找回密码
 注册
查看: 999|回复: 0

华为路由器:PPPOE配置模拟实验及NAT配置

[复制链接]

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
发表于 2022-3-16 09:39:09 | 显示全部楼层 |阅读模式
实验环境
4 ~& R" d- ?: z$ L) w9 ]9 D( O7 y
( Q# j2 J+ w/ Y( lpppoe-client上面的接口信息" Z# }6 B; R5 v5 @) q
& u& \$ K  @+ ~; n+ w, Z
[AR1]dis ip interface brief
+ K( J  h9 W8 j' k  R6 x*down: administratively down- E' [" [- f# H
^down: standby  v9 ^3 ?( I! i: P/ N/ P. C8 U3 }4 |" v
(l): loopback: I6 E& Z  ?8 N
(s): spoofing3 }/ {. A. b& Y- j8 r* Y$ o5 b
The number of interface that is UP in Physical is 2$ F# B9 y. u& F' o2 ^/ A4 W
The number of interface that is DOWN in Physical is 1: z" q) v  R; L+ G) \0 F
The number of interface that is UP in Protocol is 1  j! |  R, E0 b- ]" i% k2 |6 X
The number of interface that is DOWN in Protocol is 2
8 R7 X6 g6 ^1 P* q9 X' Q2 ^
6 k$ s( g) p$ T& m9 ~Interface                         IP Address/Mask      Physical   Protocol  
5 |! ]' m; o& }8 b& Y5 o: W4 WGigabitEthernet0/0/0              unassigned           up         down      
) T1 e" `! k' }4 b/ Z+ g$ eGigabitEthernet0/0/1              192.168.1.254/24     down       down      ) Q7 ^* a+ h' y9 b
NULL0                             unassigned           up         up(s)     ; y, N/ u' d. m& [& C
, y8 h4 ^) T, l8 d5 |
( s2 K4 u  i; I' z  `. A
配置了基于接口的DHCP' m5 J) |1 H" {7 o
. `7 O' O$ B$ {( S7 a; B: t: Q
interface GigabitEthernet0/0/1
" m7 H1 O& B9 ]/ _) W; A ip address 192.168.1.254 255.255.255.0 8 a7 p7 d5 G3 _
dhcp select interface
8 B; A+ f" S1 d2 B1 r& b1 @0 w, P dhcp server dns-list 8.8.8.8
% b- p2 z/ t" d1 a8 V. a4 H& \* ] dhcp server domain-name pokes.com
# z0 t' G0 ~$ v7 R" K$ b; K" z' N% P' M+ I, `/ |2 g# U- a
注意事项:AR1、AR2的物理接口g0/0/0不配地址.
% F1 U# [" s& S/ V7 _! k
% n- J# N) K. T3 R6 `& s一、pppoe-server的配置
' U7 W: a" Q" |. C1、pppoe-server 配置地址池
# x' R1 a$ i$ Z: ^0 A[pppoe-server]ip pool pokes            #创建名为pokes的地址池,名字可以随便起,后面要调用5 ]) }; W* Y2 w& H5 x
Info: It's successful to create an IP address pool.
+ f% q% x8 A/ F6 P) t[pppoe-server-ip-pool-pokes]network 10.1.12.0 mask 24   #地址池为10.1.12.0/24
8 ^& P5 H, z$ `, _1 O. p, `[pppoe-server-ip-pool-pokes]dis th
2 t$ G, A; S8 w2 O" e[V200R003C00]
" ~; ]  E/ U; F: Q; \0 e3 T#
+ }( l. p+ n$ _' xip pool pokes
3 Z8 P6 ~* F- B network 10.1.12.0 mask 255.255.255.0
9 I. x/ N; U0 w3 d7 d4 ^5 l#7 V# Y" n7 W; N+ h+ t  Y5 e
return
$ T0 N' j/ h+ k[pppoe-server-ip-pool-pokes]q
3 D8 A2 R7 g' g/ g, Y8 L% J; e+ Q* h7 z0 r
2、配置虚拟口关联地址池+ f2 K- \5 x' P1 @5 _; E
配置虚拟口关联地址池,即创建Virtual-Template 1模版。
1 Q$ T6 c4 y8 q2 f3 P
5 x) V% [7 F& ]) [" \[pppoe-server]interface Virtual-Template 1    #创建虚拟接口1
" @2 ~1 O; N4 U[pppoe-server-Virtual-Template1]ip add 10.1.12.2 24                   #虚拟接口1的地址
4 D( j$ h  t7 k2 `/ m: Y) E[pppoe-server-Virtual-Template1]ppp authentication-mode chap   #认证类型
! ^4 u' X5 E4 \% u) _$ f) \/ v: J[pppoe-server-Virtual-Template1]remote address pool pokes      #客户端的地址池pokes
4 E3 Q. r- v; q* F# n: L, j[pppoe-server-Virtual-Template1]dis th
6 S+ K0 s0 z3 r) _interface Virtual-Template1
3 L  P' W6 V- t  ^0 w5 y" A ppp authentication-mode chap
; Q( ]( Y) N2 k1 M9 v, i) V remote address pool pokes
" g6 ]6 ~# r) Q% g- w% f+ a' {( C ip address 10.1.12.2 255.255.255.0
/ v/ V2 g3 S* x9 c: v+ D: x$ ~1 u1 E
[pppoe-server]int g0/0/0       
4 D- \1 W- q3 ^9 |9 E[pppoe-server-GigabitEthernet0/0/0]pppoe-server bind virtual-template 1   #将虚拟接口1关联到g0/0/0接口% |6 I* T" r5 T$ d/ N
[pppoe-server-GigabitEthernet0/0/0]dis th4 h% ^5 t8 m& {
[V200R003C00]
0 ?1 p1 o: {$ O  f9 s, o#+ x! Z  K4 \6 ]! N
interface GigabitEthernet0/0/0- C9 O4 i& T4 h1 T8 X
pppoe-server bind Virtual-Template 1) c: }6 \  r% k# f/ T
#, d) _& l$ G! E, W, _1 O, s& D/ ]
return
( B- O: k3 [, S6 i& Y[pppoe-server-GigabitEthernet0/0/0]2 c% H8 B+ k4 J' ?! b1 N

- q2 Z* ?0 W, E- [6 F- L3、创建pppoe拨号的账号
" V9 I* B3 G) Y7 Q, v按理我们应该创建pppoe拨号的账号。7 K' n9 y' ?" n0 X# ]8 l% t
这里为了演示拨号失败,我们这里先不新建账号,后面再新建。! D7 g5 X9 q1 }# B- |( s
6 w% u0 U  q6 Y$ d  b
二、pppoe-client的配置
' _" T5 n1 M: n( U1 r! \5 f[pppoe-client]dialer-rule   
/ i7 ~) {( k' H% t  H[pppoe-client-dialer-rule]dialer-rule 1 ?9 o1 Z9 ^4 V' ?# m
  acl   Permit or deny based on access-list   3 F8 N0 Z6 f1 k6 L& l9 F: D  ^
  ip    Ip" R& `0 V" t$ Y/ ^
  ipv6  Ipv6        . H3 L! L8 Z- J$ y
[pppoe-client-dialer-rule]dialer-rule 1 ip permit   #创建拨号规则,允许ip流量触发拨号
6 E$ F& f/ A+ c( e: A7 ^0 s3 R8 i' G8 |* R( Q, i5 Z- U9 O
[pppoe-client]interface Dialer 1% c5 ?+ p& l! Y+ ~( K8 s9 v4 G
Jul 15 2021 18:55:22-08:00 pppoe-client %%01IFPDT/4/IF_STATE(l)[0]:Interface Dia6 o( B5 _/ m2 O6 U7 D
ler1 has turned into UP state.
* J) m) Y* N8 J; o0 M% A0 z! D[pppoe-client-Dialer1]ip add       
. E& l4 G" O& ^2 A, w[pppoe-client-Dialer1]ip address ppp        5 ^6 V% {, s# u3 k6 y: G. r* d
[pppoe-client-Dialer1]ip address ppp-negotiate  #地址采用ppp协商: \" d8 u& {! x9 N7 v

$ y, w' r- T* ]2 E# ~% N$ f5 _[pppoe-client]interface Dialer 1                #创建接口拨号组13 c+ s- ^' S, r$ X" L5 O( @- m
[pppoe-client-Dialer1]ip address ppp-negotiate  #ip地址采用ppp协商
8 q. }( B' \' L. y' ^5 t1 `7 f[pppoe-client-Dialer1]dialer user zhprny        #此用户不用于认证,是标识作用以及和dialer绑定" V! d% ?5 r$ V& |2 k6 U; N2 V
[pppoe-client-Dialer1]dialer bundle 1           #设备通过Dialer bundle将物理接口与拨号接口关联起来。
3 t+ y' e; C" g+ ]- W8 s2 h[pppoe-client-Dialer1]dialer-group 1             #放到一个拨号访问组1中
3 m' `& m# t* ]) f6 f3 |( w[pppoe-client-Dialer1]ppp chap user pokes        #指定dialer1接口的编号,拨号账号
8 `" L# G6 j: S[pppoe-client-Dialer1]ppp chap password 123456   #拨号的密码
% X( S4 N7 Y, U7 T- h+ k7 _
# M; d, h' o' W5 D3 Z: E7 B) V: m5 W  A5 R: G6 t! m
[pppoe-client-Dialer1]dis th4 Q( ~1 P# N- h# u' u3 S. j
[V200R003C00]) ^5 x& n$ Z( D% A- h1 Q
#! {* M: D! ?0 r' H. Y* o
interface Dialer1
: `& O5 D' N  q+ [4 K" m link-protocol ppp
( S5 j5 g3 X" u" h: h+ K/ t( d ppp chap user pokes: X! n1 S9 ^1 G) R( z
ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$
0 h0 ?3 o# D! d- N" S. m ip address ppp-negotiate
% R  z- `& A7 `7 q dialer user zhprny. c1 G( h! A" J: @, Y
dialer bundle 1( O& Q$ ]% C* z
dialer-group 1
# _- v2 e+ F. j9 f5 C) A  T4 ^, _. s6 s4 ~  C. b/ Z8 j3 H
[pppoe-client-GigabitEthernet0/0/0]
# j: b/ f# Q. R0 uJul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[0]:The line pr
& P; ^: W/ W- Hotocol PPP on the interface Dialer1:0 has entered the UP state.  #PPP已进入启动状态
+ {" ]( i( L; w% u[pppoe-client-GigabitEthernet0/0/0]
% q5 K* N+ A! ~. ^% Z# J! c0 `Jul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[1]:The line pr+ e% U0 n: V9 u0 A6 m
otocol PPP on the interface Dialer1:0 has entered the DOWN state. #PPP已进入关闭状态
8 P, N' x8 Y/ e, y, p4 X  e; C' h' O% ~/ }
#不停的循环。。。。
0 G6 x  V% x" K8 c: A
, k  {: q* I# M! D. H5 A$ I: W. |2 N3 u; R7 y/ z
#原因是没有认证成功,因为我们在PPPOE-server上面还没有创建认证用户和密码. @& @2 P% _& e+ s7 C* O9 G
1 o5 w6 Q9 ^7 a" Y/ l. u
三、pppoe服务器上新建认证用户
2 J; d4 d" O+ [6 J我们到服务器上直接新建认证用户:
* F3 b/ O- B! V" D$ J
( a' _! m# r  Z! o0 Y3 p) _* k7 X) \9 u[pppoe-server]aaa# K* P4 j6 g1 G, p, Z
[pppoe-server-aaa]local-user pokes password cipher 123456
: t; M6 j% d7 }3 Y. ~  m) nInfo: Add a new user.7 ^# a$ i; g6 L3 c' |
[pppoe-server-aaa]local-user pokes service-type ppp    #类型为ppp
( A. I7 C' M( \$ `. G- Z9 T! B1 D6 s+ m

" t# ?6 F% V# l$ O2 K0 n四、客户端验证结果( Z) Y. V1 \9 G  p! `* C
1、认证成功信息
$ Q/ U, y$ m5 ~7 M8 B然后客户端就会出现认证成功的提示:
! ]9 ]8 s4 H: F8 H1 V7 m1 e6 O6 y9 P7 O. S( q5 ~; M& Z+ E7 j/ E
[pppoe-client-GigabitEthernet0/0/0]
8 m$ O6 |0 y$ F& S8 T, ~" L2 ~Jul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[10]:The line p/ c! D( ^* a: A, K. F% A0 P
rotocol PPP on the interface Dialer1:0 has entered the UP state.
; @) K2 _% @; J8 e: C[pppoe-client-GigabitEthernet0/0/0]
7 C6 x% G) V. l# v& v4 @Jul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[11]:The line p
  O3 @3 v  J8 X3 ]rotocol PPP IPCP on the interface Dialer1:0 has entered the UP state.
  d( E7 ^! d) T2 c- i[pppoe-client-GigabitEthernet0/0/0]q' R1 z2 L" z% U  S: G
[pppoe-client]dis ip in b
3 W* k' t1 R# y*down: administratively down+ K5 T9 T% A  R
^down: standby
/ [* X5 e/ p3 C) B(l): loopback1 s8 G0 A! B( Q+ _1 B" a
(s): spoofing( h  T& G: v, r6 k% l+ U$ L# w
The number of interface that is UP in Physical is 4
' E* {1 u" E& L2 i! NThe number of interface that is DOWN in Physical is 0
0 y. A" F2 t, [0 C# IThe number of interface that is UP in Protocol is 3* ?5 @' I1 ^2 e
The number of interface that is DOWN in Protocol is 1
' u5 q3 n# y: Q( {, x# x) O3 E( I$ v! s" \0 `* b4 B0 [& c0 Y
Interface                         IP Address/Mask      Physical   Protocol  
/ H$ Y( ~1 a0 ^" vDialer1                           10.1.12.254/32       up         up(s)     #拿到了PPPOE服务器上的地址5 A7 V' j/ R- q
GigabitEthernet0/0/0              unassigned           up         down      
0 A9 r! O* ]4 Y6 K5 V6 ~, _GigabitEthernet0/0/1              192.168.1.254/24     up         up        ( o5 D/ K" O) }- E
NULL0                             unassigned           up         up(s) 6 P% Q8 X  V& i
  m3 a+ O% v3 r5 t

) [1 P+ f' x. ?2 _4 Q! F2、pppoe-server 信息
9 q4 f# s+ V% [; h/ s1 ^<pppoe-server>dis interface Virtual-Template 1" ~2 |7 d" m; h1 \
Virtual-Template1 current state : UP; J. V  E" M! r. N: M( W
Line protocol current state : UP
) Z  N6 C* s( c2 v9 @) M! GLast line protocol up time : 2021-07-15 19:09:22 UTC-08:00
3 y4 Y, a1 W( k2 X2 r, u% P. hDescription:HUAWEI, AR Series, Virtual-Template1 Interface' }3 j; b* X, D
Route Port,The Maximum Transmit Unit is 1492, Hold timer is 10(sec)3 C; A. d& g4 S& k4 A
Internet Address is 10.1.12.2/24  g  M. x* ]$ k5 |3 u. [
Link layer protocol is PPP5 ~& v3 C" V9 E* ]" B5 i. V
LCP initial
; a. I1 U0 s8 r3 l; G/ t0 D1 pPhysical is None( D4 {4 b* z, b8 I9 v1 a
Current system time: 2021-07-15 20:27:28-08:00  M: J4 @+ \1 ]3 I% A4 `( M/ R: w
    Last 300 seconds input rate 0 bits/sec, 0 packets/sec
& a3 f7 h+ u$ Z8 D) S    Last 300 seconds output rate 0 bits/sec, 0 packets/sec
. m! y% H9 Z! A$ x$ h* e& A: m    Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
0 i6 Q5 z1 n& S: R2 N    Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
0 ]2 o* z( G- l5 Q. Y- |    Input: 0 bytes& H5 G. a8 V9 z) k! b
    Output:0 bytes
5 t* y6 y5 h  h* b. q; \3 A9 k    Input bandwidth utilization  :    0%2 c& S" ?1 {0 C# j1 |3 f* w  O
    Output bandwidth utilization :    0%
+ T8 \9 E% m& d# x) z' t' L. R. e+ v2 A. \, }
<pppoe-server>2 t2 S3 I0 \* {/ [
* O6 F5 j* L! v
( q- j, [: Y4 M3 g6 P
3、pppoe-client信息
; ?: ^3 _: A* p<pppoe-client>dis interface Dialer 1
4 F7 a  _+ T0 P: \9 K4 aDialer1 current state : UP1 m  u% ]3 Y, r6 @6 |9 \* F
Line protocol current state : UP (spoofing)
. U0 R8 ^9 e0 T0 {: `  J4 I1 C) `0 tDescription:HUAWEI, AR Series, Dialer1 Interface5 }" B( I8 J- d" T9 P" V4 s
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)8 e( {+ _+ w' s4 O3 s0 H. k4 y% y
Internet Address is negotiated, 10.1.12.254/32# M$ a2 v- j! m: H; n0 B$ G2 i
Link layer protocol is PPP
! K. H0 e& f. `: t) b7 SLCP initial" x0 y$ q: L  W2 a3 D6 y
Physical is Dialer
# s0 A9 d! J1 u  K5 H+ l6 aCurrent system time: 2021-07-15 20:23:56-08:00
/ x- h( l5 D0 ~: m+ C    Last 300 seconds input rate 0 bits/sec, 0 packets/sec
) u: W. k! n, H/ R  q' O    Last 300 seconds output rate 0 bits/sec, 0 packets/sec
4 Y( {4 W" ?* W0 J* W( f    Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec
5 E: i7 d0 w$ s6 X2 l$ _    Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
. {- a" w$ P0 r( O    Input: 0 bytes
7 n2 N) @1 D4 N0 P6 h    Output:0 bytes1 @6 y% k9 F% ]8 J! _, P9 ]2 d
    Input bandwidth utilization  :    0%3 I' @, o( b/ Q% ?3 L# c
    Output bandwidth utilization :    0%. ]; V& @8 w- ~' X7 |
Bound to Dialer1:0:: ?+ ^. i- C, t' F7 x) Z7 L5 I
Dialer1:0 current state : UP ,1 q, q! @  C  _0 B9 i1 y
Line protocol current state : UP3 M* f+ ]# n2 J: V

6 v  g+ w+ _. d. g3 J+ V6 lLink layer protocol is PPP1 h1 O  n7 f6 ^
LCP opened, IPCP opened0 F# N5 q. V" p# j0 n4 v* a
Packets statistics:
6 @- X3 l$ z& a  Input packets:0,  0 bytes3 q+ p2 F1 Q- p& z
  Output packets:4, 336 bytes
0 |$ b5 Y* ]. T$ q$ R; N" A  FCS error packets:0/ R' W9 @  s0 C+ z9 ?3 o$ Z
  Address error packets:01 g( w0 f+ c* R* P' I
  Control field control error packets:0
2 i+ l/ a4 p# A' `
: E9 v3 O, e- s: z+ z9 e+ t  l# T+ K7 ~3 B* E/ X
<pppoe-client>$ Y9 X3 s- B% y' L3 C) [8 p

. m# y/ [: D  x) t五、NAT的配置8 L  O  C8 {7 ]( i, o8 `
用PC2直接ping 10.1.12.254是可以通的。10.1.12.254是AR1的g0/0/0口获取到的地址,其实就是我们常说的WAN口地址。, z+ P* l" M( `  ^

; i/ Y& k) |2 U) oPC2>ping 10.1.12.254( w; a& y7 c8 X

" w3 \1 Q/ p3 H( H  }: ]Ping 10.1.12.254: 32 data bytes, Press Ctrl_C to break# G# B2 b4 D, |( a. g/ ?
From 10.1.12.254: bytes=32 seq=1 ttl=255 time=63 ms
8 I; k0 s5 V4 f; w0 E# _! ~From 10.1.12.254: bytes=32 seq=2 ttl=255 time=31 ms% E; ]3 p7 @: Z* v
From 10.1.12.254: bytes=32 seq=3 ttl=255 time=47 ms
& Q" |" B2 Z: t5 k: B4 ?  HFrom 10.1.12.254: bytes=32 seq=4 ttl=255 time=31 ms
; a, ]& S9 F; C7 ?- pFrom 10.1.12.254: bytes=32 seq=5 ttl=255 time=47 ms' b1 E+ L5 o7 y  t- B2 {
9 {/ Z5 _/ l  D* o1 k; A, g8 q9 k
--- 10.1.12.254 ping statistics ---$ b/ O# t, B/ j% v2 m
  5 packet(s) transmitted
. O2 \# P( x" b' \6 H( v  5 packet(s) received
8 Z' p9 n5 W" ?" T/ Z" Y- d7 u  0.00% packet loss
1 |: r* l. h- }; j, ^5 a0 t1 r. m  round-trip min/avg/max = 31/43/63 ms
* T" n3 S( g: O# D. q! e; L
) r9 V0 S  X" ~3 Y, A+ h: VPC2>ping 10.1.12.2
. _- w2 d0 B: Z1 F/ x, U  @* ?* U( C2 r& U
Ping 10.1.12.2: 32 data bytes, Press Ctrl_C to break, o3 F  F, i; e& q6 }% g+ ^5 q
Request timeout!
7 p: x9 \2 g# P$ q4 JRequest timeout!
( M$ @0 }) G+ aRequest timeout!
  c( Y1 q$ C# }0 p% u% uRequest timeout!
& k, ]) q8 p& \6 J9 {4 kRequest timeout!
# Z8 K2 h* O/ o; V/ k0 x. s7 r/ t! X* w" Q% c1 D) P6 R5 ~& Q- @
--- 10.1.12.2 ping statistics ---
4 O, U/ Z7 v/ A/ D" d8 Q  5 packet(s) transmitted& e0 g7 n* Q4 F7 ~* Z, M2 v
  0 packet(s) received
+ e/ {3 S1 V: c" X0 {  F# s3 E- z  100.00% packet loss
6 I0 F: E9 E( p4 S& G#但是无法ping通10.1.12.22 e9 j7 Q% V# P  N; Z
( q& A" O0 S; k, a; n2 m0 O

+ f+ u" s( I- `无法ping通10.1.12.2的原因是:我们没有做NAT .接下来我们在pppoe-client上面做NAT
: m$ v5 C! b. V. @7 i- R+ |- j3 L. [
1、这里配置规则2000
6 M: o  h- I$ A& ]8 \[pppoe-client]acl number 2000        1 s# C+ n* l' D( [5 @
[pppoe-client-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
2 w2 B; c' j8 r$ Q; I; Q, o/ n8 m
1 Q1 N6 ^+ L' p; c" t: l2、将规则2000绑定到接口
  ]8 l4 l4 U9 d" T8 [( l) u* S如下接口信息,需要注意的是pppoe的接口是Dialer1,并不是GigabitEthernet0/0/0口。我们必须将规则绑定在Dialer1口,最容易犯错的就是直接绑定在g0/0/0口。
+ [. W6 \/ ?. x- I
6 A- M' c5 b+ x- E# m[pppoe-client]dis ip int b2 M: J( f- Z8 Y
*down: administratively down! l% f; N  s6 v& D4 f
^down: standby
" S& o  W! }# J(l): loopback- t+ P7 j" _+ E
(s): spoofing3 u1 g- A9 X& M
The number of interface that is UP in Physical is 4
2 e7 m3 z$ \# T+ _8 U, VThe number of interface that is DOWN in Physical is 02 w8 F/ ?% G. F. W  B* _
The number of interface that is UP in Protocol is 32 J/ h, i# o: Z
The number of interface that is DOWN in Protocol is 1( E3 g; U- H; O2 V: }. M& d5 i
& r' I' J/ h" \0 p5 I
Interface                         IP Address/Mask      Physical   Protocol  
8 r1 p! n8 m- m* Q: O  V4 bDialer1                           10.1.12.254/32       up         up(s)     0 e" P& n) k- K
GigabitEthernet0/0/0              unassigned           up         down      
/ e  w5 x+ [, p& [: ?9 h3 fGigabitEthernet0/0/1              192.168.1.254/24     up         up        
; h4 O6 [$ w7 tNULL0                             unassigned           up         up(s)     7 ?! n$ J& b' `, j% _; a
[pppoe-client]( e6 b1 P7 Z+ q, i; P) Y

& _/ ]  C8 ?+ h* g; S[pppoe-client]int Dialer 1        ) ]1 l& Q# P+ ]7 ^5 c- A% o
[pppoe-client-Dialer1]nat outbound 2000) S3 h: S$ _, |  x. g: ^. B4 U) L3 O/ _
[pppoe-client-Dialer1]dis th: T/ k) Z5 r! @& ~
[V200R003C00]* o8 P7 _+ p0 S
#, G: M9 ?, A% T3 {6 L$ v
interface Dialer1* H6 P* S; y  `$ d2 h' f, A& z4 v
link-protocol ppp4 F# @( b4 N- R2 k+ {5 [; m! D
ppp chap user pokes) v1 S7 F- {7 W: x' m
ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$6 _2 s( G  U9 k. S$ B. o9 |( t5 J, l
ip address ppp-negotiate/ n0 t& k" v) p; R+ f* L1 q- }
dialer user zhprny
0 V* T1 ?8 g% p; v dialer bundle 1
8 T; f5 g  m# S/ X9 s# ] dialer-group 12 D1 d0 V$ [1 x* B4 }! \( ^. T; l
nat outbound 20008 C8 h# `) V- @+ Q8 F
#* R/ J  @2 g: y) t# p
return
* h, U* r5 I. ?[pppoe-client-Dialer1]1 b: ]& j) ^: H
. A. [7 u! s8 U0 ^- Q
接下来我们就可以ping通10.1.12.2 了。+ o+ Z$ [2 m% N. x
6 K- s/ s: p2 H- A. P, A; m
PC2>ping 10.1.12.2' y- F, g  \8 l- v1 f: E3 A0 s; {
4 }' n2 `& H: Y  H
Ping 10.1.12.2: 32 data bytes, Press Ctrl_C to break, y# [$ Y/ I0 n! }7 |; C
From 10.1.12.2: bytes=32 seq=1 ttl=254 time=31 ms
! G; e; \+ m. qFrom 10.1.12.2: bytes=32 seq=2 ttl=254 time=32 ms
) G: Q( [- d( x- F, J; ?From 10.1.12.2: bytes=32 seq=3 ttl=254 time=46 ms  f! B6 d* H6 d9 I8 t- c; B. S
From 10.1.12.2: bytes=32 seq=4 ttl=254 time=32 ms
. t' X5 `/ `; |; J/ X! J& ?% @From 10.1.12.2: bytes=32 seq=5 ttl=254 time=31 ms
9 \# f+ p; b, g1 l( Y5 \. }4 x9 C) ~( _% D0 z1 w, B5 `
--- 10.1.12.2 ping statistics ---
6 w! l" L- U' U2 P+ [  5 packet(s) transmitted
& c7 r  C7 p, N& t% B3 K5 I  5 packet(s) received/ }: `4 u" ^- O, \. R# g
  0.00% packet loss
% k: K& X" d7 w% K; v6 d. [  round-trip min/avg/max = 31/34/46 ms* ?3 V! `1 v- ~7 j5 Q0 F  G, }2 U
5 |6 d# Y3 Q% e/ }& [9 S
* d* r- P5 e7 I% g1 t/ t6 X
您需要登录后才可以回帖 登录 | 注册

本版积分规则

返回首页|Archiver|手机版|小黑屋|易陆发现技术论坛 ( 蜀ICP备2026014127号-1 )

GMT+8, 2026-6-12 03:03 , Processed in 0.018396 second(s), 23 queries .

Powered by Discuz! X5.0

© 2001-2026 Discuz! Team.

快速回复 返回顶部 返回列表