Cisco路由器PPPOE拔号 实验 非常实用

Evan1987

网络拓扑如图:

                               
登录/注册后可看大图

一. server配置如下:

模拟ISP端:
Server(config)#vpdn enable
启用vpdn
Server(config)#service dhcp
启用dhcp服务
Server(config)#ip dhcp pool test                           
Server(dhcp-config)#network 1.1.1.0 255.255.255.0
定义地址池test
Server(dhcp-config)#ip dhcp excluded-address 1.1.1.1
保留IP:1.1.1.1
Server(config)#interface virtual-template 1
定义虚拟模板
Server(config-if)#ip address 1.1.1.1 255.255.255.0
Server(config-if)#peer default ip address dhcp-pool test        
应用地址池test.让客户端从test中取IP
Server(config-if)#ppp ipcp dns 1.2.3.4                     
分配给客户端的DNS服务器地址    
Server(config-if)#ppp authentication chap
应用chap认证
Server(config-if)#no shutdown
Server(config-if)#exit
Server(config)#bba-group pppoe global(global名字可以改)
)
Server(config-bba-group)#virtual-template 1
套用虚拟模板1
Server(config-bba-group)#interface e0/0
进入ethernet 0/0
Server(config-if)#pppoe enable group global(对应上面的global)
启用pppoe 并套用group global
Server(config-if)#no shutdown
Server(config-if)#interface e0/1
Server(config-if)#pppoe enable group global
Server(config-if)#no shutdown
Server(config-if)#username user1 password 1111
Server(config-if)#username user2 password 2222
新建两个用户user1和user2

二. 验证server是否可以让客户端拔入:
用windows拔号:

                               
登录/注册后可看大图

                               
登录/注册后可看大图

file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/ksohtml/wps_clip_image-1245.png

                               
登录/注册后可看大图

                               
登录/注册后可看大图

                               
登录/注册后可看大图

                               
登录/注册后可看大图

                               
登录/注册后可看大图

三. Cisco拔号:
Router(config)#vpdn enable
Router(config)#interface dialer 1
进入拔号器1
Router(config-if)#encapsulation ppp
封装PPP协议
Router(config-if)#ip add negotiated
启用IP协商
Router(config-if)#ppp authentication chap
Router(config-if)#ppp authentication chap callin
封装chap认证
Router(config-if)#ppp chap hostname user1
输入用户名
Router(config-if)#ppp chap password 1111
输入密码
Router(config-if)#dialer pool 1
Router(config-if)#ip nat outside
确定为nat out口
Router(config-if)#no shutdown
Router(config-if)#interface e0/1
Router(config-if)#pppoe-client dial-pool-number 1(对应dialer pool 1)
不知如何说明,望高人指点
Router(config-if)#ip nat inside
Router(config-if)#ip nat inside
确定为nat in口
Router(config-if)#no shutdown
Router(config-if)#interface e0/0
Router(config-if)#ip add 192.168.0.254 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#do show ip int b

                               
登录/注册后可看大图

dialer1已经获取到IP:1.1.1.2,说明已经拔号成功
Router(config-if)#exit

四. 让内网(192.168.0.0/24)主机可以与外网(1.1.1.0/24)通信
Router(config)#access-list 1 permit 192.168.0.0 0.0.0.255
Router(config)#ip nat inside source list 1 interface dialer1 overload
新建nat使192.168.0.0段主机转换成dialer1的地址出去
Router(config)#do debug ip nat
Debug IP地址转换
Router(config)#ip route 0.0.0.0 0.0.0.0 dia1
新建一个默认路由


模拟内网(192.168.0.0/24)PC
pc(config)#no ip routing
pc(config)#interface e0/0
pc(config)#ip add 192.168.0.1 255.255.255.0
pc(config)#no shutdown
pc(config)#do ping 192.168.0.254
pc(config)#do ping 1.1.1.1
pc(config)#do ping 1.1.1.6(windows拔号后得到的IP.每断开一次会换一个IP,刚刚是1.1.1.3因为我断开了3次)

                               
登录/注册后可看大图

在router上查看debug

                               
登录/注册后可看大图

Windows ping server和router
  

                               
登录/注册后可看大图

五.查看server和router的配置
      server配置
Server(config-if)#do show run

                               
登录/注册后可看大图

                               
登录/注册后可看大图

                               
登录/注册后可看大图

路由器配置
Router(config-if)#do show run

         

                               
登录/注册后可看大图

                               
登录/注册后可看大图

      

Evan1987

附上英文版命令诠释

Command  Description  
hostname PPPoE-Client
!
Set the router’s name (optional)  
bba-group pppoe global
!
Create a global PPPoE group  
interface FastEthernet0/0
description Inside interface
ip address 10.0.0.5 255.255.255.0
no ip redirects
!
Inside interface configuration  
interface FastEthernet0/1
description PPPoE interface
no ip address
pppoe enable group global
pppoe-client dial-pool-number 1
!
Enable PPPoE in group global on the outside interface. Add the interface into a dialer pool (1) that can be used in Dialer interfaces.  
interface Dialer0
description PPPoE dialer interface
!
Create the dialer interface  
ip address negotiated
!
IP address will be negotiated with the PPPoE server  
ip mtu 1492
!
MTU size has to be reduced on the PPPoE interfaces due to PPPoE framing overhead  
encapsulation ppp
!
Specify the encapsulation type (PPP is required for PPPoE)  
dialer pool 1
!
Associate the dialer interface with a dial pool (configured on the Fast Ethernet interface)  
dialer-group 1
!
Associate the dialer interface with a dial-on-demand group  
ppp authentication chap callout optional
ppp chap hostname test
ppp chap password 0 test
!
PPP will use CHAP authentication with username=test and password=test. Authentication will be used only on outgoing calls, the remote end does not need to authenticate.  
ip route 0.0.0.0 0.0.0.0 Dialer0
!
Static default route points to the PPPoE interface  
dialer-list 1 protocol ip permit
The dialer list object is required to complete the dial-on-demand configuration.  

Server configuration
The server configuration is similar to the client configuration; the major differences are:

A virtual template used for incoming PPPoE requests is configured within the bba-group.
A VirtualTemplate interface is used instead of the Dialer interface.
A local IP address pool is defined for the clients that request an IP address from the server.
Command  Description  
Hostname PPPoE-Client
!
Set the router’s name (optional)  
Username test password 0 test
!
Define the username and password used by the PPPoE client.  
bba-group pppoe global
virtual-template 1
!
Create the global PPPoE group that uses virtual-template 1 for incoming PPPoE requests.  
interface Loopback0
ip address 172.16.0.12 255.255.255.255
!
The Loopback0 interface is used as the source IP address for virtual access interfaces.  
interface FastEthernet0/0
ip address 10.0.0.6 255.255.255.0
pppoe enable group global
!
PPPoE group global is enabled on the FastEthernet interface. Since this group specifies a virtual template for incoming PPPoE sessions, the router becomes a PPPoE server.  
interface Virtual-Template1
ip unnumbered Loopback0
ip mtu 1492
!
Virtual template for incoming PPPoE sessions. The interface is unnumbered and has MTU set to 1492 (see above).  
peer default ip address pool PPPoE
!
The IP addresses for remote PPPoE clients will be taken from the PPPoE address pool  
ppp authentication chap callin
!
Incoming calls use CHAP authentication  
ppp chap refuse callin
!
The PPPoE server refuses to authenticate on incoming calls, preventing potential authentication failures on clients that have not configured a username for the the PPPoE server’s hostname.  
ip local pool PPPoE 172.16.0.20 172.16.0.29

Address pool for PPPoE clients  

hljlsl

很好，很强大

cleverhan

确实不错，支持你~

710275039

haohaoxuexia   

wujieliulu

谢谢 老总

zenglei0115

谢谢分享

jzh_love

472693500

楼主真厉害。顶！！！！！！！！！！！！！111

472693500

大神，你太好咯。

itchinaren

看了LZ的帖子，我只想说一句很好很强大！

ljh329

看不到图片

rosv123

真心不错