思科PPPOE方式上网怎么配置.docx

思科PPPOE方式上网怎么配置现有客户需要使用思科的2600路由器上网，用户为10M光纤，申请了16个固定IP，ip为61.161.xxx.2-61.161.xxx.14,默认网关是61.161.xxx.1.内网ip段192.168.1.0,客户要实现192.168.1.50-192.168.1.60之间的ip可以上网，其余的不可以。路由器e0/0接口为外网接口，e0/1为内网接口interfacee0/0ipaddress61.161.xxx.2255.255.255.240//这里可以使用61.161.xxx.2-14个地址中的任意一个，这里就用2ipnatoutsidefull-duplexinterfacee0/1ipaddress192.168.1.1255.255.255.0ipnatinsidefull-duplexaccess-list1permithost192.168.1.50access-list1permithost192.168.1.51access-list1permithost192.168.1.52access-list1permithost192.168.1.53access-list1permithost192.168.1.54access-list1permithost192.168.1.55access-list1permithost192.168.1.56access-list1permithost192.168.1.57access-list1permithost192.168.1.58access-list1permithost192.168.1.59access-list1permithost192.168.1.60ipnatpoolintoout61.161.xxx.261.161.xxx.2netmask255.255.255.240//这里复用61.161.xxx.2的地址，也可以这样写：ipnatpoolintoout61.161.xxx.261.161.xxx.14netmask255.255.255.252这样写之后，从地址池里选择任意可用的外网ip转换。ipnatinsidesourcelist1poolintooutOverloadiproute0.0.0.00.0.0.061.161.xxx.1//默认网关，即电信端的地址，下一条地址。这样配置后就可以上网了，但是客户端必须设置固定ip,配置DNS，如果不配置，因为没有开启DHCP服务，所以必须设置固定IP。如果开启DHCP，则需要这样配置。ipdhcppoolABCnetwork192.168.1.0defaultrouter192.168.1.1dns-server202.96.64.68ipdhcpexcluded-address192.168.1.1需要除去网关的地址，要不就冲突了。如果没有ip的限制，就是单纯的上网，删除那个access-list1permithost192.168.1.50至access-list1permithost192.168.1.60增加access-list1permit192.168.1.0255.255.255.0就可以了。对以设置PPPOE上网，配置过程如下，假设用户名是sy_123456密码123456以太网接口的配置不变，需要更改外网口的配置和访问控制列表，增加VPDN的配置。interfacee0/1ipaddress192.168.1.1255.255.255.0ipnatinsidefull-duplexnterfaceDialer1//建立一个拨号接口ipaddressnegotiated//拨号接口的地址是通过协商获得的ipnatoutsideencapsulationppp//封装为ppp协议dialerpool1//建立拨号池为1dialer-group1//建立拨号组1有时候需要设置MTU值比如MTU=1492pppauthenticationpapcallin//加密的验证模式为pap,如果是chap,直接更改就可以了。ppppapsent-usernamesy_123456password0123456//用户名和密码vpdnenablevpdn-groupofficerequest-dialinprotocolpppoepppoeenablepppoe-clientdial-pool-number1dialer-list1protocolippermitaccess-list1permit192.168.1.0255.255.255.0iproute0.0.0.00.0.0.0Dialer1permanentipnatinsidesourcel