问

MSR3620 PPPOE拨号不能网

PPPoE

2019-09-18提问

0关注
1收藏，1424浏览

zhiliao_AkeoC

zhiliao_AkeoC 零段

粉丝：0人关注：1人

问题描述：

在GE1或GE2端口，使用DHCP可以上网正常。

PPPOE拨号连接后，PC可以ping通114.114.114.114。不能打开网页，过不到1分钟 PPPOE又显示断线。

在GE1或GE2端口拨号都一样。

组网及组网描述：

version 7.1.064, Release 0615P20
#
sysname MSR36-20
#
clock timezone Beijing add 08:00:00
clock protocol ntp
#
wlan global-configuration
#
telnet server enable
#
ip pool l2tp1 192.168.30.100 192.168.30.200
#
dialer-group 1 rule ip permit
#
dhcp enable
#
password-recovery enable
#
vlan 1
#
object-group ip address 10.10.1.0
0 network range 10.10.1.1 10.10.1.254
#
object-group ip address 172.16.0.0
0 network range 172.16.0.1 172.16.0.254
#
object-group ip address 192.168.3.0
0 network range 192.168.3.1 192.168.3.254
#
object-group ip address 192.168.6.0
0 network range 192.168.6.1 192.168.6.254
#
object-group ip address 192.168.8.0
0 network range 192.168.8.1 192.168.8.254
#
object-group ip address 192.168.9.0
0 network range 192.168.9.1 192.168.9.254
#
controller Cellular0/0
#
controller Cellular0/1
#
interface Aux0
#
interface Dialer0
ppp chap password cipher $c$3$+eK2cd8Y20LzcILzy1tUurhTdS0RdYYhaW13
ppp chap user xxxxxxxxxx@163.gd
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user xxxxxxxxxx@163.gd password cipher $c$3$YY5io4juBrxqfXGh7+IMrXzF4SY/fb/E16xn
dialer bundle enable
dialer-group 1
dialer timer idle 0
dialer timer autodial 5
ip address ppp-negotiate
nat outbound
#
interface Virtual-Template0
#
interface Virtual-Template1
ppp authentication-mode chap
remote address pool l2tp1
ip address 192.168.30.254 255.255.255.0
#
interface NULL0
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 172.16.0.1 255.255.255.0
packet-filter name GigabitEthernet0/0 inbound
undo dhcp select server
#
interface GigabitEthernet0/1
port link-mode route
description Multiple_Line
bandwidth 100000
ip address dhcp-alloc
nat outbound
undo dhcp select server
#
interface GigabitEthernet0/2
port link-mode route
description Multiple_Line
attack-defense apply policy AtkInterface4
pppoe-client dial-bundle-number 0
ipsec apply policy 1
#
object-policy ip Any-Any
rule 65534 pass
#
object-policy ip Trust-Untrust
rule 0 pass source-ip 10.10.1.0 counting
rule 1 pass source-ip 192.168.3.0 counting
rule 2 pass source-ip 192.168.6.0 counting
rule 3 pass source-ip 192.168.8.0 counting
rule 4 pass source-ip 192.168.9.0 counting
rule 5 pass source-ip 172.16.0.0 counting
#
security-zone name Local
#
security-zone name Trust
import interface GigabitEthernet0/0
#
security-zone name DMZ
#
security-zone name Untrust
import interface Dialer0
import interface GigabitEthernet0/1
#
security-zone name Management
#
zone-pair security source Any destination Any
object-policy apply ip Any-Any
#
zone-pair security source Trust destination Untrust
object-policy apply ip Trust-Untrust
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class tty
user-role network-operator
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line vty 0 15
authentication-mode scheme
user-role network-operator
#
line vty 16 63
user-role network-operator
#
ip route-static 0.0.0.0 0 Dialer0
ip route-static 192.168.3.0 24 10.10.1.254
ip route-static 192.168.6.0 24 10.10.1.254
ip route-static 192.168.8.0 24 10.10.1.254
ip route-static 192.168.9.0 24 10.10.1.254
#
ntp-service enable
ntp-service unicast-server ***.***
ntp-service unicast-server 202.120.2.101
ntp-service unicast-server 114.118.7.161
ntp-service refclock-master 2
#
domain system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$hHq1UeVMJsWWiqHG$Y1xU5fgEeJx1hoFw3o43R97C56evrASO4t/m4jEq6+iiYOcxiNMOFKgPElO73l2+o6DYMNQ5psRyzTlA+dZglA==
service-type ssh telnet http https
authorization-attribute user-role level-15
authorization-attribute user-role network-operator
#
local-user 123456 class network
password cipher $c$3$34cVlyQtY+FnCMK3mr5BECaHwO2GGNxgfQ==
service-type portal
service-type ppp
authorization-attribute user-role network-operator
#
ipsec transform-set 1
esp encryption-algorithm 3des-cbc
esp authentication-algorithm sha1
#
ipsec policy-template 1 65535
transform-set 1
ike-profile 1
sa duration time-based 3600
sa duration traffic-based 1843200
#
ipsec policy 1 65535 isakmp template 1
#
l2tp-group 1 mode lns
allow l2tp virtual-template 1 remote xxxxxx
tunnel name xxxxxx
tunnel password cipher $c$3$t7iUHU4949HhlAvcoUqOA1vMFU6b0XOfvg==
#
l2tp enable
#
ike profile 1
keychain 1
match remote identity address 0.0.0.0 0.0.0.0
proposal 65535
#
ike proposal 65535
#
ike keychain 1
pre-shared-key address 0.0.0.0 0.0.0.0 key cipher $c$3$0/F/iVdId5nthRiIrQpF/ru5NUFZPdZ10g==
#
ip http enable
#
attack-defense policy AtkInterface4
scan detect level high action logging block-source
#
url-filter policy 8048_url_profile_global
default-action permit
#
wlan ap-group default-group
vlan 1
#
cloud-management server domain oasis.h3c.com
#
return