ISCW10S02L04DSL配置.ppt

Teleworker Connectivity,配置 CPE 作为 PPPoE或PPPoA 客户端,配置路由器作为PPPoE 客户端,配置任务: 配置以太网接口上的PPPoE拨号,配置以太网接口 配置拨号接口 配置 PAT 配置 DHCP 服务器 配置一条静态默认路由,示例:配置以太网接口上的PPPoE拨号,示例:配置以太网接口上的PPPoE拨号(Cont.),配置任务: 配置ATM接口 作为PPPoE 客户端,配置 ATM 接口 配置拨号接口 配置PAT 配置 DHCP 服务 配置静态默认路由,示例:配置ATM接口 作为PPPoE 客户端,示例:配置ATM接口 作为PPPoE 客户端(Cont.),配置 PPPoE 客户,PPPoE Client Configuration,Configures the Ethernet interface,interface ethernet number,router(config)#,pppoe enable,router(config-if)#,pppoe-client dial-pool-number number,router(config-if)#,Enables PPPoE on Ethernet interface,Binds a dialer profile to the Ethernet interface,示例: 配置 PPPoE Client,配置 PPPoE DSL 拨号接口,配置 PPPoE 拨号接口,Configures the dialer interface.,interface dialer number,router(config)#,encapsulation ppp,router(config-if)#,ip address negotiated,router(config-if)#,Specifies PPP encapsulation for the dialer interface.,Sets IP address to be negotiated with the remote peer using IPCP.,Configuring the PPPoE Dialer Interface (Cont.),Binds dialer interface to the dialer pool,dialer pool pool_number,router(config-if)#,ip mtu mtu_size,router(config-if)#,ppp authentication chap callin,router(config-if)#,Reduces the maximum Ethernet payload size because the PPPoE header requires 8 bytes,(Optional) Configures PPP authentication CHAP,示例: 配置PPPoE 拨号接口,配置 PAT,Port Address Translation,配置PAT,Specifies the addresses that may be translated,access-list ACL_num permit | deny protocol source_network source_wildcard destination_network destination_wildcard,router(config)#,ip nat inside source list ACL_num interface interface number overload,router(config)#,ip nat inside | outside,router(config-if)#,Enables dynamic translation of addresses using the assigned IP address of the interface,Specifies the interface as inside or outside related to PAT,示例: PAT 配置,配置 DHCP 扩展 DSL应用,配置 DHCP Server,Enables a DHCP pool for use by hosts and enters DHCP pool configuration mode.,ip dhcp pool pool_name,router(config)#,import all,router(dhcp-config)#,network network_address subnet_mask,router(dhcp-config)#,Imports DNS and WINS information from IPCP.,Specifies the network and subnet mask of the pool.,default-router address,router(dhcp-config)#,Specifies the default router for the pool to use.,示例: DHCP Server 配置,配置静态默认路由,Configuring a Static Default Route,The CPE can use a static default route to reach all remote destinations.,ip route interface number,router(config)#,Example: Static Default Route,检验 PPPoE 配置,检验 PPPoE配置,Displays PPPoE protocol messages about events that are part of normal session establishment or shutdown,debug pppoe events,router#,debug ppp authentication,router#,show pppoe session,router#,Displays authentication protocol messages, including CHAP and PAP packet exchanges,Displays basic information about currently active PPPoE sessions,Verifying a PPPoE Configuration (Cont.),Displays address bindings on the Cisco IOS DHCP server,show ip dhcp binding,router#,show ip nat translations,router#,ipconfig /all,C:Documents and SettingsUser,Displays active NAT translations,Displays the complete IP configuration on Windows NT, 2000, or XP system,CPE#show pppoe session Total PPPoE sessions 1 PPPoE Session Information UID SID RemMAC Intf Intf Session LocMAC VASt state 0 5989 0090.1a41.1a83 Et1 Vi2 N/A 000b.46e2.eb36 UP,Debug VPDN PPPoE Events,CPE#debug pppoe events 15:13:41.991: Sending PADI: Interface = Ethernet1 15:13:42.083: PPPoE 0: I PADO 15:13:44.091: PPPOE: weve got our pado and the pado timer went off 15:13:44.091: OUT PADR from PPPoE Session 15:13:44.187: PPPoE 5989: I PADS 15:13:44.187: IN PADS from PPPoE Session,Determine if the PPPoE connect phase is successful.,Get the status of the PPPoE session.,Debug PPP Authentication,Enable debugging for PPP authentication to verify authentication success.,CPE#debug ppp authentication CPE#configure terminal Enter configuration commands, one per line. End with CNTL/Z. CPE(config)#interface ATM 0/0 CPE(config-if)#no shutdown 00:19:05: %LINK-3-UPDOWN: Interface ATM 0/0, changed state to up 00:19:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0/0, changed state to up 00:19:29: %DIALER-6-BIND: Interface Vi2 bound to profile Di1 00:19:29: Vi2 PPP: Using dialer call direction 00:19:29: Vi2 PPP: Treating connection as a callout 00:19:29: Vi2 PPP: Authorization required 00:19:29: Vi2 PPP: No remote authentication for call-out 00:19:29: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up 00:19:31: Vi2 CHAP: I CHALLENGE id 1 len 24 from “ISP“ 00:19:31: Vi2 CHAP: Using hostname from interface CHAP 00:19:31: Vi2 CHAP: Using password from AAA 00:19:31: Vi2 CHAP: O RESPONSE id 1 len 25 from “CPE“ 00:19:32: Vi2 CHAP: I SUCCESS id 1 len 4 00:19:33: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up,Verify DHCP Clients,C:Documents and SettingsUseripconfig /all Windows 2000 IP Configuration Ethernet adapter LAB: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Mobile Connection Physical Address. . . . . . . . . : 00-11-25-AF-40-9B Dhcp Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IP Address. . . . . . . . . . . . : Subnet Mask . . . . . . . . . . . : Default Gateway . . . . . . . . . : DHCP Server . . . . . . . . . . . : DNS Servers . . . . . . . . . . . : Primary WINS Server . . . . . . . : Lease Obtained. . . . . . . . . . : 6. April 2006 16:36:31 Lease Expires . . . . . . . . . . : 7. April 2006 0:36:31,Verify how the IP address is assigned on the PC.,Verify DHCP Server,CPE#show ip dhcp binding IP address Client-ID/ Lease expiration Type Hardware address 0100.5056.4000.59 Jan 21 2006 12:50 AM Automatic 0100.5056.4000.60 Jan 21 2006 12:50 AM Automatic,Verify the existing DHCP bindings on the router (DHCP server).,Verify how IP addresses are translated on the router.,CPE#show ip nat translations Pro Inside global Inside local Outside local Outside global icmp 02:512 :512 00:512 00:512,检验PAT,PPPoE 案例配置,hostname CPE ! ip dhcp pool MyPool network default-router ! interface Ethernet0/1 no ip address pppoe enable pppoe-client dial-pool-number 1 ! interface Ethernet0/0 ip address ip nat inside ! interface Dialer0 ip address negotiated encapsulation ppp dialer pool 1 ip mtu 1492 ip nat outside ppp authentication chap callin ppp chap password mysecret ! ip nat inside source list 101 interface Dialer0 overload access-list 101 permit ip 55 any ! ip route Dialer0,配置 PPPoA DSL 连接,DSL 配置总结,The CPE device encapsulates the PPP session based on RFC 1483 for transport across the DSLAM. The virtual access interface associates each PPP connection with an ATM VC. The virtual access interface obtains its configuration from a virtual interface template when the VC is created. The PPP subsystem starts and the router attempts to send a PPP configure request to the remote peer. The virtual access interface remains associated with a VC as long as the VC is configured. Three types of PPP over ATM connections are supported: IETF-compliant MUX encapsulated PPPoA IETF-compliant LLC encapsulated PPPoA Cisco-proprietary PPPoA,PPPoE 与 PPPoA,interface Ethernet0/1 no ip address pppoe enable pppoe-client dial-pool-number 1 ! interface Dialer0 ip mtu 1492,interface ATM0/0 no ip address dsl operating-mode auto pvc 1/32 encapsulation aal5mux ppp dialer dialer pool-member 1,在 PPPoE 配置中，必须将以太口关联到拨号接口，并将以太口的MTU值从1500设为1492. 在 PPPoA 配置中，必须配置ATM接口的正确封装，并且关联接口到拨号接口.,PPPoE,PPPoA,配置 DSL ATM 接口,配置 DSL ATM 接口,Step 1: Configure modulation mode,interface atm number,router(config)#,dsl operating-mode auto,router(config-if)#,pvc vpi/vci,router(config-if)#,Permits the router to automatically determine the service provider DSL modulation; this is the default setting on the Cisco router.,Creates an ATM PVC for the router. Note: The PVC VPI/VCI must match the provider VPI/VCI.,Step 2: Create PVC,配置 DSL ATM 接口(Cont.),encapsulation aal5mux ppp dialer,router(config-atm-vc)#,Identifies the Layer 2 encapsulation,dialer pool-member number,router(config-atm-vc)#,Specifies a dialer pool member,Step 4: Associate the interface with the pool,Step 3: Define the encapsulation,PPPoA 配置案例,hostname CPE ! ip dhcp pool MyPool network default-router ! interface ATM0/0 no ip address dsl operating-mode auto pvc 8/35 encapsulation aal5mux ppp dialer dialer pool-member 1 ! interface Ethernet0/0 ip address ip nat inside ! interface Dialer0 ip address negotiated encapsulation ppp dialer pool 1 ip nat outside ppp authentication chap callin ppp chap password mysecret ! ip nat inside source list 101 interface Dialer0 overload access-list 101 permit ip 55 any ! ip route Dialer0,Summary,Configuring DSL requires global and interface configuration commands. Enable PPPoE on Ethernet interface with the pppoe enable command and bind the Ethernet interface to a dialer interface. Configure the dialer interface with