将设为首页浏览此站
收藏本站联系我们相册切换到窄版

易陆发现互联网技术论坛

 找回密码
 开始注册
易陆发现互联网技术论坛»首页 › 操作系统区 › 应用网络 › 华为交换机、路由器 › 华为路由器：PPPOE配置模拟实验及NAT配置 ...
查看: 1115|回复: 1
收起左侧

华为路由器：PPPOE配置模拟实验及NAT配置

[复制链接]
admin
发表于 2022-3-16 09:39:13 | 显示全部楼层 |阅读模式

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要 登录 才可以下载或查看，没有账号？开始注册

x
实验环境, g4 ~$ d& f, X  |' \+ _
# S2 E  ?3 ?! }8 g- y' a7 q
pppoe-client上面的接口信息- {7 t8 i. m2 q

& j9 A! S, k, k3 n5 `* ~& m[AR1]dis ip interface brief ) P3 o5 T. ~1 {. o! G+ q$ K
*down: administratively down
% a( ?9 X! I' b# Y: U' p^down: standby% X/ X: j) L1 R0 \
(l): loopback
- b; E& T+ r9 W" V- j(s): spoofing; T8 D- S* N2 l! ^( ?  K8 |" y
The number of interface that is UP in Physical is 2! s: y8 @9 t, @6 X) S: h
The number of interface that is DOWN in Physical is 15 \/ v+ O/ G: `6 t3 E  H
The number of interface that is UP in Protocol is 1
/ r2 a  Y6 {- {' iThe number of interface that is DOWN in Protocol is 2/ K- o: g) H, h; r

/ ]6 G, ]$ f: H- i% {Interface                         IP Address/Mask      Physical   Protocol  
* \, b- R5 X- G0 SGigabitEthernet0/0/0              unassigned           up         down      * ?6 O& s' `0 Z
GigabitEthernet0/0/1              192.168.1.254/24     down       down      # g0 g/ j. y1 g$ U$ \) r6 k
NULL0                             unassigned           up         up(s)     
+ \2 O7 a6 _5 ~5 S* g& a
- v3 M' k6 L' x( o) J$ v/ H9 N
4 A4 Y# N& y* S9 K+ c8 V, ?+ K7 D配置了基于接口的DHCP# ]8 L8 D9 A6 |
. i% ]0 ^5 n+ c* X; {/ j% F
interface GigabitEthernet0/0/1; E) y6 \; P0 {
ip address 192.168.1.254 255.255.255.0
' V  ], }7 M' ]- E dhcp select interface
# n. U% U4 J( @! R8 I& U8 Q$ e dhcp server dns-list 8.8.8.8
% O7 n" T" ^4 b; P7 u/ W, e dhcp server domain-name pokes.com
+ {, ~& X% n$ L+ {. i' O- L- j! |* w( R6 y" k6 J9 E6 z) E
注意事项：AR1、AR2的物理接口g0/0/0不配地址.
; @1 @1 Y" m2 b; ~) s; e3 k! e
一、pppoe-server的配置
1 y. u# N" }  z5 c9 M* J1、pppoe-server 配置地址池
2 W4 Y- e* n& |6 q! t! {[pppoe-server]ip pool pokes            #创建名为pokes的地址池，名字可以随便起，后面要调用& n# y! S" k# ~% P0 ?
Info: It's successful to create an IP address pool.
; v. G6 G3 q2 f& M- h- N! ][pppoe-server-ip-pool-pokes]network 10.1.12.0 mask 24   #地址池为10.1.12.0/24
9 h1 D4 U% V) D& L" }& ?; c" n[pppoe-server-ip-pool-pokes]dis th
" V  Q, N9 _0 \/ ?. u5 l( w3 C[V200R003C00]9 I! ~2 d0 \. z2 T! s; Q
#6 o+ V; v  Y& y* p7 D' ?0 J8 u
ip pool pokes0 }6 F9 }. j6 }' |# P" ^
network 10.1.12.0 mask 255.255.255.0
' R+ [' M3 C* U#9 W: M  ]' y" Q! I/ ?! L
return8 a0 M0 V) |7 e0 ]! n6 p7 V
[pppoe-server-ip-pool-pokes]q% I6 o  ?/ U$ d: `- q
. @2 T! |; L2 Y2 n" x* \
2、配置虚拟口关联地址池7 _* x3 o' P9 p5 G' R- n
配置虚拟口关联地址池，即创建Virtual-Template 1模版。3 X8 y9 u8 \+ ]9 f9 X( P2 s
  m% T( ?1 O9 E4 u1 c) M
[pppoe-server]interface Virtual-Template 1    #创建虚拟接口1
* T! k+ l. b  f! I% M[pppoe-server-Virtual-Template1]ip add 10.1.12.2 24                   #虚拟接口1的地址/ G5 U$ [' K" F$ H- G8 \
[pppoe-server-Virtual-Template1]ppp authentication-mode chap   #认证类型
: E3 q" D- d3 {( r1 n  x2 m2 z[pppoe-server-Virtual-Template1]remote address pool pokes      #客户端的地址池pokes) r# ]3 ]- U' P4 g4 m% ]6 `) a. u
[pppoe-server-Virtual-Template1]dis th
! X0 c9 \! ~! l% Jinterface Virtual-Template1, l* {. i7 e( x1 i" ~
ppp authentication-mode chap
% e" a  P. N- z: B0 r2 c. L remote address pool pokes
) n8 [! F! Z* f7 p ip address 10.1.12.2 255.255.255.0. e  f# J/ N) T3 ]) b, [! n: y
% F# G/ w5 U6 }- Y3 P% q
[pppoe-server]int g0/0/0       
8 h$ d4 K/ n' j. Z5 b0 D* V[pppoe-server-GigabitEthernet0/0/0]pppoe-server bind virtual-template 1   #将虚拟接口1关联到g0/0/0接口+ `7 Z4 T1 L$ g7 W2 _( D
[pppoe-server-GigabitEthernet0/0/0]dis th0 Y, i; d+ q* I" [5 B# `% C6 g" f
[V200R003C00]2 ^) F0 w- Z% u
#
9 M2 F1 f! R+ f* ]* }0 J8 binterface GigabitEthernet0/0/0* f4 [) Q) F- \) M
pppoe-server bind Virtual-Template 1  Y0 B4 v$ O/ s8 h- p
#
/ s5 N% L% ~  V# Q/ q2 ]0 ]return
6 l" [+ n: J! ]. i" e4 v/ R8 a* Z[pppoe-server-GigabitEthernet0/0/0]
5 f) V  V3 R: l# ^; \" U; T; i* }+ b
3、创建pppoe拨号的账号
! f3 C! M! R" j" a) M' K) u" F按理我们应该创建pppoe拨号的账号。  k7 r2 F4 ]% ~5 c
这里为了演示拨号失败，我们这里先不新建账号，后面再新建。- T3 o# F, J. h2 U
' K& P5 t, b7 R" u0 ~! @! [6 o: ?
二、pppoe-client的配置6 ^1 {1 ?7 y# M0 s' S
[pppoe-client]dialer-rule   $ l3 q) K; c& Y7 B
[pppoe-client-dialer-rule]dialer-rule 1 ?6 W0 [3 \1 q$ }# O4 @  v" z# s
  acl   Permit or deny based on access-list   
- b8 N5 }% S4 q8 G  ip    Ip
  a$ W1 K/ z) h" D4 P1 Q( H  ipv6  Ipv6        : }8 v. s, x- `6 ~
[pppoe-client-dialer-rule]dialer-rule 1 ip permit   #创建拨号规则，允许ip流量触发拨号
( J, o9 c3 ]( S2 x) i
! a+ K& v7 x0 a" {& ~[pppoe-client]interface Dialer 1# Y) K, b' n  G, j( Z. n9 [
Jul 15 2021 18:55:22-08:00 pppoe-client %%01IFPDT/4/IF_STATE(l)[0]:Interface Dia
4 S# t) Y) l  w+ Q# V  Bler1 has turned into UP state.& u4 ^/ c2 G1 P  ~( {
[pppoe-client-Dialer1]ip add        7 D1 j& s$ W! {2 `& S
[pppoe-client-Dialer1]ip address ppp        * r. }8 H; X* `3 m
[pppoe-client-Dialer1]ip address ppp-negotiate  #地址采用ppp协商& u# S) p) x  m) M

( `7 y+ |0 ?) ~& P# g8 a[pppoe-client]interface Dialer 1                #创建接口拨号组1: l+ z! z0 Y4 m4 [' d! x
[pppoe-client-Dialer1]ip address ppp-negotiate  #ip地址采用ppp协商+ }2 N0 t# U6 {) A8 R/ g
[pppoe-client-Dialer1]dialer user zhprny        #此用户不用于认证，是标识作用以及和dialer绑定
9 ^) p+ T" J& K! B. k[pppoe-client-Dialer1]dialer bundle 1           #设备通过Dialer bundle将物理接口与拨号接口关联起来。
2 G5 P" S; [* `9 M9 ~! B[pppoe-client-Dialer1]dialer-group 1             #放到一个拨号访问组1中. ]' {- ]+ h/ ~! Q# i- P1 V& S
[pppoe-client-Dialer1]ppp chap user pokes        #指定dialer1接口的编号，拨号账号, n; C. q( }: j1 Q2 y
[pppoe-client-Dialer1]ppp chap password 123456   #拨号的密码) T- \- n' @1 A: d

$ u, k) A2 Q9 i2 g8 w, Z8 W+ w) K( j
[pppoe-client-Dialer1]dis th
* P: z, ~) T/ S" j( o5 }( v[V200R003C00]" k5 J( g3 ]; V/ o5 G& N# c1 k6 C- J
#5 _9 O! D  w1 m+ A* G2 R1 h. p5 T, `
interface Dialer1  M# B9 D( b8 z& k' G0 ?
link-protocol ppp
9 G3 u  z0 ]' y; a; h ppp chap user pokes2 y% j/ b- I$ U
ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$
4 }" Y$ i+ \- q3 F4 v ip address ppp-negotiate
6 Z! l; @/ q% u# ~ dialer user zhprny
( x9 q; ^3 m: e. A9 Q8 J! n0 e+ Q dialer bundle 1
: G, R8 I* L& Z, b- F dialer-group 1
6 B0 A) B5 z+ {& \' G& f! P+ z6 V1 A, t& K- p
[pppoe-client-GigabitEthernet0/0/0]% b' i8 E9 y* e7 H8 R8 u
Jul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[0]:The line pr
! i- n: `  }) l; s; J2 jotocol PPP on the interface Dialer1:0 has entered the UP state.  #PPP已进入启动状态
/ S. ]' `6 u- r/ B& _' _3 L* f% P[pppoe-client-GigabitEthernet0/0/0]
( o8 S5 s/ U5 {  k2 _$ RJul 15 2021 19:07:54-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[1]:The line pr* H) M' R! C/ |. F3 h
otocol PPP on the interface Dialer1:0 has entered the DOWN state. #PPP已进入关闭状态8 D4 X9 a- y) b4 ]# B# t+ r( T
- U& y" T- F# l  e
#不停的循环。。。。& |6 V; \% M. q, r. I; w

1 {) s% P8 y! j
' e' n  B) |8 f; b. O. e+ M+ u9 @#原因是没有认证成功，因为我们在PPPOE-server上面还没有创建认证用户和密码+ w  v# {. t- ^, R, z0 b/ r

' L- L* K: N3 e* `1 g三、pppoe服务器上新建认证用户
2 C+ W% p( K" ?& c我们到服务器上直接新建认证用户：0 y0 B) w5 m/ e# F: n: h  L- v

% X! a, W: J1 o5 M; c$ p  D5 F0 D  \[pppoe-server]aaa
# l6 K# Q, d& ^4 u: K[pppoe-server-aaa]local-user pokes password cipher 123456# j) Z0 h! n# J: A$ [; M$ a& h
Info: Add a new user.' k5 X1 \5 d, c( m; ]  v- T/ e
[pppoe-server-aaa]local-user pokes service-type ppp    #类型为ppp5 F) q+ a3 O4 s' A! L

) ]. R- K3 N7 F# O% I$ N" X$ r. t/ U3 G& `! [1 ~! J2 ?
四、客户端验证结果
0 B8 g# z" a: v1、认证成功信息
2 o2 u, e; i6 \  @9 E# x3 O然后客户端就会出现认证成功的提示：
3 A( a9 |2 n0 F2 S# I, w6 \) l/ _5 S" j4 ], K
[pppoe-client-GigabitEthernet0/0/0]4 a* O3 a) K6 M  p
Jul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[10]:The line p
1 G' E6 p; m4 d0 M: Mrotocol PPP on the interface Dialer1:0 has entered the UP state.
5 n" g& [0 R3 K, L+ L. y[pppoe-client-GigabitEthernet0/0/0]
/ Z8 g5 }- G6 _4 sJul 15 2021 19:09:23-08:00 pppoe-client %%01IFNET/4/LINK_STATE(l)[11]:The line p
% `3 |, d; [1 h. ^+ G- Nrotocol PPP IPCP on the interface Dialer1:0 has entered the UP state.
5 O% `! ~6 F- h% Z8 G4 H2 a  ?[pppoe-client-GigabitEthernet0/0/0]q% T% A, k; P: N9 Z0 ]
[pppoe-client]dis ip in b+ {, K5 {5 f  ^- e6 Q0 {5 p
*down: administratively down
4 x! g& o" [- D5 `^down: standby
; f8 l5 G! o8 C(l): loopback4 G4 I8 n$ ?$ _2 E4 @8 _2 j2 V7 e7 b
(s): spoofing( P, i, e/ Z* d- F, l; L
The number of interface that is UP in Physical is 4% B. X, J1 F* v% E9 M2 M1 L9 L( V3 Z
The number of interface that is DOWN in Physical is 0
! b9 Z& }+ a4 y6 lThe number of interface that is UP in Protocol is 3
" z9 O0 C, V8 EThe number of interface that is DOWN in Protocol is 1" ^5 X( M2 D* p, t: J: f

! D4 H7 n) M* k9 K# r4 rInterface                         IP Address/Mask      Physical   Protocol  
. S& f! r, @$ `Dialer1                           10.1.12.254/32       up         up(s)     #拿到了PPPOE服务器上的地址- v- @/ W% H5 ?. g; H
GigabitEthernet0/0/0              unassigned           up         down      - E/ h# }$ E4 N7 T) h0 Z
GigabitEthernet0/0/1              192.168.1.254/24     up         up        " N1 i" i7 ^' p
NULL0                             unassigned           up         up(s) 9 X. i8 ^+ P" F! x1 C
$ x6 j& ~) \# S8 t

# B5 m8 q- c0 L8 f; V0 V2、pppoe-server 信息
! z8 k. V- O3 Y4 J# S) f; I<pppoe-server>dis interface Virtual-Template 1
. f# M2 `6 j8 F6 i* e  K1 U: j% A" XVirtual-Template1 current state : UP
; S( e8 B) c9 d$ @2 Z1 aLine protocol current state : UP
* Z) O2 F5 r" A( W* CLast line protocol up time : 2021-07-15 19:09:22 UTC-08:000 N% U  r% U9 N/ v8 x
Description:HUAWEI, AR Series, Virtual-Template1 Interface
4 r" {2 ?! d! `/ h! TRoute Port,The Maximum Transmit Unit is 1492, Hold timer is 10(sec)+ ]. N( c; p5 e* J% [! `) W
Internet Address is 10.1.12.2/24  }% r, R% W2 L) p
Link layer protocol is PPP
& s+ a+ c3 m- i! a; f% K7 JLCP initial
9 v+ d' ~. c% g# E! V/ qPhysical is None
* z; c# H7 z: u; d7 \Current system time: 2021-07-15 20:27:28-08:00
9 U% p3 Q  j% n    Last 300 seconds input rate 0 bits/sec, 0 packets/sec
" [* C4 a6 Z8 `/ \% e- o# ^+ o+ P$ c    Last 300 seconds output rate 0 bits/sec, 0 packets/sec  R7 I: V% o0 _8 X$ x  f! n
    Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec& n  z4 ^5 y0 E$ W
    Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec
" Q: T( _4 x/ X6 Z( i- i  s" v    Input: 0 bytes
% H6 _0 B' F5 d+ L" {& a; r+ ~2 u  d    Output:0 bytes' K( p% V3 `( T7 I3 a! s
    Input bandwidth utilization  :    0%
2 E- {/ I6 a; m* `    Output bandwidth utilization :    0%
% `3 T# l* D9 Y$ s: a, g
: S. h& m1 [! j/ A4 e" j! T<pppoe-server>
2 J( o& J$ w  z) N" w! U
9 ~9 G5 v8 [1 w+ P9 X9 l$ j; J
$ H( V% V, `' T  |+ U  L3、pppoe-client信息0 f( u/ J: j) _. M: e
<pppoe-client>dis interface Dialer 1
" V. h# Y% f+ @3 `7 CDialer1 current state : UP
  M" [3 ~# `) k9 G$ Y' mLine protocol current state : UP (spoofing)
! }0 ]" r" e5 o1 [$ M4 \. S! ^Description:HUAWEI, AR Series, Dialer1 Interface" Y3 r! M+ k. {  V, _2 I; b5 H
Route Port,The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
* c2 O; c+ e1 K/ P: @/ I; JInternet Address is negotiated, 10.1.12.254/32( v8 X9 W2 e% u6 [  ^' h
Link layer protocol is PPP
/ T" _: T) @2 b8 P2 u- aLCP initial
9 T+ O& I' N6 |# m6 uPhysical is Dialer
( L, M- d. Y" A/ H+ G3 ^  [2 O! O) oCurrent system time: 2021-07-15 20:23:56-08:00
& v5 p7 r' u9 Y2 ?9 E% m    Last 300 seconds input rate 0 bits/sec, 0 packets/sec
+ f/ A; ]4 s4 |, y2 p    Last 300 seconds output rate 0 bits/sec, 0 packets/sec
) y: o5 n9 }* q. A    Realtime 0 seconds input rate 0 bits/sec, 0 packets/sec/ w( v+ V+ \  }& j
    Realtime 0 seconds output rate 0 bits/sec, 0 packets/sec! [& }: v* v7 y* J: e0 h
    Input: 0 bytes& F# B( k# ^: x3 s
    Output:0 bytes
; f" ~" N  c! }% |! c% }7 q/ H2 J# E    Input bandwidth utilization  :    0%
: p3 K# D$ Y) q% }+ A' }    Output bandwidth utilization :    0%
7 d8 A& e' f/ \. z' R5 nBound to Dialer1:0:
9 v9 r# b3 x* x, l+ b9 [Dialer1:0 current state : UP ,& m- z9 ^: O, w6 \  l* M; T
Line protocol current state : UP) j/ c/ B: |4 w9 W3 V8 Z: _& }
) V( {0 P4 @, f/ b$ E
Link layer protocol is PPP, G" O7 L+ Y7 m
LCP opened, IPCP opened
2 y; Q6 z) c1 o" F* x9 h- Y( yPackets statistics:
! @9 B& }% J* \' N  Input packets:0,  0 bytes
, ?2 Z2 l* @3 x6 ~( [" S7 D' k  Output packets:4, 336 bytes. @# ?) e7 O0 V7 ^& r2 |
  FCS error packets:0
9 N, V/ v4 V% K$ z9 d  Address error packets:01 d' V7 E0 h* ^& i
  Control field control error packets:07 X( l$ k5 v' A

# F4 u4 ?. v7 e2 n
, E- D$ T% B/ o+ M3 P<pppoe-client>+ S9 t: g6 E. Y6 z" O8 w

! d# S; Z. R0 L* T五、NAT的配置
9 M! _, [% f& a5 {/ R用PC2直接ping 10.1.12.254是可以通的。10.1.12.254是AR1的g0/0/0口获取到的地址，其实就是我们常说的WAN口地址。
: }, f% ~7 p8 B, `2 C0 L+ K' X5 ^8 ]  U0 c; t& ~
PC2>ping 10.1.12.254
  S3 f3 F6 C2 Y' C7 U) b. w) Y7 z
Ping 10.1.12.254: 32 data bytes, Press Ctrl_C to break
: d; ~: S. z. M. h0 H: c. m* aFrom 10.1.12.254: bytes=32 seq=1 ttl=255 time=63 ms
. x* G  Y0 j6 f7 g& q* lFrom 10.1.12.254: bytes=32 seq=2 ttl=255 time=31 ms
/ d9 e' ]4 N6 q1 @3 q' c( D4 i2 N$ GFrom 10.1.12.254: bytes=32 seq=3 ttl=255 time=47 ms# |# k- h; N3 u  v
From 10.1.12.254: bytes=32 seq=4 ttl=255 time=31 ms2 S* u% A" X& X4 K  l. n* A
From 10.1.12.254: bytes=32 seq=5 ttl=255 time=47 ms# J: X+ q  h: v/ K$ p& z, S
1 g+ d0 i- O! p" {
--- 10.1.12.254 ping statistics ---) G" a* B: M1 Q8 h7 B9 R
  5 packet(s) transmitted
; a% F. W3 y9 }; y6 K' b& h9 _2 [6 z  5 packet(s) received
  B. e4 H) g- a4 V$ B5 {  0.00% packet loss3 x: B6 n9 |# A& _" q8 r! j
  round-trip min/avg/max = 31/43/63 ms8 u! t7 n& q: f7 e4 U" U
, d  m/ B2 p2 g$ L
PC2>ping 10.1.12.2
$ M  c/ p7 `" i) _# e7 H3 J7 W5 K$ s8 {8 R2 ]" F$ p9 `
Ping 10.1.12.2: 32 data bytes, Press Ctrl_C to break- a+ n! E) x8 [& U, Z
Request timeout!) a" t0 h8 e" \/ m. ~* J& x& m
Request timeout!0 P9 w) A; n% z% M. L# A0 C. Y
Request timeout!# Y2 s2 _: H! h5 A
Request timeout!
8 M3 l6 `6 a% U, c  URequest timeout!
" t4 c" x" ]8 C7 n. H* E) X0 h6 U) o; f7 ]  \
--- 10.1.12.2 ping statistics ---4 K, X7 X" W4 N4 }$ w, P& \! l. I
  5 packet(s) transmitted
3 |$ i* @# Z! W$ u3 R9 q( {& w# P  0 packet(s) received
# R% b# R: m# v# i: t; g7 C$ T; h  100.00% packet loss; ^9 ^9 n4 Y* _$ M
#但是无法ping通10.1.12.2. x& ]4 t- c; H* c, D- I
7 S1 [3 d5 ]" t% \( Q1 H/ Q9 x

3 M7 [: w" K- k0 c无法ping通10.1.12.2的原因是：我们没有做NAT .接下来我们在pppoe-client上面做NAT
! |3 G. [1 H' ^# [7 y* B# u' k+ S
1、这里配置规则2000  h  R- j/ d2 o
[pppoe-client]acl number 2000        ( s& _! d3 |: m% M% Z
[pppoe-client-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
, [; e3 Q4 ~5 o( L, J& G4 t, u+ p
2、将规则2000绑定到接口
: G8 I, b( R' c如下接口信息，需要注意的是pppoe的接口是Dialer1，并不是GigabitEthernet0/0/0口。我们必须将规则绑定在Dialer1口，最容易犯错的就是直接绑定在g0/0/0口。
6 y9 M# |" M, h* T" h# o0 M8 z5 m/ [. ~" b% `6 s. K
[pppoe-client]dis ip int b
9 J& I8 J4 `' j7 t) s# ?$ w*down: administratively down
8 p' R& A0 i, v$ w: |^down: standby: u1 z1 ~' M4 d
(l): loopback; D" Q0 l/ E! L( j# {0 l& e0 y
(s): spoofing# n/ ~) [: J3 t5 s8 g- b
The number of interface that is UP in Physical is 4! V$ c5 T6 G9 a9 L) g! A+ E  [5 l) Y0 E
The number of interface that is DOWN in Physical is 0
# n/ t; h; Q  f: _The number of interface that is UP in Protocol is 3
' o% S( L+ s+ F9 Z% E# wThe number of interface that is DOWN in Protocol is 19 a" z! x2 s9 l! s6 Z% _: Y

4 }4 Y- H0 a& I, }1 N! JInterface                         IP Address/Mask      Physical   Protocol  
' _6 B0 T8 H7 h6 Y. l% e" h  aDialer1                           10.1.12.254/32       up         up(s)     
- g* H" ^8 C, t+ E4 P0 k5 `3 UGigabitEthernet0/0/0              unassigned           up         down      
. R1 {1 R: ]1 w9 p# QGigabitEthernet0/0/1              192.168.1.254/24     up         up        4 k* ~: l- s7 H7 o- {
NULL0                             unassigned           up         up(s)     - y+ g8 H  u0 p) @& S" u* Z
[pppoe-client]  E0 G. s( Z0 J
% W% _6 m) u: o- ]
[pppoe-client]int Dialer 1       
$ ~1 {: Q5 j5 \# J5 a( E' n: y/ F[pppoe-client-Dialer1]nat outbound 2000
6 d" N8 q( g2 t8 h7 U. k[pppoe-client-Dialer1]dis th
' n, C6 l7 L3 R/ O* c) ?2 c9 D[V200R003C00]( ^  w7 j7 D0 v( j0 k; \  R
#
$ A+ ^$ N2 {9 g% e! E. einterface Dialer1# }, M6 N- B5 l/ ^1 F
link-protocol ppp
! P9 p( p. D+ w' T ppp chap user pokes- M5 ]: H8 S  H7 T" g
ppp chap password cipher %$%$I/!'WCyd<7p[~8;,>51L,$sl%$%$
. \3 S' f) }  u/ H4 p% \ ip address ppp-negotiate1 J( S' e- d: F+ r  U" O6 V
dialer user zhprny
2 ]6 @3 J4 P% t& ^5 {& l dialer bundle 1
8 C$ D, \$ d( b8 D dialer-group 1
0 h- W. q& v' y& \) c# o nat outbound 2000
2 e, T6 K! I+ Z: E' d#
9 H0 w9 [& H+ B- t% O, h5 i, nreturn7 t, K, U5 Q/ E# {; K# [# @. c
[pppoe-client-Dialer1]) a, k$ a9 b# P
$ W5 C  e1 p9 d( C3 [
接下来我们就可以ping通10.1.12.2 了。
/ l: |: k2 k9 }  W+ ~
( g% W7 ]. D0 f+ ^8 O% QPC2>ping 10.1.12.23 O6 c  H9 @( S# i" ~

- \8 m) {6 E  x. B1 ^Ping 10.1.12.2: 32 data bytes, Press Ctrl_C to break
1 S% e! _7 _2 X5 w6 x: pFrom 10.1.12.2: bytes=32 seq=1 ttl=254 time=31 ms
3 U7 f, X- I3 P: U$ IFrom 10.1.12.2: bytes=32 seq=2 ttl=254 time=32 ms
/ `( h/ ?6 P, S1 C% \From 10.1.12.2: bytes=32 seq=3 ttl=254 time=46 ms8 u# }0 s2 ~: G9 Q4 v
From 10.1.12.2: bytes=32 seq=4 ttl=254 time=32 ms' M7 N' `! T5 I0 Z+ M
From 10.1.12.2: bytes=32 seq=5 ttl=254 time=31 ms
% |, b: ~2 L3 Z8 S) M" s
, w- }5 B% p+ _--- 10.1.12.2 ping statistics ---
. [5 S# N  K+ u; L  5 packet(s) transmitted
0 Z3 M$ X% L9 L. F0 M' R  5 packet(s) received
7 D9 O" B$ ?2 z# ]  0.00% packet loss
3 I8 T  Y$ Y, r: d8 _8 w+ D5 l  round-trip min/avg/max = 31/34/46 ms
# m$ x4 {1 @2 V& ?* r. d
# H1 [# _! n8 P0 R# M' J  t
) F* d5 ^6 o) y
回复

使用道具 举报

admin
 楼主| 发表于 2022-3-17 09:27:15 | 显示全部楼层
华为路由器：PPPoE实验
/ G) K5 a9 K- I5 p0 ~PPPoE协议是基于C/S架构的一种网络拨号协议。分为客户端和服务器两部分，它的建立过程分为discovery和session两个阶段。本次实验的目标：掌握PPPoE拨号技术；
2 F- n5 @! M# m1 m8 K实验拓扑：
) U9 @* @" J9 |' W5 \# m/ L1 I* ^1 D. T* L" w" j
本实验结合虚拟机进行：) K9 c/ @8 ^( K8 n9 B
首先，必须在虚拟机的网络配置中加以设置，我新建了VM6，去掉了DHCP的钩。这个时候会在你的网卡界面多出来一个虚拟的VM6的网卡。但是当你打开ensp时，会出现检测不到VM6的情况，这个时候你重启一下电脑，就可以了。
, i  S/ s. @# g4 t3 b# @! W! U  J) ]0 J' p1 e4 }
Cloud1的设置如下图：
2 q  }$ T  f$ P8 ?1 Q' D
, K* r/ l( G/ k1、基本的IP配置& T4 G8 x# A1 r. c- P( M; b) X5 B( x! |
[pppoe-server]dis ip in b
1 m0 g# W) h$ H- Z: s*down: administratively down# `" ?+ u7 H* `  H5 m  Z1 f* \' S( U* U6 M
^down: standby) z+ _2 D/ Q; H% m. Q% k
(l): loopback
2 V  s! [9 C- d+ d! `7 @(s): spoofing' t4 D+ n- Q, v+ O- c7 S1 y  S
The number of interface that is UP in Physical is 4
4 ~4 u( e) |5 }% ^: T% v) O( d; QThe number of interface that is DOWN in Physical is 17 r+ r' b$ l# U3 \- }
The number of interface that is UP in Protocol is 2
; [8 X& a+ }$ G9 F$ x& B9 RThe number of interface that is DOWN in Protocol is 3
3 c; \7 n3 O, E( Y/ y1 ZInterface                         IP Address/Mask      Physical   Protocol  
2 N/ F. I; E3 m# e% @) e% E9 v8 PGigabitEthernet0/0/0              unassigned           up         down      # v# p) T- l9 R6 i( _
GigabitEthernet0/0/1              202.104.10.1/24      up         up        0 l" n) A8 O* j$ k
GigabitEthernet0/0/2              unassigned           down       down      " F9 R- B' M* W6 _! ?" }- t
NULL0                             unassigned           up         up(s)     
  b' N4 E3 ]: d. z5 B  e! lVirtual-Template1                 192.168.10.1/24      up         down      0 l! u8 H+ T1 i3 Q& A
[pppoe-server]$ V) e( i' E0 E

: O$ |/ ?, Y$ B' P% l% V1 ?0 D2、配置虚拟模板
. F" q1 X, l- b3 |0 G配置虚拟模板用来承载多种同层协议( O9 y" N. C8 h; V& v
[pppoe-server]int Virtual-Template 1                            #创建虚拟模板，编号为1' W5 z. F) C- ~6 s8 _& a5 n
[pppoe-server-Virtual-Template1]ppp authentication-mode chap    #PPP认证为chap2 h: N+ M0 {, n9 |
[pppoe-server-Virtual-Template1]remote address pool pokes       #指定使用地址池名为pokes; F% I& u% ^1 B
[pppoe-server-Virtual-Template1]ip add 192.168.10.1 24          #配置作为用户上网的网关IP# H: b* D1 ?( w! F8 P- ]
[pppoe-server-Virtual-Template1]q& ~7 T: j3 k( y( a; B! O
- G* e4 e- e' k% E& \( u
3、创建地址池
/ t% E$ ]: r) k1 _4 {2 l[pppoe-server]ip pool pokes                                            #创建地址池pokes8 e4 G1 [/ z/ A) J  r' Y& `
Info: It's successful to create an IP address pool.1 r% Z) S& t' P3 Z4 r9 @
[pppoe-server-ip-pool-pokes]gateway-list 192.168.10.1                  #配置网关地址
$ f, r" l! S/ n- C# |+ S6 e! [( l[pppoe-server-ip-pool-pokes]network 192.168.10.0 mask 255.255.255.0    #配置给用户分配的ip网段) J$ @. U( e  ^* O" T% b
[pppoe-server-ip-pool-pokes]/ `4 Q) k" K. c6 G! |  g5 F4 m5 c
[pppoe-server-ip-pool-pokes]excluded-ip-address 192.168.10.200 192.168.10.254    #排除地址" f; F$ A. a) a% {: q8 a- f! U
[pppoe-server-ip-pool-pokes]lease day 8 hour 0 minute 0     #租约配置8小时7 X- q% i8 [) a7 t8 e7 _" @
[pppoe-server-ip-pool-pokes]dns-list 114.114.114.114        #DNS
$ R# k; e0 Y/ U5 q[pppoe-server-ip-pool-pokes]dis th
/ v. H! q8 w8 M[V200R003C00]
  U' |: S/ ^# D: E#
4 r# ]! ?' ^  ~ip pool pokes
4 y4 U2 k  g6 c" ^0 s gateway-list 192.168.10.1 " p. y8 p7 k3 t, ^9 B9 \& M
network 192.168.10.0 mask 255.255.255.0   y9 U& X. A! _
excluded-ip-address 192.168.10.200 192.168.10.254 9 O2 u  O& a! i0 Q" C  r
lease day 8 hour 0 minute 0
# z; s: N$ q! D8 o9 k dns-list 114.114.114.114" E) F9 ?9 @) u8 \
#
% A1 S( C& V, l) Greturn
# _7 z! b3 E9 `6 ~2 j" w- H1 W[pppoe-server-ip-pool-pokes]$ u9 ~1 L. {/ |

" g7 m) O: i# q1 g/ {4、创建PPPoE用户3 ]  O% S' V8 U) Q) ~3 F
[pppoe-server]aaa
- q% [1 O1 {- ^. X7 a6 Y& x, N[pppoe-server-aaa]local-user user1 password cipher 123456/ a; s2 h4 t  R) c7 T
Info: Add a new user.
1 \& }) E- t( ~- [[pppoe-server-aaa]local-user user1 service-type ppp
# Y  m$ a. c) C[pppoe-server-aaa]dis th/ }8 f3 ~5 }" W* ~
[V200R003C00]; L+ _) \: g# X( t9 Y
#6 m3 w: v( j2 m1 K- K
aaa
8 r) Q$ n+ H3 J authentication-scheme default& d$ T, q& |9 P3 B( \0 {( [
authorization-scheme default
- K0 N; B! Z9 j; |  e* O. J6 G accounting-scheme default7 D5 `/ Q# d+ i3 e; o7 R/ |) [
domain default 4 d' y% ^/ N' ]
domain default_admin + \5 s1 w& ?1 j) _( p, _4 ~
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$$ u" K9 [$ o5 F% N2 D& \/ G
local-user admin service-type http
+ }+ h+ V& A3 g4 T9 \* S local-user user1 password cipher %$%$aLq+.xS\rBJXJ}V|dJw'eZry%$%$- k; o3 a, O# u. U# V' L
local-user user1 service-type ppp: }, @% ~5 |& m
#
7 z3 G6 }. ^7 p1 u; I3 N& x! Nreturn
, _* a5 k, T! K! {( b: [[pppoe-server-aaa]. H- w9 x) G* _( B

7 {2 C" @  v3 C( [0 K/ V5、绑定接口" ?* o2 [  U! z, o2 B0 A7 K' w, e' b
将虚拟模板接口与物理接口绑定提供服务
2 P% R: X) k1 O8 S9 o/ Q" F[pppoe-server]int g0/0/0
1 D# |) ^$ R7 P% C7 m* G[pppoe-server-GigabitEthernet0/0/0]pppoe-server bind virtual-template 1  #将虚拟模板1绑定在物理接口上
& Y4 z6 m; r& r+ ?; W, w4 l! Y  e& Y6 o
至此，服务器端的配置基本完成，如果想对PPPoE的访问流量进行控制，还可以配置ACL。
7 V2 u/ |, A+ S2 h
7 w; c7 H) L% Z2 X: [" {- T3 j4 r1 d2 i3 m
虽然已经拨号成功，也能ping通网关192.168.10.1，但是因为没有nat所以无法ping通202.104.10.150的服务器
$ n, C8 e& q6 T6、NAT配置
; s, q1 b+ O) I7 {8 |$ L/ T& e[pppoe-server]acl number 2000' m  c5 W- g2 s& e( ^$ C+ [, ?
[pppoe-server-acl-basic-2000]rule permit source 192.168.10.0 0.0.0.255/ g' D+ x$ P$ |0 e( A% {' M$ u
[pppoe-server-acl-basic-2000]int g0/0/1
: K* I' Q- ^6 S5 Y: L  _[pppoe-server-GigabitEthernet0/0/1]nat outbound 2000
7 h1 y& H7 A1 C" p2 Z[pppoe-server-GigabitEthernet0/0/1]q- Z$ W4 v, i$ a' w# B' N+ p$ B

" u4 F" ~0 a7 V& j8 w4 J说明：这里ACL的含义就是允许哪些网段可以上网，这里为192.168.10.0/24这个网段，然后调用在拨号接口下。
- w0 G" |1 {& U) J. u现在就可以ping通服务器了
9 |0 h4 K8 U4 l6 i# N* ^
5 x4 g9 I5 o' r$ S1 g% I( X
回复 支持 反对

使用道具 举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 开始注册

本版积分规则

关闭

站长推荐上一条 /4 下一条

北京云银创陇科技有限公司以云计算运维，代码开发

QQ|返回首页|Archiver|小黑屋|易陆发现技术论坛 点击这里给我发消息

GMT+8, 2026-4-9 09:17 , Processed in 0.046951 second(s), 22 queries .

Powered by Discuz! X3.4 Licensed

© 2012-2025 Discuz! Team.

快速回复 返回顶部 返回列表