pppoe撥號之五juniper srx防火墻配置

JuniperSRXPPPOE撥號配封裝GW-root#setinterfacesge-0/0/0.0encapsulationppp-over-如果運營商為CHAPGW-root#setinterfacespp0.0ppp-optionschapdefault-chap-secretGW-root#setinterfacespp0.0ppp-optionschaplocal-nameGW-root#setinterfacespp0.0pppoptionschappassive【采用模式如果運營商為PAPGW-root#setinterfacespp0.0ppp-optionspapdefault-passwordGW-root#setinterfacespp0.0ppp-optionspaplocal-nameccieh3cGW-root#setinterfacespp0.0ppp-optionspaplocal-passwordGW-root#setinterfacespp0.0ppp-optionspappassive【采用PPPOE的參數(shù)GW-root#setinterfacespp0.0pppoe-optionsunderlying-interfacege-0/0/0.0 GW-root#setinterfacespp0.0pppoe-optionsidle-timeout0 GW-rootsetinterfacespp0.0pppoe-optionsauto-reconnect GW-root#setinterfacespp0.0pppoe- 【定義 模式GW-rootsetinterfacespp0.0familyinetmtu GW-rootsetinterfacespp0.0familyinetnegotiate- 加入untrustGW-root#editsecurityzonessecurity-zoneGW-root#setinterfacespp0.0host-inbound-trafficsystem-services定義默認路由與GW-root#setrouting-optionsstaticroute0/0next-hop這里定義了路由，直接指向PP0.0，GW-root#editsecuritynatsourcerule-setaccess-[editsecuritynatsourcerule-setaccess-GW-root#setfromzone[editsecuritynatsourcerule-setaccess-GW-root#settozone[editsecuritynatsourcerule-setaccess-GW-root#editrule[editsecuritynatsourcerule-setaccess-internetrule1]GW-root#setmatchsource-address192.168.1.0/24[editsecuritynatsourcerule-setaccess-internetruleGW-root#setthensource-natGW-rootsetinterfacespp0.0familyinetmtu GW-rootsetsecurityflowtcp-mssall-tcpm