f100 v5版本防火墙 pppoe拨号配置案例

官方手册链接：

https://www.h3c.com/cn/d_202001/1271926_30005_0.htm#_Toc30507694

PPPoE Client典型配置举例

1. 组网需求

Router和Firewall之间通过各自的GigabitEthernet0/1接口相连，要求Router用PAP/CHAP方式认证Firewall。

2. 组网图

图2-11 PPPoE Client典型配置组网图

3. 配置步骤

(1)       方案一：PAP认证

·            配置Router作为PPPoE Server

# 增加一个PPPoE用户。

<Router> system-view

[Router] local-user user2

[Router-luser-user2] password simple hello

[Router-luser-user2] service-type ppp

[Router-luser-user2] quit

# 配置虚拟模板参数。

[Router] interface virtual-template 1

[Router-Virtual-Template1] ppp authentication-mode pap

[Router-Virtual-Template1] ip address 1.1.1.1 255.0.0.0

[Router-Virtual-Template1] remote address 1.1.1.2

[Router-Virtual-Template1] quit

# 配置PPPoE Server。

[Router] interface gigabitethernet 0/1

[Router-GigabitEthernet0/1] pppoe-server bind virtual-template 1

·            配置Firewall作为PPPoE Client

<Firewall> system-view

[Firewall] dialer-rule 1 ip permit

[Firewall] interface dialer 1

[Firewall-Dialer1] dialer user user2

[Firewall-Dialer1] dialer-group 1

[Firewall-Dialer1] dialer bundle 1

[Firewall-Dialer1] ip address ppp-negotiate

[Firewall-Dialer1] ppp pap local-user user2 password simple hello

[Firewall-Dialer1] quit

# 配置PPPoE会话。

[Firewall] interface gigabitethernet 0/1

[Firewall-GigabitEthernet0/1] pppoe-client dial-bundle-number 1

(2)       方案二：CHAP认证

·            配置Router作为PPPoE Server

# 增加一个PPPoE用户。

<Router> system-view

[Router] local-user user2

[Router-luser-user2] password simple hello

[Router-luser-user2] service-type ppp

[Router-luser-user2] quit

# 配置虚拟模板参数。

[Router] interface virtual-template 1

[Router-Virtual-Template1] ppp authentication-mode chap

[Router-Virtual-Template1] ppp chap user user1

[Router-Virtual-Template1] ip address 1.1.1.1 255.0.0.0

[Router-Virtual-Template1] remote address 1.1.1.2

[Router-Virtual-Template1] quit

# 配置PPPoE Server。

[Router] interface gigabitethernet 0/1

[Router-GigabitEthernet0/1] pppoe-server bind virtual-template 1

·            配置Firewall作为PPPoE Client

<Firewall> system-view

[Firewall] dialer-rule 1 ip permit

[Firewall] interface dialer 1

[Firewall-Dialer1] dialer user user2

[Firewall-Dialer1] dialer-group 1

[Firewall-Dialer1] dialer bundle 1

[Firewall-Dialer1] ip address ppp-negotiate

[Firewall-Dialer1] ppp chap user user2

[Firewall-Dialer1] quit

[Firewall] local-user user1

[Firewall-luser-user1] password simple hello

[Firewall-luser-user1] quit

# 配置PPPoE会话。

[Firewall] interface gigabitethernet 0/1

[Firewall-GigabitEthernet0/1] pppoe-client dial-bundle-number 1