思科路由器配置PPPoE NAT DHCP.docx

PPPoE + NATADSL是一种性能价格比较好的Internet接入方式，适用于只需访问Internet，不需要对外提供服务(如 WWW, Mail等)的场合。ADSL最常见的应用方式是用一台安装了PPPoE客户端软件的PC来拔号作代理服务器，让多台主机同时访问Internet。有的时候该PC的任务也可以用路由器来完成，最低档的2514路由器就能胜任，只要路由器有两个以太端网口即可。当然，还需要有适当的IOS软件，同时支持PPPoE Client和NAT两个特性、需求最低的IOS是“REMOTE ACCESS SERVER”特性集。以2621为例,运行该IOS只需32M内存、8M Flash，文件名为:c2600-c-mz.122-4.T1.bin ，这就是下面配置的运行环境。 实际运行的配置： version 12.2service timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname 2621!enable secret 5 $1$LJV3$jqSDKFMSZiQBAjlnN/!ip subnet-zeroip name-server 202.xxx.xxx.xxx!vpdn enable!vpdn-group PPPoErequest-dialinprotocol pppoe!interface FastEthernet0/0ip address （端口IP内部，本地计算机网关要指向这个IP）ip nat insideduplex autospeed auto!interface FastEthernet0/1no ip addressspeed 10half-duplexpppoe enablepppoe-client dial-pool-number 1!interface Dialer1mtu 1492ip address negotiatedip nat outsideencapsulation pppno ip mroute-cachedialer pool 1dialer-group 1no cdp enableppp authentication pap callinppp pap sent-username abc123163 password 7 *!ip nat inside source list 1 interface Dialer1 overloadip classlessip route Dialer1 permanentno ip http serverip pim bidir-enable!access-list 1 permit anydialer-list 1 protocol ip permit!line con 0line aux 0line vty 0 4password *login!end 在下行速度为2M的ADSL线路上，F0/0上接只一台PC。值得注意的是有的地区需要用chap认证方式，这时相应的指令为： ppp authentication chap callinppp chap hostname abc123163ppp chap password * 相关调试命令： no vpdn logging 关闭连接中提示debug vpdn pppoe-events 检查PPPoE连接建立过程show vpdn 检查建立的PPPoE连接debug ppp negotiation 检查PPP参数协商情况debug ppp authentication 检查PPP用户认证情况 vpdn enable（开启vpdn）vpdn-group tylrequest-dialinprotocol pppoe（启用pppoe协议）interface Ethernet0no ip addresspppoe enablepppoe-client dial-pool-number 1（将物理端口和虚拟拨号端口绑定）interface Ethernet1 内网接口ip address 54 ip nat insideinterface Dialer1ip address negotiatedip mtu 1492 (将原来的mtu1500变为1492，因pppoe 的包头是8个字节）ip nat outsideencapsulation pppdialer pool 1（通过拨号池，将物理端口和虚拟拨号端口绑定）ppp pap sent-username *163.gd password 0 *（ppp pap的单向验证）ip nat inside source list 1 interface Dialer1 overload（NAT转换）ip route Dialer1（设置静态路由）access-list 1 permit anyCisco PPPoE配置实例（3640路由器接ADSL Modem）1、ADSL PPPoE Client 配置 第一种方法：用PC上创建PPPOE客户端。 第二种方法：用CISCO路由器的以太口进行PPPOE拨号：非固定IP配置模板：enconfit tvpdn enablevpdn-group pppoerequest-dialinprotocol pppoeexitexitinterface ethernet 0/0no ip addresspppoe enablepppoe-client dial-pool-number 1no shutdownexitinterface Dialer1ip address negotiatedip mtu 1492encapsulation pppppp pap sent-username walkbird password walkbirddialer pool 1ip router dialer12、用cisco路由器做PPPoE Server端配置enconf thostname Adsl_walkbirdusername walkbird password walkbirdvpdn enablevpdn-group pppoeaccept-dialinprotocol pppoevirtual-template 1exitexitinterface ethernet 0/0pppoe enableno shutdowninterface virtual-template 1mtu 1492 /PPP头部最大传输单元ip unnumbered loopback /借用地址peer default ip address pool pppoe_ip_poolencapsulation pppppp authentication papexitip local pool pppoe_ip_pool 0 00interface lookback0ip address no shutdownexit三、实验测试sh ip routesh ip int briefdebug pppoe eventsh ip int dialer 1Cisco1841路由器连接ADSL modem的PPPoE配置案例一vpdn enableno vpdn logging!interface Ethernet0/0ip address ip nat insideno ip mroute-cache!interface Ethernet0/1no ip addresspppoe enablepppoe-client dial-pool-number 1!interface Dialer1ip address negotiatedip nat outsideip mtu 1492encapsulation pppno ip mroute-cachedialer pool 1dialer-group 1ppp authentication papppp pap sent-username dg48907653163.gd password xxxxxxxx!ip classlessno ip http server!dialer-list 1 protocol ip permitip nat inside source list 1 interface Dialer1 overloadip route dialer1access-list 1 permit 55!line con 0exec-timeout 0 0transport input noneline vty 0 4login!end案例二经典思科1841ADSL的成功设置+DHCP的问题！急！路由器下面的客户端全是XP。都是设为自动获取IP 地址。现像是在客户端上IPCONFIG 地址是0。0。0。0没有获得指定的IP地址，系统也没有获得169网段的地址。cisco1841#sh runBuilding configuration.Current configuration : 2970 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryptionservice dhcp!hostname cisco1841!boot-start-markerboot-end-marker!logging buffered 51200 warnings!no aaa new-model!resource policy!mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180ip subnet-zeroip cef!ip dhcp database 123no ip dhcp use vrf connectedip dhcp excluded-address ip dhcp ping packets 0!ip dhcp pool 123network default-router dns-server 0 51!no ip domain lookupip domain name ip dhcp-server vpdn enablevpdn ip udp ignore checksum!vpdn-group pppoerequest-dialinprotocol pppoe!username cisco privilege 15 secret 5 $1$ZKUk$YoVcdG31aDaIAn/mdK9qL0!interface FastEthernet0/0description $ETH-LAN$ETH-SW-LAUNCH$INTF-INFO-FE 0$ip address ip access-group 100 inip nat insideduplex autospeed auto!interface FastEthernet0/1no ip addressduplex autospeed autopppoe enablepppoe-client dial-pool-number 1!interface Dialer1ip address negotiatedip access-group 100 inip mtu 1492ip nat outsideencapsulation pppdialer pool 1dialer vpdndialer-group 1no cdp enableppp pap sent-username 1234567 password 0 1234567!ip classlessip route Dialer1!no ip http serverip http authentication localip http timeout-policy idle 5 life 86400 requests 10000ip nat inside source list 1 interface Dialer1 overload!access-list 1 permit anyaccess-list 100 deny access-list 100 deny access-list 100 permit ip any anydialer-list 1 protocol ip permit!control-plane!banner login C-Cisco Router and Security Device Manager (SDM) is installed on thisdevice.This feature requires the one-time use of the username ciscowith the password cisco.Please change these publicly known initial credentials using SDM or theIOS CLI.Here are the Cisco IOS commands.username privilege 15 secret 0 no username ciscoReplace and with the username and password youwant to use.For more information about SDM please follow the instructions in theQUICK STARTGUIDE for your router or go to /go/sdm-C!line con 0timeout login response 200login localline aux 0line vty 0 4timeout login response 200privilege level 15password gbicc_ciscologintransport input telnetline vty 5 15privilege level 15password gbic_ciscologintransport input telnet案例三假设E0接内网，E1接ADSL上外网第一步:配置vpdnvpdn enable(启用路由器的虚拟专用拨号网络-vpnd)vpdn-group office(建立一个vpdn组,)request-dialin(初始化一个vpnd tunnel,建立一个请求拨入的vpdn子组,)protocol pppoe(vpdn子组使用pppoe建立会话隧道)第二步: 配置路由器连接adsl modem的接口interface Ethernet1no ip addresspppoe ena