[配置案例] cisco、huawei juniper联合PPPOE拨号演示 |
cisco、huawei juniper联合PPPOE拨号演示 ![]() cisco、huawei juniper联合PPPOE拨号演示 PPPOE-Server PPPOE-Pool 192. 168. 100.0/24 Hawei-AK1220-S PPPOE-address 192. 168. 100.253/24 Fe0/0/2 123. 1. 1. 1 G0/0/0 G0/0/11 Juniper-SRX210HE PPPOE-address 192. 168.100.254/21 Fa0/0 PPPOE-Client Cisco-2651MX AR(PPPOE 服务端): # sysname AR1220-S # ip pool PPPOE //创建地址池用来为客户端分配地址 network 192.168.1.0 mask 255.255.255.0 dns-list 202.96.107.28 # aaa //在AAA 下配置认证方案和创建用于认证的账号 authentication-scheme default local-user admin password cipher admin //配置PPPoE Client 的用户名和密码 local-user admin service-type ppp //配置PPPoE Client 的接入类型 # interface Virtual-Template1 //配置虚拟接口模板 remote address pool pppoe //配置为PPPoE Client 指定IP 地址池,PPPoE Client 将分 配到IP 地址池中的IP 地址 ip address unnumbered interface GigabitEthernet0/0/1 // Share an address with another interface # interface GigabitEthernet0/0/1 pppoe-server bind Virtual-Template 1 //接口上开启PPPOE 服务器的功能 ip address 123.1.1.1 255.255.255.0 # # 2651MX(PPPOE 客户端): # hostname 2651MX interface Dialer1 //建立一个逻辑拨号接口 ip address negotiated //拨号接口的地址是通过协商获得的 encapsulation ppp //封装为ppp 协议 dialer pool 1 //建立拨号池为 1,该接口使用1 号拨号池进行拨号 ip mtu 1492 //设置MTU ppp authentication pap callin //加密的验证模式为pap,如果是chap,直接更改就可以了。 ppp pap sent-username admin password 0 admin //去服务端验证的用户名好密码 vpdn enable //启用路由的虚拟专用拨号网络-VPDN vpdn-group pppoe //建立一个VPDN 组 request-dialin //初始化一个VPDN Tunnel, 建立一个请求拨入的VPDN 子组 protocol pppoe //VPDN 子组使用PPPOE 建立会话隧道 //配置客户端与服务端的连接接口,俗称猫口连接 interface FastEthernet0/0 no ip address pppoe enable //运行以太接口运行PPPOE pppoe-client dial-pool-number 1 //将以太接口的PPPOE 拨号客户端加入拨号池 ip route 0.0.0.0 0.0.0.0 Dialer1 SRX210HE(PPPOE 客户端) juniper@SRX210-B> ...configuration | display set set version 12.1X46-D67 set system host-name SRX210-B set interfaces fe-0/0/2 unit 0 encapsulation ppp-over-ether //选择接口fe-0/0/2 作为PPPoE 拨号接口,将接口封装成ppp over ehter set interfaces pp0 unit 0 ppp-options pap local-name admin //意思和cisco 命令行大同小异不做过多解释 set interfaces pp0 unit 0 ppp-options pap local-password "$9$TzF/pu1Srv69Se" set interfaces pp0 unit 0 ppp-options pap passive set interfaces pp0 unit 0 pppoe-options underlying-interface fe-0/0/2.0 //逻辑口共享借用物理口 set interfaces pp0 unit 0 pppoe-options idle-timeout 0 set interfaces pp0 unit 0 pppoe-options auto-reconnect 3 set interfaces pp0 unit 0 pppoe-options client set interfaces pp0 unit 0 family inet mtu 1492 set interfaces pp0 unit 0 family inet negotiate-address set routing-options static route 0.0.0.0/0 next-hop pp0.0 set security zones security-zone trust host-inbound-traffic system-services all //因防火墙上只有业务接口,需要添加 至Zone 下并放行相应的策略 set security zones security-zone trust host-inbound-traffic protocols all set security zones security-zone trust interfaces fe-0/0/2.0 set security zones security-zone trust interfaces pp0.0 链接:https://pan.baidu.com/s/1UL86rgYOeE2Kco1vGV3Kyw 密码:
购买主题
已有 12 人购买
本主题需向作者支付 20 金币 才能浏览
|
相关帖子
|
| |
| |
| |
| |
| |
| |
| |
| |