SR66/SR66X系列路由器作为PPPoE Server通过策略路由访问内网服务器的典型配置

SR6602 配置

#

domain default enable system

#

acl number 2000

 rule 0 permit source 1.1.1.0 0.0.0.255

#

domain system

 authentication ppp local

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

 ip pool 1 1.1.1.2 1.1.1.10               //定义为PPP用户分配IP地址的地址池

#

policy-based-route h3c permit node 10    //创建策略节点

 if-match acl 2000

 apply ip-address next-hop 10.1.1.2       //配置IPv4路由信息的下一跳地址

#

local-user h3c

 password simple h3c

 service-type ppp

#

interface Virtual-Template1

 ppp authentication-mode chap domain system //配置本端PPP协议对对端设备的认证方式

 ppp chap user h3c                      //配置采用CHAP认证时的用户名

 remote address pool 1

 ip address 1.1.1.1 255.255.255.0

#

interface GigabitEthernet0/2

 ip address 20.1.1.1 255.255.255.0

#

interface GigabitEthernet0/1

 ip address 10.1.1.1 255.255.255.0

#

interface GigabitEthernet0/2

 pppoe-server bind Virtual-Template 1 //在以太网接口上启用PPPoE协议，将该以太网接口与指定的虚拟模板接口绑定

#

 ip route-static 0.0.0.0 0.0.0.0 20.1.1.2

RTA配置

#

interface GigabitEthernet0/0

 ip address 10.1.1.2 255.255.255.0

#              

ip route-static 0.0.0.0 0.0.0.0 10.1.1.1

RTB 配置

#

interface GigabitEthernet0/0

 ip address 20.1.1.2 255.255.255.0

#              

ip route-static 0.0.0.0 0.0.0.0 20.1.1.1