pppoe拨号之五juniper srx防火墙配置

JuniperSRXPPPOE拨号配封装GW-root#setinterfacesge-0/0/0.0encapsulationppp-over-如果运营商为CHAPGW-root#setinterfacespp0.0ppp-optionschapdefault-chap-secretGW-root#setinterfacespp0.0ppp-optionschaplocal-nameGW-root#setinterfacespp0.0pppoptionschappassive【采用模式如果运营商为PAPGW-root#setinterfacespp0.0ppp-optionspapdefault-passwordGW-root#setinterfacespp0.0ppp-optionspaplocal-nameccieh3cGW-root#setinterfacespp0.0ppp-optionspaplocal-passwordGW-root#setinterfacespp0.0ppp-optionspappassive【采用PPPOE的参数GW-root#setinterfacespp0.0pppoe-optionsunderlying-interfacege-0/0/0.0 GW-root#setinterfacespp0.0pppoe-optionsidle-timeout0 GW-rootsetinterfacespp0.0pppoe-optionsauto-reconnect GW-root#setinterfacespp0.0pppoe- 【定义 模式GW-rootsetinterfacespp0.0familyinetmtu GW-rootsetinterfacespp0.0familyinetnegotiate- 加入untrustGW-root#editsecurityzonessecurity-zoneGW-root#setinterfacespp0.0host-inbound-trafficsystem-services定义默认路由与GW-root#setrouting-optionsstaticroute0/0next-hop这里定义了路由，直接指向PP0.0，GW-root#editsecuritynatsourcerule-setaccess-[editsecuritynatsourcerule-setaccess-GW-root#setfromzone[editsecuritynatsourcerule-setaccess-GW-root#settozone[editsecuritynatsourcerule-setaccess-GW-root#editrule[editsecuritynatsourcerule-setaccess-internetrule1]GW-root#setmatchsource-address192.168.1.0/24[editsecuritynatsourcerule-setaccess-internetruleGW-root#setthensource-natGW-rootsetinterfacespp0.0familyinetmtu GW-rootsetsecurityflowtcp-mssall-tcpm