© 2006 Cisco Systems, Inc. All rights reserved.ISCW v1.02-1 Teleworker Connectivity Configuring the CPE as the PPPoE or PPPoA Client. - презентация

1 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Teleworker Connectivity Configuring the CPE as the PPPoE or PPPoA Client

2 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration of a Cisco Router as the PPPoE Client

3 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration Tasks: Configuring the CPE as the PPPoE Client over the Ethernet Interface 1. Configure an Ethernet interface 2. Configure a dialer interface 3. Configure PAT 4. Configure DHCP server 5. Configure a static default route

4 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: CPE as the PPPoE Client over the Ethernet Interface

5 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: CPE as the PPPoE Client over the Ethernet Interface (Cont.)

6 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration Tasks: Configuring the CPE as the PPPoE Client over the ATM Interface 1. Configure an ATM interface 2. Configure a dialer interface 3. Configure PAT 4. Configure DHCP server 5. Configure a static default route

7 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: CPE as the PPPoE Client over the ATM Interface

8 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: CPE as the PPPoE Client over the ATM Interface (Cont.)

9 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration of a PPPoE Client

10 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v PPPoE Client Configuration Configures the Ethernet interface interface ethernet number router(config)# pppoe enable router(config-if)# pppoe-client dial-pool-number number router(config-if)# Enables PPPoE on Ethernet interface Binds a dialer profile to the Ethernet interface

11 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: Configuring PPPoE Client

12 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration of the PPPoE DSL Dialer Interface

13 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuring the PPPoE Dialer Interface Configures the dialer interface. interface dialer number router(config)# encapsulation ppp router(config-if)# ip address negotiated router(config-if)# Specifies PPP encapsulation for the dialer interface. Sets IP address to be negotiated with the remote peer using IPCP.

14 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuring the PPPoE Dialer Interface (Cont.) Binds dialer interface to the dialer pool dialer pool pool_number router(config-if)# ip mtu mtu_size router(config-if)# ppp authentication chap [callin] router(config-if)# Reduces the maximum Ethernet payload size because the PPPoE header requires 8 bytes (Optional) Configures PPP authentication CHAP

15 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: Configuring the PPPoE Dialer Interface

16 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration of PAT

17 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Port Address Translation

18 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configure PAT Specifies the addresses that may be translated access-list ACL_num {permit | deny} protocol source_network source_wildcard destination_network destination_wildcard router(config)# ip nat inside source list ACL_num interface interface number [overload] router(config)# ip nat {inside | outside} router(config-if)# Enables dynamic translation of addresses using the assigned IP address of the interface Specifies the interface as inside or outside related to PAT

19 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: PAT Configuration

20 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration of DHCP to Scale DSL

21 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configure a DHCP Server Enables a DHCP pool for use by hosts and enters DHCP pool configuration mode. ip dhcp pool pool_name router(config)# import all router(dhcp-config)# network network_address subnet_mask router(dhcp-config)# Imports DNS and WINS information from IPCP. Specifies the network and subnet mask of the pool. default-router address router(dhcp-config)# Specifies the default router for the pool to use.

22 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: DHCP Server Configuration

23 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration of a Static Default Route

24 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuring a Static Default Route The CPE can use a static default route to reach all remote destinations. ip route interface number router(config)#

25 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Example: Static Default Route

26 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Verifying a PPPoE Configuration

27 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Verifying a PPPoE Configuration Displays PPPoE protocol messages about events that are part of normal session establishment or shutdown debug pppoe events router# debug ppp authentication router# show pppoe session router# Displays authentication protocol messages, including CHAP and PAP packet exchanges Displays basic information about currently active PPPoE sessions

28 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Verifying a PPPoE Configuration (Cont.) Displays address bindings on the Cisco IOS DHCP server show ip dhcp binding router# show ip nat translations router# ipconfig /all C:\Documents and Settings\User> Displays active NAT translations Displays the complete IP configuration on Windows NT, 2000, or XP system

29 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v CPE#show pppoe session Total PPPoE sessions 1 PPPoE Session Information UID SID RemMAC Intf Intf Session LocMAC VASt state a41.1a83 Et1 Vi2 N/A 000b.46e2.eb36 UP Debug VPDN PPPoE Events CPE#debug pppoe events 15:13:41.991: Sending PADI: Interface = Ethernet1 15:13:42.083: PPPoE 0: I PADO 15:13:44.091: PPPOE: we've got our pado and the pado timer went off 15:13:44.091: OUT PADR from PPPoE Session 15:13:44.187: PPPoE 5989: I PADS 15:13:44.187: IN PADS from PPPoE Session Determine if the PPPoE connect phase is successful. Get the status of the PPPoE session.

30 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Debug PPP Authentication Enable debugging for PPP authentication to verify authentication success. CPE#debug ppp authentication CPE#configure terminal Enter configuration commands, one per line. End with CNTL/Z. CPE(config)#interface ATM 0/0 CPE(config-if)#no shutdown 00:19:05: %LINK-3-UPDOWN: Interface ATM 0/0, changed state to up 00:19:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0/0, changed state to up 00:19:29: %DIALER-6-BIND: Interface Vi2 bound to profile Di1 00:19:29: Vi2 PPP: Using dialer call direction 00:19:29: Vi2 PPP: Treating connection as a callout 00:19:29: Vi2 PPP: Authorization required 00:19:29: Vi2 PPP: No remote authentication for call-out 00:19:29: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up 00:19:31: Vi2 CHAP: I CHALLENGE id 1 len 24 from "ISP" 00:19:31: Vi2 CHAP: Using hostname from interface CHAP 00:19:31: Vi2 CHAP: Using password from AAA 00:19:31: Vi2 CHAP: O RESPONSE id 1 len 25 from "CPE" 00:19:32: Vi2 CHAP: I SUCCESS id 1 len 4 00:19:33: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual- Access2, changed state to up

31 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Verify DHCP Clients C:\Documents and Settings\User>ipconfig /all Windows 2000 IP Configuration Ethernet adapter LAB: Connection-specific DNS Suffix. : lab.com Description : Intel(R) PRO/1000 MT Mobile Connection Physical Address : AF-40-9B Dhcp Enabled : Yes Autoconfiguration Enabled.... : Yes IP Address : Subnet Mask : Default Gateway : DHCP Server : DNS Servers : Primary WINS Server : Lease Obtained : 6. April :36:31 Lease Expires : 7. April :36:31 Verify how the IP address is assigned on the PC.

32 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Verify DHCP Server CPE#show ip dhcp binding IP address Client-ID/ Lease expiration Type Hardware address Jan :50 AM Automatic Jan :50 AM Automatic Verify the existing DHCP bindings on the router (DHCP server).

33 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Verify how IP addresses are translated on the router. CPE#show ip nat translations Pro Inside global Inside local Outside local Outside global icmp : : : :512 Verify PAT

34 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v PPPoE Sample Configuration hostname CPE ! ip dhcp pool MyPool network default-router ! interface Ethernet0/1 no ip address pppoe enable pppoe-client dial-pool-number 1 ! interface Ethernet0/0 ip address ip nat inside ! interface Dialer0 ip address negotiated encapsulation ppp dialer pool 1 ip mtu 1492 ip nat outside ppp authentication chap callin ppp chap password mysecret ! ip nat inside source list 101 interface Dialer0 overload access-list 101 permit ip any ! ip route Dialer0

35 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration of a PPPoA DSL Connection

36 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v DSL Configuration Overview The CPE device encapsulates the PPP session based on RFC 1483 for transport across the DSLAM. The virtual access interface associates each PPP connection with an ATM VC. The virtual access interface obtains its configuration from a virtual interface template when the VC is created. The PPP subsystem starts and the router attempts to send a PPP configure request to the remote peer. The virtual access interface remains associated with a VC as long as the VC is configured. Three types of PPP over ATM connections are supported: –IETF-compliant MUX encapsulated PPPoA –IETF-compliant LLC encapsulated PPPoA –Cisco-proprietary PPPoA

37 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v PPPoE vs. PPPoA interface Ethernet0/1 no ip address pppoe enable pppoe-client dial-pool-number 1 ! interface Dialer0 ip mtu 1492 interface ATM0/0 no ip address dsl operating-mode auto pvc 1/32 encapsulation aal5mux ppp dialer dialer pool-member 1 In the PPPoE configuration, you have to bind Ethernet interface to dialer interface and reduce the maximum Ethernet payload size from 1500 to In the PPPoA configuration, you have to configure proper encapsulation on the ATM interface and associate the interface with the dialer pool. PPPoEPPPoA

38 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuration of the DSL ATM Interface

39 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuring the DSL ATM Interface Step 1: Configure modulation mode interface atm number router(config)# dsl operating-mode auto router(config-if)# pvc vpi/vci router(config-if)# Permits the router to automatically determine the service provider DSL modulation; this is the default setting on the Cisco router. Creates an ATM PVC for the router. Note: The PVC VPI/VCI must match the provider VPI/VCI. Step 2: Create PVC

40 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Configuring the DSL ATM Interface (Cont.) encapsulation aal5mux ppp dialer router(config-atm-vc)# Identifies the Layer 2 encapsulation dialer pool-member number router(config-atm-vc)# Specifies a dialer pool member Step 4: Associate the interface with the pool Step 3: Define the encapsulation

41 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v PPPoA Sample Configuration hostname CPE ! ip dhcp pool MyPool network default-router ! interface ATM0/0 no ip address dsl operating-mode auto pvc 8/35 encapsulation aal5mux ppp dialer dialer pool-member 1 ! interface Ethernet0/0 ip address ip nat inside ! interface Dialer0 ip address negotiated encapsulation ppp dialer pool 1 ip nat outside ppp authentication chap callin ppp chap password mysecret ! ip nat inside source list 101 interface Dialer0 overload access-list 101 permit ip any ! ip route Dialer0

42 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Summary Configuring DSL requires global and interface configuration commands. Enable PPPoE on Ethernet interface with the pppoe enable command and bind the Ethernet interface to a dialer interface. Configure the dialer interface with MTU size of 1492 and, optionally, for PPP authentication. PAT enables you to use one registered IP address for the interface to access the Internet from all devices in the network. The Cisco IOS DHCP server was enhanced to allow configuration information to be updated automatically.

43 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v Summary (Cont.) Configure a static default route on the Cisco router to allow the router to reach all unknown destinations toward the dialer interface. To verify proper PPPoE configuration, use debug ppp authentication, show pppoe session, show ip dhcp binding, show ip nat translations, and ipconfig /all commands. Configuring a PPPoA connection requires configuration of ATM and dialer interfaces, PAT, DHCP, and static default route. Use the dsl operating-mode auto interface configuration command to specify that the router will automatically detect the DSL modulation that the service provider is using, and will set the DSL modulation to match. An ATM VCI/VPI pair must be configured to communicate with the service provider.

44 © 2006 Cisco Systems, Inc. All rights reserved.ISCW v