一、配置PPPoE Server
1、ISP的基本配置
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweiundo info-center ena
Info: Information center is disabled.
Huaweisysn ISP
ISPint l0
ISP-LoopBack0ip add 10.10.10.1 24
ISP-LoopBack0qu
ISP
2、配置PPPoE地址池
ISPip pool pppoe
Info: It's successful to create an IP address pool.
ISP-ip-pool-pppoegateway-list 20.20.20.1
ISP-ip-pool-pppoenetwork 20.20.20.0 mask 255.255.255.0
ISP-ip-pool-pppoequ
3、配置PPPoE认证用户，实现PPPoE对用户主机的认证
ISPaaa
ISP-aaalocal-user admin password cipher 123456
ISP-aaalocal-user admin privilege level 0
ISP-aaalocal-user admin service-type ppp
ISP-aaaqu
4、配置虚拟接口模板VT，本端PPPoE协议对对端设备的认证方式为CHAP
ISPint Virtual-Template 1 //创建VT接口，编号可以自定义，这组设置为1
ISP-Virtual-Template1ppp authentication-mode chap
ISP-Virtual-Template1remote address pool pppoe //为PPPoE Clent指定IP地址池
ISP-Virtual-Template1ip add 20.20.20.1 24
ISP-Virtual-Template1qu
5、启用PPPoEServer功能。在以太网接口G0/0/0上启用PPPoE功能
ISPint g0/0/0
ISP-GigabitEthernet0/0/0pppoe-server bind virtual-template 1 //将G0/0/0和VT接口绑定
ISP-GigabitEthernet0/0/0qu
ISP
二、配置PPPoEClient
1、RA的基本配置
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
Huaweiundo info-center ena
Info: Information center is disabled.
Huaweisysn RA
RAint g0/0/1
RA-GigabitEthernet0/0/1ip add 192.168.10.254 24
RA-GigabitEthernet0/0/1qu
2、配置Dialer接口
RAint Dialer 0
RA-Dialer0link-protocol ppp
RA-Dialer0ppp chap user admin
RA-Dialer0ppp chap password cipher 123456
RA-Dialer0ip add ppp-negotiate
RA-Dialer0tcp adjust-mss 1200 //最大报文长度
RA-Dialer0ip address ppp-negotiate //允许接口进行地址协商
\[RA-Dialer0dialer user admin //指定Dialer接口拨号使用的用户名
RA-Dialer0]dialer bundle 1 //指定Dialer接口的编号
RA-Dialer0dialer timer idle 300
INFO: The configuration will become effective after link reset.
RA-Dialer0dialer-group 1 //将该接口置于一个拨号组，并进行编号
RA-Dialer0qu
3、配置拨号规则dialer-rule
RAdialer-rule
RA-dialer-ruledialer-rule 1 ip permit
RA-dialer-rulequ
4、建立PPPoE会话
RAint g0/0/0
RA-GigabitEthernet0/0/0pppoe-client dial-bundle-number 1 //将G0/0/0与VT1绑定
RA-GigabitEthernet0/0/0qu
5、配置NAT转换，配置局域用户通过NAT转换将私网地址转换为公网地址，并配置进行拨号上网的基本访问控制列表
RAacl number 3000
RA-acl-adv-3000rule 5 permit ip source 192.168.10.0 0.0.0.255
RA-acl-adv-3000qu
RAint Dialer 0
RA-Dialer0nat outbound 3000
RA-Dialer0qu
6、配置到PPPoE Server的静态路由
RA]ip route-static 0.0.0.0 0 Dialer 0
三、任务验收
1、在ISP上查看PPPoE会话信息
2、在RA上查看PPPoE会话信息
3、测试计算机的互通性
