防火墙F1000-AK160与MSR路由器对接做PPPoE拨号，防火墙做PPPoE客户端

防火墙NGFW设备只能做PPPOE client，不具备PPPOE server的功能，所以，在MSR路由器上配置PPPOE server。组网如下：

F1000-AK160的配置：

#

interface Dialer1

 ppp pap local-user test password cipher $c$3$HKrN4hJRbFiItP6JBbSKn6sjYufU8w==

 dialer bundle enable

 dialer-group 1

 dialer timer idle 0

 ip address ppp-negotiate

 nat outbound

#

interface GigabitEthernet2/0/2

 port link-mode route

 pppoe-client dial-bundle-number 1

#

MSR的配置：

#

 ip pool pool1 20.0.0.1 20.0.0.253

#

interface Virtual-Template1

 ppp authentication-mode pap chap domain system

 ppp pap local-user test password cipher $c$3$nv7P2psWO21BcbonR22a6IKy0vlX/Q==

 remote address pool pool1

 ip address 20.0.0.254 255.255.255.0

#

local-user test class network

 password cipher $c$3$jFPu691tDrocvkxodMTzjMmX565MFw==

 service-type ppp

 authorization-attribute user-role network-operator

#

domain system

 authentication ppp local

#

interface GigabitEthernet0/1

 port link-mode route

 pppoe-server bind virtual-template 1

#