administratively down
^down: standby
(l): loopback
0 a  R8 t/ r6 C; V( n% X  Y(s): spoofing
+ \& K" D3 H  q7 @. XThe number of interface that is UP in Physical is 4
6 W4 u' v8 X0 rThe number of interface that is DOWN in Physical is 0
" S5 K5 t. l( W. WThe number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 1

Interface                         IP Address/Mask      Physical   Protocol  
' o" J6 F4 C7 u/ D' ?, q8 XDialer1                           10.1.12.254/32       up         up(s)     #拿到了PPPOE服务器上的地址
+ l2 @) n- e. z5 tGigabitEthernet0/0/0              unassigned           up         down      
GigabitEthernet0/0/1              192.168.1.254/24     up         up        
+ q% k$ F) g1 ^6 \( u- x/ qNULL0                             unassigned           up         up(s)
7 `! ?$ W( E4 N) E: l+ y
4 f" Y3 w+ v2 e1 ^6 y$ m8 V( N
2、pppoe-server 信息
( b0 O9 Z" g. {2 p  Q8 S# |: [<pppoe-server>dis interface Virtual-Template 1
! b  M4 u4 C1 u8 ~" vVirtual-Template1 current state : UP
Line protocol current state : UP
" k7 j3 [' ?: J0 S! ^( x3 n, DLast line protocol up time : 2021-07-15 19:09:22 UTC-08:00
' i# Y$ {% [3 ~" Y* B; [, PDescription:HUAWEI, AR Series, Virtual-Template1 Interface
# U# x; i8 G+ w/ D: T# zRoute Port,The Maximum Transmit Unit is 1492, Hold timer is 10(sec)
, T" Q% y( q  }Internet Address is 10.1.12.2/24
Link layer protocol is PPP
/ X/ S2 W+ p9 N; W; c7 LLCP initial
! F) S8 {0 J/ D0 P" G& N6 ~4 sPhysical is None
& Y/ m  I; @; c* ]9 X) g) c) vCurrent system time: 2021-07-15 20:27:28-08:00
+ v1 k" @- w" Y0 _. u7 J/ A- u+ U; ~    Last 300 seconds input rate 0 bits/sec, 0 packets/sec
    Last 300 seconds output rate 0 bits/sec, 0 packets/sec
    Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
    Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
' h+ K( F: b& [0 R    Input: 0 bytes
$ I0 a, _1 k" Q) n    Output:0 bytes
    Input bandwidth utilization  :    0%
5 Y7 p1 k8 j* p$ \! f) I$ o& n/ L    Output bandwidth utilization :    0%
- W2 t6 C& c1 S
<pppoe-server>
2 K( |/ a2 l* A5 j/ m* C2 X

+ Z, L  F% _( A4 W5 r2 w% U3、pppoe-client信息
5 @' {- [  }9 T, z4 E/ X& _9 q) I$ r<pppoe-client>dis interface Dialer 1
Dialer1 current state : UP
Line protocol current state : UP (spoofing)
Description:HUAWEI, AR Series, Dialer1 Interface
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is negotiated, 10.1.12.254/32
Link layer protocol is PPP
, Q5 P, S8 r9 w. K. hLCP initial
) d# p5 a% g+ o. V( zPhysical is Dialer
+ ]$ i" y  u9 s9 yCurrent system time: 2021-07-15 20:23:56-08:00
. N" ~: H; z) I% U    Last 300 seconds input rate 0 bits/sec, 0 packets/sec
4 E1 Y5 H' V7 u$ E    Last 300 seconds output rate 0 bits/sec, 0 packets/sec
. y) q5 Q5 N  Z    Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
    Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
    Input: 0 bytes
$ I0 k+ U( u3 c' H, g$ B    Output:0 bytes
  }) L9 \! x& O0 q/ d2 }    Input bandwidth utilization  :    0%
. d* [5 p' I/ Q    Output bandwidth utilization :    0%
8 z3 {& C" U1 d0 a& R* x4 aBound to Dialer1:0:
Dialer1:0 current state : UP ,
2 k' A. I1 N# j1 R% c8 QLine protocol current state : UP
6 s6 z* T! I" K: e6 G# g
Link layer protocol is PPP
7 l' b+ E! G, d5 BLCP opened, IPCP opened
Packets statistics:
/ c: C5 `" i2 Y) g8 v! `  Input packets:0,  0 bytes
0 m) S$ _! r1 k) U) i  Output packets:4, 336 bytes
" ~1 M. o7 ]$ Y  k1 @9 g0 a  FCS error packets:0
  Address error packets:0
  Control field control error packets:0


<pppoe-client>
& l; r9 Z$ p) {
$ n) P  ]6 S  [& o五、NAT的配置
* i3 c7 k! }; g: N用PC2直接ping 10.1.12.254是可以通的。10.1.12.254是AR1的g0/0/0口获取到的地址，其实就是我们常说的WAN口地址。

7 n+ c. t6 b! ?2 X! FPC2>ping 10.1.12.254

Ping 10.1.12.254: 32 data bytes, Press Ctrl_C to break
From 10.1.12.254: bytes=32 seq=1 ttl=255 time=63 ms
From 10.1.12.254: bytes=32 seq=2 ttl=255 time=31 ms
0 D+ q' Q: g" f: y4 _8 r6 }; D, jFrom 10.1.12.254: bytes=32 seq=3 ttl=255 time=47 ms
From 10.1.12.254: bytes=32 seq=4 ttl=255 time=31 ms
From 10.1.12.254: bytes=32 seq=5 ttl=255 time=47 ms

--- 10.1.12.254 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
: U* g8 c* |" z5 x; U  round-trip min/avg/max = 31/43/63 ms

PC2>ping 10.1.12.2

) e6 Z1 k* l- u' o- lPing 10.1.12.2: 32 data bytes, Press Ctrl_C to break
Request timeout!
+ i: I9 e/ }8 k( x8 W& RRequest timeout!
) M$ V% j6 Y9 @8 U& _$ WRequest timeout!
Request timeout!
Request timeout!

1 d+ {$ b, E% d, Y--- 10.1.12.2 ping statistics ---
  5 packet(s) transmitted
  0 packet(s) received
  100.00% packet loss
#但是无法ping通10.1.12.2

1 L0 h1 }$ l5 j& Y4 I( I
# _7 J7 Z; _0 s+ F0 \, |无法ping通10.1.12.2的原因是：我们没有做NAT .接下来我们在pppoe-client上面做NAT
! p, Q1 c3 ^- }  b& i: {' D
6 {. d# L' U& u9 L; v! N1、这里配置规则2000
[pppoe-client]acl number 2000       
/ v" }1 u- b" `( A- Y3 r[pppoe-client-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
8 D2 i- }' s9 K' x/ {- T9 j
. h( \- p( W. p) f6 e- q! |2、将规则2000绑定到接口
, h, o; R$ L9 |4 J8 A1 d9 \! J4 I如下接口信息，需要注意的是pppoe的接口是Dialer1，并不是GigabitEthernet0/0/0口。我们必须将规则绑定在Dialer1口，最容易犯错的就是直接绑定在g0/0/0口。
0 d- Q6 X$ ~9 M
[pppoe-client]dis ip int b
*down: administratively down
^down: standby
( X; c* Y+ ?6 i  Z: b* [2 ^(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 4
/ S- y6 M! z4 rThe number of interface that is DOWN in Physical is 0
+ ^% m# a) n! T2 l% |1 y) UThe number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 1
6 o8 h3 b( ]# \0 _
5 r2 z' H! c% Y% _  M( m8 C4 iInterface                         IP Address/Mask      Physical   Protocol  
Dialer1                           10.1.12.254/32       up         up(s)     
GigabitEthernet0/0/0              unassigned           up         down      
GigabitEthernet0/0/1              192.168.1.254/24     up         up        
" J+ j  x9 E* z, FNULL0                             unassigned           up         up(s)     
[pppoe-client]

; G" s: a/ G. U1 t" E[pppoe-client]int Dialer 1       
& q6 }  E) k; @; @8 w[pppoe-client-Dialer1]nat outbound 2000
[pppoe-client-Dialer1]dis th
[V200R003C00]
7 l' a* P% S7 s& x#
interface Dialer1
. W$ ^; a7 p: x7 V. P! z6 t1 \ link-protocol ppp
ppp chap user pokes
* C; S, S0 S3 q$ J# D9 m' k% x1 n ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$
1 t% ~7 j+ ~7 _( p$ ~7 E3 Z ip address ppp-negotiate
dialer user zhprny
dialer bundle 1
dialer-group 1
nat outbound 2000
- Y2 j2 a: [, r- H$ p6 |7 R/ q#
return
$ A. h! f6 N" C2 C0 e[pppoe-client-Dialer1]
3 t; |2 [( Q* ?# s; K5 h
: I- T2 T) T& u* H% Q7 T: e  N0 p( x接下来我们就可以ping通10.1.12.2 了。
" }+ ~  h+ E; U, ]* {7 R) V& F8 Z
PC2>ping 10.1.12.2

5 Q# [$ @# N2 DPing 10.1.12.2: 32 data bytes, Press Ctrl_C to break
+ S5 r2 s8 J+ ?( |6 PFrom 10.1.12.2: bytes=32 seq=1 ttl=254 time=31 ms
9 K1 ]- b' X2 I" i* b8 F7 M: g- mFrom 10.1.12.2: bytes=32 seq=2 ttl=254 time=32 ms
From 10.1.12.2: bytes=32 seq=3 ttl=254 time=46 ms
1 z& G' N$ ?, Q5 F" _$ z3 qFrom 10.1.12.2: bytes=32 seq=4 ttl=254 time=32 ms
From 10.1.12.2: bytes=32 seq=5 ttl=254 time=31 ms

--- 10.1.12.2 ping statistics ---
; P# `- q5 \2 F( |, H  5 packet(s) transmitted
  5 packet(s) received
' t4 Z8 K( T5 A3 r8 z6 @  0.00% packet loss
  round-trip min/avg/max = 31/34/46 ms
3 g% @& W$ j" ^$ y& G

9 T& V+ C) T  f+ h* V" W

admin

华为路由器：PPPoE实验
PPPoE协议是基于C/S架构的一种网络拨号协议。分为客户端和服务器两部分，它的建立过程分为discovery和session两个阶段。本次实验的目标：掌握PPPoE拨号技术；
3 Z) [  O( ~2 E5 \$ x  ]实验拓扑：

0 {* p8 @, s( F8 M5 z' F本实验结合虚拟机进行：
! m% n0 m0 t+ [& y首先，必须在虚拟机的网络配置中加以设置，我新建了VM6，去掉了DHCP的钩。这个时候会在你的网卡界面多出来一个虚拟的VM6的网卡。但是当你打开ensp时，会出现检测不到VM6的情况，这个时候你重启一下电脑，就可以了。

8 T8 x7 X2 G7 r1 U: k. YCloud1的设置如下图：
( i9 P5 h8 O% H* I# m
/ \) d5 Q5 }  r; N" P% N6 t# u& U1、基本的IP配置
5 R% e) T% U) _[pppoe-server]dis ip in b
# H0 B2 k' Z; [4 P# U# ]*down: administratively down
^down: standby
(l): loopback
9 @! M5 K8 X- d(s): spoofing
The number of interface that is UP in Physical is 4
The number of interface that is DOWN in Physical is 1
! E! u3 L" y% v9 S7 P1 i- Z2 FThe number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 3
# u3 f* N8 d- \Interface                         IP Address/Mask      Physical   Protocol  
: f  e* T2 ^% Z1 v  x5 J& X! oGigabitEthernet0/0/0              unassigned           up         down      
2 B+ R/ u: r+ U6 c# RGigabitEthernet0/0/1              202.104.10.1/24      up         up        
GigabitEthernet0/0/2              unassigned           down       down      
! U5 R0 E/ f9 y7 u2 f) s9 [NULL0                             unassigned           up         up(s)     
Virtual-Template1                 192.168.10.1/24      up         down      
( s7 ^5 s6 |/ T3 N[pppoe-server]
9 k' t( r+ o2 T1 F. n2 W; R
1 c' n1 c/ ]9 c  ~% k" O2、配置虚拟模板
配置虚拟模板用来承载多种同层协议
[pppoe-server]int Virtual-Template 1                            #创建虚拟模板，编号为1
[pppoe-server-Virtual-Template1]ppp authentication-mode chap    #PPP认证为chap
6 p, y8 G! Q) E7 d6 J1 X[pppoe-server-Virtual-Template1]remote address pool pokes       #指定使用地址池名为pokes
[pppoe-server-Virtual-Template1]ip add 192.168.10.1 24          #配置作为用户上网的网关IP
[pppoe-server-Virtual-Template1]q
" ~1 v( u  F$ a, n
: C, U. @+ P# y/ V3、创建地址池
[pppoe-server]ip pool pokes                                            #创建地址池pokes
Info: It's successful to create an IP address pool.
[pppoe-server-ip-pool-pokes]gateway-list 192.168.10.1                  #配置网关地址
[pppoe-server-ip-pool-pokes]network 192.168.10.0 mask 255.255.255.0    #配置给用户分配的ip网段
[pppoe-server-ip-pool-pokes]
: t' c& h) X$ p1 g[pppoe-server-ip-pool-pokes]excluded-ip-address 192.168.10.200 192.168.10.254    #排除地址
[pppoe-server-ip-pool-pokes]lease day 8 hour 0 minute 0     #租约配置8小时
# \4 [2 T8 {/ d; T& ~  [[pppoe-server-ip-pool-pokes]dns-list 114.114.114.114        #DNS
- Q4 }0 }4 V1 i! Z3 H2 N[pppoe-server-ip-pool-pokes]dis th
[V200R003C00]
+ j/ Q: g0 G+ H1 U! p! a2 v#
ip pool pokes
3 m; T) u: b, r1 D gateway-list 192.168.10.1
3 {) y# z) l3 C& C) o' E! E1 y" e network 192.168.10.0 mask 255.255.255.0
excluded-ip-address 192.168.10.200 192.168.10.254
lease day 8 hour 0 minute 0
dns-list 114.114.114.114
0 N1 Q. f) c& W  M#
5 J4 u6 Y" Z8 H$ h. @+ l7 |( nreturn
[pppoe-server-ip-pool-pokes]

. Q/ R, A/ R$ Y1 F! x6 E4、创建PPPoE用户
[pppoe-server]aaa
4 O) Z. a7 `' w[pppoe-server-aaa]local-user user1 password cipher 123456
Info: Add a new user.
6 s( u2 B; X2 G+ t9 F, X3 _[pppoe-server-aaa]local-user user1 service-type ppp
[pppoe-server-aaa]dis th
[V200R003C00]
: c. B; v0 j( F4 Z" _#
; l3 D$ |* z1 Q3 d' T! Y& [, a4 iaaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
* L6 T" M- s) d% I; Q: _6 V) z domain default
6 b- l, M2 o( l' Q' O! X domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
: R- o/ N4 a4 \. i local-user user1 password cipher %$%$aLq+.xS\rBJXJ}V|dJw'eZry%$%$
8 s( {9 W" d. e1 z$ e0 S# J local-user user1 service-type ppp
#
/ [1 |) G  k3 ~3 ^return
[pppoe-server-aaa]

5 S6 Y* ~9 W+ ]5、绑定接口
将虚拟模板接口与物理接口绑定提供服务
[pppoe-server]int g0/0/0
% ^# k* i; K" [% W4 q5 ~* Z[pppoe-server-GigabitEthernet0/0/0]pppoe-server bind virtual-template 1  #将虚拟模板1绑定在物理接口上

至此，服务器端的配置基本完成，如果想对PPPoE的访问流量进行控制，还可以配置ACL。
- l# f2 r, O$ n6 @( ?/ z% {2 e

虽然已经拨号成功，也能ping通网关192.168.10.1，但是因为没有nat所以无法ping通202.104.10.150的服务器
6、NAT配置
[pppoe-server]acl number 2000
[pppoe-server-acl-basic-2000]rule permit source 192.168.10.0 0.0.0.255
[pppoe-server-acl-basic-2000]int g0/0/1
[pppoe-server-GigabitEthernet0/0/1]nat outbound 2000
[pppoe-server-GigabitEthernet0/0/1]q

说明：这里ACL的含义就是允许哪些网段可以上网，这里为192.168.10.0/24这个网段，然后调用在拨号接口下。
现在就可以ping通服务器了

* y3 A2 P8 b; K" [, f