H3C-PPPOE
--------------pppoe拨号V7------------------------------- dialer-group 10 rule ip permit interface Dialer10 shutdown ppp chap password simple xxxxxxxxx ppp chap user 02700091604 ppp pap local-user 02700091604 password simple xxxxxxxxx dialer bundle enable dialer-group 10 dialer timer autodial 60 ip address ppp-negotiate tcp mss 1400 nat outbound 3001 interface GigabitEthernet0/1.998 vlan-type dot1q vid 998 pppoe-client dial-bundle-number 10 interface GigabitEthernet0/1.999 vlan-type dot1q vid 999 description << CTT 20M >> combo enable copper ip address 222.42.112.185 255.255.255.0 tcp mss 1400 packet-filter 3005 inbound nat outbound 3000 policy-based-route WH permit node 10 if-match acl 3002 # policy-based-route WH permit node 20 if-match acl 3003 apply next-hop 222.42.112.1 track 2 # policy-based-route WH permit node 30 if-match acl 3004 apply output-interface Dialer10 track 58 acl number 3002 description << unicom/40M >> rule 5 permit ip destination 10.0.0.0 0.255.255.255 rule 6 permit ip source 58.58.58.58 0 destination 223.5.5.5 0 rule 10 permit ip source 10.245.64.0 0.0.3.255 destination 115.159.231.0 0.0.0.255 rule 15 permit ip source 10.245.164.0 0.0.3.255 destination 115.159.231.0 0.0.0.255 rule 20 permit ip source 10.246.16.0 0.0.0.255 destination 115.159.231.0 0.0.0.255 rule 25 permit ip destination 37.0.0.4 0 acl number 3003 description << CTT/20M >> rule 20 permit ip source 192.168.200.0 0.0.7.255 destination 115.159.231.0 0.0.0.255 rule 30 permit ip source 10.248.120.0 0.0.7.255 destination 115.159.231.0 0.0.0.255 acl number 3004 description << ADSL/100M >> rule 10 permit ip source 10.0.0.0 0.255.255.255 rule 15 permit ip source 192.168.0.0 0.0.255.255 --------------pppoe拨号V5--------------------------------- dialer-rule 10 ip permit interface Dialer10 nat outbound 3001 link-protocol ppp ppp chap user 02700093034 ppp chap password simple xxxxxxxxx ppp pap local-user 02700093034 password simple xxxxxxxxx ip address ppp-negotiate tcp mss 1400 dialer user 02700093034 dialer-group 10 dialer bundle 10 ipsec policy ipsecbackup ip netstream outbound interface Ethernet5/0 description to-adsl-100M pppoe-client dial-bundle-number 10
--------------pppoe拨号V7模板------------------------------- # 配置拨号访问组1以及对应的拨号访问控制条件。 <RouterA> system-view [RouterA] dialer-group 1 rule ip permit # 在Dialer1接口上使能共享DDR。 [RouterA] interface dialer 1 [RouterA-Dialer1] dialer bundle enable [RouterA-Dialer1] dialer-group 1 # 将Dialer1接口与拨号访问组1关联。 [RouterA-Dialer1] ip address ppp-negotiate # 配置Dialer1接口通过协商获取IP地址。 [RouterA-Dialer1] dialer timer idle 0 # 配置PPPoE Client工作在永久在线模式。 [MSR36-60-Dialer1]ppp ipcp dns request # 配置从对端请求DNS [MSR36-60-Dialer1]ppp ipcp dns admit-any # 配置接受任何DNS [RouterA -Dialer1]dialer timer autodial 1 [RouterA-Dialer1] ppp chap password cipher k3t8y6r3??? ? # 配置本地被Router B以CHAP方式认证时Router A发送的CHAP用户名和密码。 [RouterA-Dialer1] ppp chap user 500000016949 ???????? #如果您无法配置那么将cipher改为simple [RouterA-Dialer1] ppp pap local-user 500000016949 password simple k3t8y6r3 #这两种方式最好都写上 [RouterA-Dialer1] quit [RouterA] interface G0/0 # 配置PPPoE会话。 [RouterA-G0/0] pppoe-client dial-bundle-number 1 [RouterA-G0/0] quit [RouterA] interface G0/1 # 配置局域网接口的IP地址。 [RouterA-G0/1] ip address 192.168.1.1 255.255.255.0 [RouterA-G0/1] quit [RouterA] ip route-static 0.0.0.0 0 dialer 1 # 配置缺省路由。 配置完成之后要在相应的拨号口上开启NAT转换，才能正常上网，如下 acl advanced 3000?? -----------如果无法配置此条，就将命令修改为acl number rule 0 permit ip source 192.168.1.0 0.0.0.255??? ---------如果内网还有其他网段，就再自行添加 quit interface dialer 1????????? -----------------在拨号口应用nat地址转换 ?nat outbound 3000 quit 4、将内网口ip地址 [MSR36-60]interface GigabitEthernet 0/2 [MSR36-60-GigabitEthernet0/2]ip add 192.168.1.1 255.255.255.0 [MSR36-60-GigabitEthernet0/2]dhcp select server //设置dns 5、配置DHCP服务器 [MSR36-60] dhcp enable [MSR36-60] dhcp server ip-pool 1 [MSR36-60-dhcp-pool-1] network 192.168.1.0 mask 255.255.255.0 [MSR36-60-dhcp-pool-1] dns-list 192.168.1.1 [MSR36-60-dhcp-pool-1] gateway-list 192.168.1.1 [MSR36-60-dhcp-pool-1] quit
--------------pppoe拨号V5模板--------------------------------- [Router]dialer-rule 1 ip permit //创建dialer-rule 1 ; [Router]interface Dialer 1 //进入Dialer 1 接口模式； [Router-Dialer1]link-protocol ppp //封装PPP [Router-Dialer1]ppp chap user DianXin //ADSL拨号的用户名，由运营商提供； [Router-Dialer1]ppp chap password cipher DianXin2012 //ADSL 拨号的密码，由运营商提供； [Router-Dialer1]ppp pap local-user Rayda password cipher DianXin2012 [Router-Dialer1]tcp mss 1024 //Tcp的最大分片单元； [Router-Dialer1]ip address ppp-negotiate //IP 地址的获取方式； [Router-Dialer1]dialer user DianXin [Router-Dialer1]dialer-group 1 //引用dialer-rule 1 [Router-Dialer1]dialer bundle 1 [Router-Dialer1]nat outbound [Router-Dialer1]quit [Router]interface Ethernet2/0 [Router-Ethernet2/0]pppoe-client dialer-bundle-number 1 //将Dialer 1 绑定到Ethernet2/0接口上面； [Router-Ethernet2/0]quit [Router]ip route-static 0.0.0.0 0.0.0.0 Dialer 1 preference 60 //配置默认路由； [Router]save
V7 dialer-group 10 rule ip permit interface Dialer10 ppp chap password cipher $c$3$C8EuBLL/eP72Wm7HUlK4DDAY69vN1W0vug== ppp chap user 02700091604 ppp pap local-user 02700091604 password cipher $c$3$iDq5T66LtKbAMANTR+er9BIHyTXn9tfIrA== dialer bundle enable dialer-group 10 dialer timer autodial 60 ip address ppp-negotiate tcp mss 1400 nat outbound 3001 V5： dialer-rule 10 ip permit interface Dialer10 nat outbound 3001 link-protocol ppp ppp chap user 02700093034 ppp chap password cipher $c$3$btWNiYiSGfBEFVSzdBeYouuPu6ufr5V2fQ== ppp pap local-user 02700093034 password cipher $c$3$bY+AmhsYWlW9W84/5Uh6rXDNIA1qN1LjSQ== ip address ppp-negotiate tcp mss 1400 dialer user 02700093034 dialer-group 10 dialer bundle 10 ipsec policy ipsecbackup ip netstream outbound interface Ethernet5/0 description to-adsl-100M pppoe-client dial-bundle-number 10
