Table of Contents

Related Documents

09-H3C SR6600&SR6600-X Routers PPP Configuration Examples

Title	Size	Download
09-H3C SR6600&SR6600-X Routers PPP Configuration Examples	196.90 KB


H3C SR6600&SR6600-X Routers
PPP Configuration Examples

SR6600 Router Series

SR6600-X Router Series

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.

Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.

The information in this document is subject to change without notice.

Contents

Introduction· 1

Prerequisites· 1

Example: Configuring MP and CHAP·· 1

Network requirements· 1

Software version used· 1

Configuration restrictions and guidelines· 1

Configuration procedures· 1

Configuring Device A· 1

Configuring Device B· 2

Verifying the configuration· 3

Configuration files· 4

Example: Configuring PPPoE server IP address assignment through a remote DHCP server 5

Network requirements· 5

Software version used· 5

Configuration restrictions and guidelines· 5

Configuration procedures· 6

Configuring Device A· 6

Configuring Device B· 7

Verifying the configuration· 7

Configuration files· 13

Introduction

This document provides PPP configuration examples.

Prerequisites

This document is not restricted to specific software or hardware versions.

The configuration examples in this document were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

This document assumes that you have basic knowledge of PPP, MP, PPPoE, and DHCP.

Example: Configuring MP and CHAP

Network requirements

As shown in Figure 1, bind Serial 2/1/0 and Serial 2/1/1 into an MP bundle on an MP-group interface. Specify CHAP as the authentication mode for each PPP link.

Figure 1 Network diagram

Software version used

This configuration example was created and verified on Release R7607.

Configuration restrictions and guidelines

When you configure MP and CHAP, follow these restrictions and guidelines:

· The username and password on each end must be the same for CHAP authentication.

· To bring up the configured serial interfaces, use the shutdown and then undo shutdown commands.

· Make sure you create a network access user.

Configuration procedures

Configuring Device A

# Create a user account for Device B.

<DeviceA> system-view

[DeviceA] local-user userb class network

# Set a password for the user account.

[DeviceA-luser-network-userb] password simple hello

# Set the service type of the user account to PPP.

[DeviceA-luser-network-userb] service-type ppp

[DeviceA-luser-network-userb] quit

# Enable PPP encapsulation on Serial 2/1/0.

[DeviceA] interface serial 2/1/0

[DeviceA-Serial2/1/0] link-protocol ppp

# Set the authentication mode to CHAP.

[DeviceA-Serial2/1/0] ppp authentication-mode chap domain system

[DeviceA-Serial2/1/0] quit

# Enable PPP encapsulation on Serial 2/1/1.

[DeviceA] interface serial 2/1/1

[DeviceA-Serial2/1/1] link-protocol ppp

# Set the authentication mode to CHAP.

[DeviceA-Serial2/1/1] ppp authentication-mode chap domain system

[DeviceA-Serial2/1/1] quit

# Configure local authentication for the PPP user in the default ISP domain system.

[DeviceA] domain system

[DeviceA-isp-system] authentication ppp local

# Create an MP-group interface, and assign an IP address to it.

<DeviceA> system-view

[DeviceA] interface mp-group 3/0/1

[DeviceA-MP-group3/0/1] ip address 1.1.1.1 24

[DeviceA-MP-group3/0/1] quit

# Configure interface Serial 2/1/0.

[DeviceA] interface serial 2/1/0

[DeviceA-Serial2/1/0] ppp mp mp-group 3/0/1

[DeviceA-Serial2/1/0] shutdown

[DeviceA-Serial2/1/0] undo shutdown

[DeviceA-Serial2/1/0] quit

# Configure interface Serial 2/1/1.

[DeviceA] interface serial 2/1/1

[DeviceA-Serial2/1/1] ppp mp mp-group 3/0/1

[DeviceA-Serial2/1/1] shutdown

[DeviceA-Serial2/1/1] undo shutdown

[DeviceA-Serial2/1/1] quit

Configuring Device B

# Enable PPP encapsulation on Serial 2/1/0.

<DeviceB> system-view

[DeviceB] interface serial 2/1/0

[DeviceB-Serial2/1/0] link-protocol ppp

# Configure the username and password for CHAP authentication.

[DeviceB-Serial2/1/0] ppp chap user userb

[DeviceB-Serial2/1/0] ppp chap password simple hello

[DeviceB-Serial2/1/0] quit

# Enable PPP encapsulation on Serial 2/1/1.

[DeviceB] interface serial 2/1/1

[DeviceB-Serial2/1/1] link-protocol ppp

# Configure the username and password for CHAP authentication.

[DeviceB-Serial2/1/1] ppp chap user userb

[DeviceB-Serial2/1/1] ppp chap password simple hello

[DeviceB-Serial2/1/1] quit

# Create an MP-group interface, and assign an IP address to it.

[DeviceB] interface mp-group 3/0/1

[DeviceB-MP-group3/0/1] ip address 1.1.1.2 24

[DeviceB-MP-group3/0/1] quit

# Add interface Serial 2/1/0 to MP-group 3/0/1, and bring up the interface.

[DeviceB] interface serial 2/1/0

[DeviceB-Serial2/1/0] link-protocol ppp

[DeviceB-Serial2/1/0] ppp mp mp-group 3/0/1

[DeviceB-Serial2/1/0] shutdown

[DeviceB-Serial2/1/0] undo shutdown

[DeviceB-Serial2/1/0] quit

# Add interface Serial 2/1/1 to MP-group 3/0/1, and bring up the interface.

[DeviceB] interface serial 2/1/1

[DeviceB-Serial2/1/1] link-protocol ppp

[DeviceB-Serial2/1/1] ppp mp mp-group 3/0/1

[DeviceB-Serial2/1/1] shutdown

[DeviceB-Serial2/1/1] undo shutdown

[DeviceB-Serial2/1/1] quit

Verifying the configuration

# Display MP information on Device A.

[DeviceA] display ppp mp

Template: MP-group3/0/1

max-bind: 16, fragment: enabled, min-fragment: 128

Master link: MP-group3/0/1, Active members: 2, Bundle Multilink

Peer's endPoint descriptor: MP-group3/0/1

Sequence format: long (rcv)/long (sent)

Bundle Up Time: 2017/07/22 16:51:40:835

0 lost fragments, 5 reordered, 0 unassigned, 0 interleaved

Sequence: 4 (rcv)/5 (sent)

Active member channels: 2 members

Serial2/1/0 Up-Time:2017/07/22 16:51:40:836

Serial2/1/1 Up-Time:2017/07/22 16:51:53:542

# Display information about interface MP-group 3/0/1 on Device A.

[DeviceA] display interface mp-group 3/0/1

MP-group3/0/1

Current state: UP

Line protocol state: UP

Description: MP-group3/0/1 Interface

Bandwidth: 128kbps

Maximum Transmit Unit: 1500

Hold timer: 10 seconds

Internet Address is 1.1.1.1/24 Primary

Link layer protocol: PPP

LCP: opened, MP: opened, IPCP: opened

Physical: MP, baudrate: 128000 bps

Output queue - Urgent queuing: Size/Length/Discards 0/100/0

Output queue - Protocol queuing: Size/Length/Discards 0/500/0

Output queue - FIFO queuing: Size/Length/Discards 0/75/0

Last clearing of counters: Never

Last 300 seconds input rate: 1 bytes/sec, 8 bits/sec, 0 packets/sec

Last 300 seconds output rate: 1 bytes/sec, 8 bits/sec, 0 packets/sec

Input: 8 packets, 466 bytes, 0 drops

Output: 8 packets, 456 bytes, 0 drops

# Ping Device B from Device A.

[DeviceA] ping 1.1.1.2

Ping 1.1.1.2 (1.1.1.2): 56 data bytes, press CTRL_C to break

56 bytes from 1.1.1.2: icmp_seq=0 ttl=255 time=25.749 ms

56 bytes from 1.1.1.2: icmp_seq=1 ttl=255 time=25.751 ms

56 bytes from 1.1.1.2: icmp_seq=2 ttl=255 time=25.521 ms

56 bytes from 1.1.1.2: icmp_seq=3 ttl=255 time=25.512 ms

56 bytes from 1.1.1.2: icmp_seq=4 ttl=255 time=25.599 ms

--- Ping statistics for 1.1.1.2 ---

5 packets transmitted, 5 packets received, 0.0% packet loss

round-trip min/avg/max/std-dev = 25.512/25.626/25.751/0.105 ms

<DeviceA>%Jul 22 17:08:22:460 2017 DeviceA PING/6/PING_STATISTICS: Ping statisti

cs for 1.1.1.2: 5 packets transmitted, 5 packets received, 0.0% packet loss, rou

nd-trip min/avg/max/std-dev = 25.512/25.626/25.751/0.105 ms.

Configuration files

· Device A:

interface Serial2/1/0

ppp authentication-mode chap domain system

ppp mp MP-group3/0/1

interface Serial2/1/1

ppp authentication-mode chap domain system

ppp mp MP-group3/0/1

interface MP-group3/0/1

ip address 1.1.1.1 255.255.255.0

local-user 123 class network

password cipher $c$3$5ulb/vg58eiBIm5EnilnsZ2cS2Cmwg==

service-type ppp

authorization-attribute user-role network-operator

· Device B:

interface Serial2/1/0

ppp chap password cipher $c$3$4kD4T3bLZ/lngijhEKIS70/oTbNSkw==

ppp chap user 123

ppp mp MP-group3/0/1

interface Serial2/1/1

ppp chap password cipher $c$3$mVlcV3W+YQBgmxKePKpZV9tTcaFhXg==

ppp chap user 123

ppp mp MP-group3/0/1

interface MP-group3/0/1

ip address 1.1.1.2 255.255.255.0

Example: Configuring PPPoE server IP address assignment through a remote DHCP server

Network requirements

As shown in Figure 2, Device A acts as the PPPoE server to provide access control and CHAP authentication for Host A. Device B acts as the DHCP server. Configure Device A as a DHCP relay agent to relay an IP address from Device B to Host A.

Figure 2 Network diagram

Software version used

The configuration example was created and verified on Release R7607.

Configuration restrictions and guidelines

When you configure the PPPoE server, follow these restrictions and guidelines:

· The username and password configured on the PPPoE server and the host must be the same for CHAP authentication.

· Make sure you create a network access user account for the PPPoE user.

Configuration procedures

Configuring Device A

# Assign IP addresses to interfaces GigabitEthernet 2/1/0 and GigabitEthernet 2/1/1.

<DeviceA> system-view

[DeviceA] interface gigabitethernet 2/1/0

[DeviceA-GigabitEthernet2/1/0] ip address 10.1.1.1 24

[DeviceA-GigabitEthernet2/1/0] quit

[DeviceA] interface gigabitethernet 2/1/1

[DeviceA-GigabitEthernet2/1/1] ip address 3.1.1.2 24

[DeviceA-GigabitEthernet2/1/1] quit

# Configure interface Virtual-Template 10 to use CHAP for authentication and use a DHCP address pool for IP address assignment.

<DeviceA> system-view

[DeviceA] interface virtual-template 10

[DeviceA-Virtual-Template10] ppp authentication-mode chap domain system

# Assign an IP address to Virtual-Template 10.

[DeviceA-Virtual-Template10] ip address 1.1.1.1 32

[DeviceA-Virtual-Template10] quit

# Enable the PPPoE server on GigabitEthernet 2/1/0, and bind the interface to Virtual-Template 10.

[DeviceA] interface gigabitethernet 2/1/0

[DeviceA-GigabitEthernet2/1/0] pppoe-server bind virtual-template 10

[DeviceA-GigabitEthernet2/1/0] quit

# Enable DHCP.

[DeviceA] dhcp enable

# Enable relay entry recording on the relay agent.

[DeviceA] dhcp relay client-information record

# Create a DHCP relay address pool pool1.

[DeviceA] dhcp server ip-pool pool1

# Specify a gateway address for the DHCPv4 clients in pool1.

[DeviceA-dhcp-pool-pool1] gateway-list 2.2.2.2 export-route

# Specify a DHCP server for pool1.

[DeviceA-dhcp-pool-pool1] remote-server 3.1.1.1

[DeviceA-dhcp-pool-pool1] quit

# Configure a PPPoE user.

[DeviceA] local-user user1 class network

[DeviceA-luser-network-user1] password simple pass1

[DeviceA-luser-network-user1] service-type ppp

[DeviceA-luser-network-user1] quit

# Configure local authentication for the PPP user in the default ISP domain system.

[DeviceA] domain system

[DeviceA-isp-system] authentication ppp local

# Associate ISP domain system with pool 1.

[DeviceA-isp-system] authorization-attribute ip-pool pool1

[DeviceA-isp-system] quit

Configuring Device B

# Assign an IP address to GigabitEthernet 2/1/1.

<DeviceA> system-view

[DeviceA] interface gigabitethernet 2/1/1

[DeviceA-GigabitEthernet2/1/1] ip address 3.1.1.1 24

[DeviceA-GigabitEthernet2/1/1] quit

# Enable DHCP.

[DeviceB] dhcp enable

# Create DHCP address pool pool1, and specify a primary subnet and a gateway address for DHCP clients.

[DeviceB] dhcp server ip-pool pool1

[DeviceB-dhcp-pool-pool1] network 2.2.2.0 24

[DeviceB-dhcp-pool-pool1] gateway-list 2.2.2.1

[DeviceB-dhcp-pool-pool1] quit

# Configure a static route to the PPPoE server.

[DeviceB] ip route-static 2.2.2.0 24 3.1.1.2

Verifying the configuration

1. Creating an Internet connection on Host A.

a. Right click My Network Places, select Properties from the list.

The Network Connections page appears, as shown in Figure 3.

Figure 3 The Network Connections page

b. Double click New Connection Wizard. On the wizard that appears, click Next.

c. On the window that appears, select Connect to the Internet, and click Next, as shown in Figure 4.

Figure 4 Selecting network connection type

d. On the window that appears, select Connect using a broadband connection that requires a user name and password, and click Next, as shown in Figure 5.

Figure 5 Selecting Internet Connection method