- Table of Contents
-
- H3C Access Points Comware 7 Configuration Examples-6W100
- 00-Preface
- 01-H3C Access Points Comware 7 WPA2-PSK Encryption Configuration Examples
- 02-H3C Access Points Comware 7 Client Rate Limiting Configuration Examples
- 03-H3C Access Points Comware 7 NAT Configuration Examples
- 04-H3C Access Points Comware 7 PPPoE Configuration Examples
- 05-H3C Access Points Comware 7 Mesh WDS Configuration Examples
- 06-H3C Access Points Comware 7 Local MAC Authentication (IPv6) Configuration Examples
- 07-H3C Access Points Comware 7 IPv6 Configuration Examples
- 08-H3C Access Points Comware 7 Remote 802.1X Authentication (IPv6) Configuration Examples
- 09-H3C Access Points Comware 7 Layer 2 IPv6 Multicast Configuration Examples
- 10-H3C Access Points Comware 7 Layer 3 IPv6 Multicast Configuration Examples
- Related Documents
-
Title | Size | Download |
---|---|---|
04-H3C Access Points Comware 7 PPPoE Configuration Examples | 99.14 KB |
|
H3C Access Points |
Comware 7 PPPoE Configuration Examples |
|
|
Document version: 6W100-20201125
Copyright © 2020 New H3C Technologies Co., Ltd. All rights reserved.
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.
The information in this document is subject to change without notice.
Contents
Introduction
The following information provides an example for configuring PPPoE.
Prerequisites
This document applies to Comware 7-based fat APs. Procedures and information in the examples might be slightly different depending on the software or hardware version of the fat APs.
The configuration examples in this document were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.
This document assumes that you have basic knowledge of PPPoE.
Example: Configuring PPPoE
Network configuration
As shown in Figure 1, the wireless clients access the network through the fat AP. The fat AP assigns IP addresses to the clients as a DHCP server. The device acts as a PPPoE server, and the fat AP acts as a PPPoE client.
Configure the device and the fat AP to meet the following requirements:
· The device performs one-way authentication on the wireless clients without using usernames.
· The PPPoE session on the fat AP works in permanent mode.
· Clients can initiate connection requests to access the resources in the IP network.
Restrictions and guidelines
By default, the device uses the default service template (template 1) with SSID H3C to provide wireless services. To use user-defined wireless service settings, disable or delete the default service template. In this example, the service template is disabled.
Procedures
Configuring the device
# Create a network access user named user1.
<Device> system-view
[Device] local-user user1 class network
# Set the password to pass1 in plaintext form for the user, and authorize the user to use the PPP service.
[Device-luser-network-user1] password simple pass1
[Device-luser-network-user1] service-type ppp
[Device-luser-network-user1] quit
# Create VT interface 1.
[Device] interface virtual-template 1
# Configure the VT interface to authenticate the peer by using CHAP, with the authentication domain as domain system.
[Device-Virtual-Template1] ppp authentication-mode chap domain system
# Configure an IP address for the VT interface and specify an IP address for the peer.
[Device-Virtual-Template1] ip address 1.1.1.1 255.255.255.0
[Device-Virtual-Template1] remote address 1.1.1.2
[Device-Virtual-Template1] quit
# Enable the PPPoE server on GigabitEthernet 1/0/2, and bind the interface to the VT interface.
[Device] interface gigabitethernet 1/0/2
[Device-GigabitEthernet1/0/2] pppoe-server bind virtual-template 1
[Device-GigabitEthernet1/0/2] quit
# Configure local authentication for the PPP users in ISP domain system.
[Device] domain system
[Device-isp-system] authentication ppp local
[Device-isp-system] quit
Configuring the fat AP
1. Configure VLANs and VLAN interfaces on the fat AP:
# Remove the IP address from VLAN-interface 1.
<FAT AP> system-view
[FAT AP] interface vlan-interface 1
[FAT AP-Vlan-interface1] undo ip address
[FAT AP-Vlan-interface1] quit
# Create VLAN 100 and its VLAN interface, and assign an IP address to the VLAN interface.
[FAT AP] vlan 100
[FAT AP-vlan100] quit
[FAT AP] interface vlan-interface 100
[FAT AP-Vlan-interface100] ip address 192.1.0.1 24
[FAT AP-Vlan-interface100] quit
2. Configure the wireless service template:
# Enter the view of service template 1 and disable the template.
[FAT AP] wlan service-template 1
[FAT AP-wlan-st-1] undo service-template enable
[FAT AP-wlan-st-1] quit
# Create a service template named service and enter its view.
[FAT AP] wlan service-template service
# Configure service as the SSID.
[FAT AP-wlan-st-service] ssid service
# Assign clients coming online through service template 100 to VLAN 100.
[FAT AP-wlan-st-service] vlan 100
# Enable the service template.
[FAT AP-wlan-st-service] service-template enable
[FAT AP-wlan-st-service] quit
# Enter interface view of WLAN-Radio 1/0/1.
[FAT AP] interface wlan-radio 1/0/1
# Bind service template service to interface WLAN-Radio 1/0/1.
[FAT AP-WLAN-Radio1/0/1] service-template service
[FAT AP-WLAN-Radio1/0/1] quit
3. Configure the DHCP server:
# Configure DHCP address pool 100 for address allocation to the wireless clients.
[FAT AP] dhcp server ip-pool 100
[FAT AP-dhcp-pool-100] network 192.1.0.0 mask 255.255.255.0
[FAT AP-dhcp-pool-100] gateway-list 192.1.0.1
[FAT AP-dhcp-pool-100] quit
# Enable the DHCP service.
[FAT AP] dhcp enable
4. Configure the PPPoE client:
# Create dialer group 1 and configure a dial rule for it.
[FAT AP] dialer-group 1 rule ip permit
# Enable bundle DDR on Dialer 1.
[FAT AP] interface dialer 1
[FAT AP-Dialer1] dialer bundle enable
# Associate Dialer 1 with dialer group 1.
[FAT AP-Dialer1] dialer-group 1
# Configure Dialer 1 to obtain an IP address through PPP negotiation.
[FAT AP-Dialer1] ip address ppp-negotiate
[FAT AP-Dialer1] quit
# Configure a PPPoE session that corresponds to dialer bundle 1 (dialer bundle 1 corresponds to Dialer 1).
[FAT AP] interface vlan-interface 1
[FAT AP-Vlan-interface1] pppoe-client dial-bundle-number 1
[FAT AP-Vlan-interface1] quit
# Configure the PPPoE session to operate in permanent mode.
[FAT AP] interface dialer 1
[FAT AP-Dialer1] dialer timer idle 0
# Set the DDR auto-dial interval to 60 seconds.
[FAT AP-Dialer1] dialer timer autodial 60
# Configure the username and password for CHAP authentication.
[FAT AP-Dialer1] ppp chap user user1
[FAT AP-Dialer1] ppp chap password simple pass1
[FAT AP-Dialer1] quit
# Configure a static route.
[FAT AP] ip route-static 1.1.1.1 255.0.0.0 dialer 1
5. Configure NAT:
# Configure ACL 2000 to permit packets sourced from 192.1.0.0.
[FAT AP] acl basic 2000
[FAT AP-acl-ipv4-basic-2000] rule 0 permit source 192.1.0.0 0.0.0.255
[FAT AP-acl-ipv4-basic-2000] quit
# Configure an outbound dynamic PAT rule on VLAN-interface 1 to translate the source IP addresses permitted by ACL 2000.
[FAT AP] interface vlan-interface 1
[FAT AP-Vlan-interface1] nat outbound 2000
[FAT AP-Vlan-interface1] quit
Verifying the configuration
# Display summary information about the PPPoE session on the fat AP.
[FAT AP] display pppoe-client session summary
Bundle ID Interface VA RemoteMAC LocalMAC State
1 1 Vlan1 VA0 00e0-1400-4300 00e0-1500-4100 SESSION
Configuration files
#
sysname Device
#
vlan 1
#
interface Virtual-Template1
ppp authentication-mode chap domain system
remote address 1.1.1.2
ip address 1.1.1.1 255.255.255.0
#
interface GigabitEthernet 1/0/2
port link-mode route
pppoe-server bind virtual-template 1
#
domain system
authentication ppp local
#
domain default enable system
#
local-user user1 class network
password cipher $c$3$d3q9pKjQeMNyFxOjfKRkD7HF6XDPDFet
service-type ppp
authorization-attribute user-role network-operator
#
Return
· Fat AP:
#
sysname FAT AP
#
dialer-group 1 rule ip permit
#
dhcp enable
#
vlan 1
#
vlan 100
#
dhcp server ip-pool 100
gateway-list 192.1.0.1
network 192.1.0.0 mask 255.255.255.0
#
wlan service-template 1
ssid H3C
#
wlan service-template service
ssid service
vlan 100
service-template enable
#
interface Dialer1
ppp chap password cipher $c$3$y9xXZso6tDA2+FSK8p+0qiC61/eATRxj
ppp chap user user1
dialer bundle enable
dialer-group 1
dialer timer idle 0
dialer timer autodial 60
ip address ppp-negotiate
nat outbound 2000
#
interface Vlan-interface1
pppoe-client dial-bundle-number 1
#
interface Vlan-interface100
ip address 192.1.0.1 255.255.255.0
#
interface WLAN-Radio1/0/1
service-template 1
service-template service
#
interface WLAN-Radio1/0/2
service-template 1
#
interface WLAN-Radio1/0/3
service-template 1
#
ip route-static 1.1.1.0 24 Dialer1
#
acl basic 2000
rule 0 permit source 192.1.0.0 0.0.0.255
#
return
Related documentation
· Network Connectivity Command Reference in H3C Access Points Configuration Guides
· Network Connectivity Configuration Guide in H3C Access Points Configuration Guides
· WLAN Access Command Reference in H3C Access Points Configuration Guides
· WLAN Access Configuration Guide in H3C Access Points Configuration Guides