交換路由CCIE之路——PPPoE實驗

1、實驗 PPPoE接入控制一實驗拓撲二組網(wǎng)需求三實驗內(nèi)容連通性測試sw3#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:.!Success rate is 80 percent (4/5), round-trip min/avg/max = 32/78/148 mssw3#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Ec

2、hos to , timeout is 2 seconds:.!Success rate is 80 percent (4/5), round-trip min/avg/max = 24/85/176 mssw3#r5#ping 5 Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 5, timeout is 2 seconds:.!Success rate is 80 percent (4/5), round-trip min/avg/max = 8

3、/21/60 msPPPoE服務器配置r5(config)#bba-group pppoe globalr5(config-bba-group)#virtual-template 1r5(config)#username cisco password cisco r5(config)#ip local pool ppp 54r5(config)#int virtual-template 1r5(config-if)#en pppr5(config-if)#ip add r5(config-if)#

4、peer default ip address pool pppr5(config-if)#ppp authentication pap chap r5(config-if)#exitr5(config)#int f2/0.20r5(config-subif)#en dot1Q 20r5(config-subif)#pppoe enable寬帶設置 用戶連接認證成功獲得IP采用外部服務器ACS認證r5(config)#aaa new-model r5(config)#aaa authentication ppp default group radiusr5(config)#radius-ser

5、ver host 5 key ciscor5#test aaa group radius user5 cisco new-code Trying to authenticate with Servergroup radiusUser successfully authenticatedACS服務器上創(chuàng)建客戶 user5 密碼cisco若仍利用前用戶名會出現(xiàn)認證失敗，利用user5可成功連接路由器做PPPoE客戶認證服務器端客戶端r1(config)#int dialer 1r1(config-if)#dialer pool 1r1(config-if)#en pppr1(

6、config-if)#ppp pap sent-username cisco password ciscor1(config-if)#ppp chap hostname ciscor1(config-if)#ppp chap password ciscor1(config-if)#ip address negotiated r1(config-if)#ip tcp adjust-mss 1452r1(config-if)#exitr1(config)#int f1/1r1(config-if)#no ip addr1(config-if)#pppoe-client dial-pool-numb

7、er 1r1(config-if)#exitr1(config)#ip route dialer 1這里撥號沒有成功，因為沒有開啟PPPOE ，下面是成功的例子r1(config)#do show ip int brInterface IP-Address OK? Method Status ProtocolDialer1 unassigned YES manual up up r1(config)#int e0/1r1(config-if)#pppoe enr1(config-if)#pppoe-client dial-pool-number 1r1(conf

8、ig-if)#*Mar 1 00:17:22.247: %DIALER-6-BIND: Interface Vi1 bound to profile Di1r1(config-if)#*Mar 1 00:17:22.455: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to upr1(config-if)#*Mar 1 00:17:25.967: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to upr1(con

9、fig-if)#exitr1(config)#do show ip int brInterface IP-Address OK? Method Status ProtocolVirtual-Access1 unassigned YES unset up up Dialer1 unassigned YES manual up up 發(fā)現(xiàn)端口起來了，但沒自動獲取IP ,檢查發(fā)現(xiàn)，服務器端，虛接口沒配IP.,配上后，重新登錄，就有了。r5(config)#int virtual-template 1r5(config-if)#ip add r5(c

10、onfig-if)#no shur1(config)#int e0/1r1(config-if)#no pppoe-client dial-pool-number 1r1(config-if)#*Mar 1 00:20:55.547: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di1r1(config-if)#*Mar 1 00:20:55.771: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to downr1(config-if)#*Mar 1 00:20:

11、56.771: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to downr1(config-if)#pppoe-client dial-pool-number 1 r1(config-if)#*Mar 1 00:21:05.083: %DIALER-6-BIND: Interface Vi1 bound to profile Di1r1(config-if)#*Mar 1 00:21:05.095: %LINK-3-UPDOWN: Interface Virtual-Access

12、1, changed state to upr1(config-if)#*Mar 1 00:21:08.479: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to upr1(config-if)#do show ip int brInterface IP-Address OK? Method Status Protocol Virtual-Access1 unassigned YES unset up up Dialer1 YES IPCP up up連通性

13、測試r1#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 12/229/764 ms疑問：服務器端，不論客戶是否認證Virtual-Template1都是DOWN,認證成功后會多出一個Virtual-Access1.1 ，這里的這幾個虛擬端口到底代表什么？r5(config-if)#do show ip int brInterface IP-Address OK? Method Status ProtocolVirtual-Access1 unassigned YES unset up up Virtual-Access1.1 YES TFTP up up Virtual-Template1 YES manual down down Virtual-Access2 unassigned YES unset down down r5(config-if)#do show ip