Tweet
Adsl-lab
ADSL-LAB
ISP ABC triền khai hệ thống cung cấp dịch vụ ADSL cho các thuê bao, địa chỉ cung cấp xuống các thuê bao sẽ nằm trong phạm vi 205.1.1.2 đếm 205.1.1.100, sử dụng công nghệ PPPoE và xác thực người dùng dùng PAP.
Các thuê bao đầu cuối sẽ dùng DHCP để cấp cho người dùng của mình, đồng thời thực hiện cơ chế NAT – overload để mọi người trong LAN có thể đi được ra Internet
Cấu hình hệ thống
ISP1:
ISP1#sh run
Building configuration...
Current configuration : 1304 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISP1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
!
!
ip cef
no ip dhcp use vrf connected
!
!
no ip ips deny-action ips-interface
vpdn enable
vpdn ip udp ignore checksum
!
vpdn-group ADSL-SERVICE
accept-dialin
protocol pppoe
virtual-template 1
!
!
no ftp-server write-enable
!
!
!
username vnpro password 0 vnpro123
!
!
no crypto isakmp ccm
!
!
!
!
interface Loopback0
ip address 205.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 10.10.10.1 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
pppoe enable
!
interface Serial0/1/0
no ip address
shutdown
clockrate 2000000
!
interface Virtual-Template1
ip unnumbered Loopback0
peer default ip address pool CLIENT-POOL
ppp authentication pap
ppp ipcp dns 215.1.1.1 215.1.1.2
!
ip local pool CLIENT-POOL 205.1.1.2 205.1.1.100
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.10.2
!
!
ip http server
no ip http secure-server
!
!
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
privilege level 15
no login
!
scheduler allocate 20000 1000
!
end
ISP1#
CPE:
CPE#sh run
Building configuration...
Current configuration : 1299 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CPE
!
logging queue-limit 100
!
ip subnet-zero
!
!
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool DHCP
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
!
! T
vpdn enable
!
vpdn-group CLIENT /********khong can
request-dialin /******* khong can
protocol pppoe /******* khong can
!
mpls ldp logging neighbor-changes
!
!
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
mta receive maximum-recipients 0
!
!
!
!
interface ATM0/0
mac-address 0008.e354.8860
no ip address
no atm ilmi-keepalive
pvc 8/35
pppoe-client dial-pool-number 1
!
dsl operating-mode auto
!
interface Ethernet0/0
ip address 10.10.10.1 255.255.255.0
ip nat inside
half-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface Dialer1
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
ppp pap sent-username vnpro password 0 vnpro123
ppp ipcp dns request accept
!
ip nat inside source list 1 interface Dialer1 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
!
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end
CPE#
CPE#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
205.1.1.0/32 is subnetted, 2 subnets
C 205.1.1.1 is directly connected, Dialer1
C 205.1.1.2 is directly connected, Dialer1
10.0.0.0/24 is subnetted, 1 subnets
C 10.10.10.0 is directly connected, Ethernet0/0
S* 0.0.0.0/0 is directly connected, Dialer1
CPE#
ISP1#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
205.1.1.0/32 is subnetted, 2 subnets
C 205.1.1.1 is directly connected, Loopback0
C 205.1.1.2 is directly connected, Virtual-Access1.1
ISP1#
ISP1#
CPE#sh ds
CPE#sh dsl
CPE#sh dsl in
CPE#sh dsl interface atm0/0
Alcatel 20150 chipset information
ATU-R (DS) ATU-C (US)
Modem Status: Showtime (DMTDSL_SHOWTIME)
DSL Mode: ITU G.992.1 (G.DMT)
ITU STD NUM: 0x01 0x1
Vendor ID: 'ALCB' 'GSPN'
Vendor Specific: 0x0000 0x0004
Vendor Country: 0x00 0x00
Capacity Used: 78% 107%
Noise Margin: 14.5 dB 6.0 dB
Output Power: 8.0 dBm 10.0 dBm
Attenuation: 0.0 dB 1.0 dB
Defect Status: None None
Last Fail Code: None
Selftest Result: 0x00
Subfunction: 0x15
Interrupts: 3990 (0 spurious)
PHY Access Err: 0
Activations: 2
Init FW: embedded
Operation FW: embedded
SW Version: 3.8131
FW Version: 0x1A04
Interleave Fast Interleave Fast
Speed (kbps): 8064 0 864 0
Reed-Solomon EC: 0 0 29540 0
CRC Errors: 10 0 1 0
Header Errors: 9 0 0 0
Bit Errors: 0 0
BER Valid sec: 0 0
BER Invalid sec: 0 0
DMT Bits Per Bin
00: 0 0 0 0 0 0 0 8 8 9 B C C C D D
10: D D D D D C C B B A A 9 9 9 0 0
20: 0 0 0 0 0 0 4 5 6 7 7 8 8 9 9 9
30: A A A A A A A B B B B B B B B B
40: 0 B B B B B B B B B B B B B B B
50: B B B B B B B B B B B B B B 2 C
60: B B B B B B B B B B B B B B B B
70: B B B B B B B B B B B B B B B B
80: B B B B B B B B B B B B B B B B
90: B B B B B B B B B B B B B B B B
A0: B B B B B B B B B B B B B B B B
B0: B B B B B B B B B B B B B B B B
C0: B B B B B B B B B B B B B B B B
D0: B B B B B B B B B B B A A A A A
E0: A A A A A A A A A A A 9 9 8 7 6
F0: 5 4 5 4 3 0 0 0 0 0 0 0 0 0 0 0
DSL: Training log buffer capability is not enabled
CPE#
CPE#
*Mar 1 02:42:55.905: %DIALER-6-BIND: Interface Vi2 bound to profile Di1
*Mar 1 02:42:55.909: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up
*Mar 1 02:42:58.998: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up
CPE#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 10.10.10.1 YES manual up up
Serial0/0 unassigned YES unset administratively down down
Virtual-Access1 unassigned YES unset up up
Virtual-Access2 unassigned YES unset up up
Dialer1 205.1.1.2 YES IPCP up up
ATM0/0 unassigned YES unset up up
CPE#
ISP1#sh ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 10.10.10.1 YES manual up down
FastEthernet0/1 unassigned YES NVRAM up up
Serial0/1/0 unassigned YES NVRAM administratively down down
Virtual-Access1 unassigned YES unset up up
Virtual-Access1.1 205.1.1.1 YES TFTP up up
Virtual-Template1 205.1.1.1 YES TFTP down down
Virtual-Access2 unassigned YES unset down down
Loopback0 205.1.1.1 YES manual up up
ISP1#
CPE#sh ip dhcp import
Address Pool Name: DHCP
Domain Name Server(s): 215.1.1.1 215.1.1.2
CPE#
CPE#ping 205.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 205.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 41/43/44 ms
CPE#
ISP ABC triền khai hệ thống cung cấp dịch vụ ADSL cho các thuê bao, địa chỉ cung cấp xuống các thuê bao sẽ nằm trong phạm vi 205.1.1.2 đếm 205.1.1.100, sử dụng công nghệ PPPoE và xác thực người dùng dùng PAP.
Các thuê bao đầu cuối sẽ dùng DHCP để cấp cho người dùng của mình, đồng thời thực hiện cơ chế NAT – overload để mọi người trong LAN có thể đi được ra Internet
Cấu hình hệ thống
ISP1:
ISP1#sh run
Building configuration...
Current configuration : 1304 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISP1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
!
!
ip cef
no ip dhcp use vrf connected
!
!
no ip ips deny-action ips-interface
vpdn enable
vpdn ip udp ignore checksum
!
vpdn-group ADSL-SERVICE
accept-dialin
protocol pppoe
virtual-template 1
!
!
no ftp-server write-enable
!
!
!
username vnpro password 0 vnpro123
!
!
no crypto isakmp ccm
!
!
!
!
interface Loopback0
ip address 205.1.1.1 255.255.255.255
!
interface FastEthernet0/0
ip address 10.10.10.1 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
pppoe enable
!
interface Serial0/1/0
no ip address
shutdown
clockrate 2000000
!
interface Virtual-Template1
ip unnumbered Loopback0
peer default ip address pool CLIENT-POOL
ppp authentication pap
ppp ipcp dns 215.1.1.1 215.1.1.2
!
ip local pool CLIENT-POOL 205.1.1.2 205.1.1.100
ip classless
ip route 0.0.0.0 0.0.0.0 10.10.10.2
!
!
ip http server
no ip http secure-server
!
!
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
privilege level 15
no login
!
scheduler allocate 20000 1000
!
end
ISP1#
CPE:
CPE#sh run
Building configuration...
Current configuration : 1299 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CPE
!
logging queue-limit 100
!
ip subnet-zero
!
!
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool DHCP
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
!
! T
vpdn enable
!
vpdn-group CLIENT /********khong can
request-dialin /******* khong can
protocol pppoe /******* khong can
!
mpls ldp logging neighbor-changes
!
!
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
mta receive maximum-recipients 0
!
!
!
!
interface ATM0/0
mac-address 0008.e354.8860
no ip address
no atm ilmi-keepalive
pvc 8/35
pppoe-client dial-pool-number 1
!
dsl operating-mode auto
!
interface Ethernet0/0
ip address 10.10.10.1 255.255.255.0
ip nat inside
half-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface Dialer1
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
ppp pap sent-username vnpro password 0 vnpro123
ppp ipcp dns request accept
!
ip nat inside source list 1 interface Dialer1 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
!
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end
CPE#
CPE#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
205.1.1.0/32 is subnetted, 2 subnets
C 205.1.1.1 is directly connected, Dialer1
C 205.1.1.2 is directly connected, Dialer1
10.0.0.0/24 is subnetted, 1 subnets
C 10.10.10.0 is directly connected, Ethernet0/0
S* 0.0.0.0/0 is directly connected, Dialer1
CPE#
ISP1#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
205.1.1.0/32 is subnetted, 2 subnets
C 205.1.1.1 is directly connected, Loopback0
C 205.1.1.2 is directly connected, Virtual-Access1.1
ISP1#
ISP1#
CPE#sh ds
CPE#sh dsl
CPE#sh dsl in
CPE#sh dsl interface atm0/0
Alcatel 20150 chipset information
ATU-R (DS) ATU-C (US)
Modem Status: Showtime (DMTDSL_SHOWTIME)
DSL Mode: ITU G.992.1 (G.DMT)
ITU STD NUM: 0x01 0x1
Vendor ID: 'ALCB' 'GSPN'
Vendor Specific: 0x0000 0x0004
Vendor Country: 0x00 0x00
Capacity Used: 78% 107%
Noise Margin: 14.5 dB 6.0 dB
Output Power: 8.0 dBm 10.0 dBm
Attenuation: 0.0 dB 1.0 dB
Defect Status: None None
Last Fail Code: None
Selftest Result: 0x00
Subfunction: 0x15
Interrupts: 3990 (0 spurious)
PHY Access Err: 0
Activations: 2
Init FW: embedded
Operation FW: embedded
SW Version: 3.8131
FW Version: 0x1A04
Interleave Fast Interleave Fast
Speed (kbps): 8064 0 864 0
Reed-Solomon EC: 0 0 29540 0
CRC Errors: 10 0 1 0
Header Errors: 9 0 0 0
Bit Errors: 0 0
BER Valid sec: 0 0
BER Invalid sec: 0 0
DMT Bits Per Bin
00: 0 0 0 0 0 0 0 8 8 9 B C C C D D
10: D D D D D C C B B A A 9 9 9 0 0
20: 0 0 0 0 0 0 4 5 6 7 7 8 8 9 9 9
30: A A A A A A A B B B B B B B B B
40: 0 B B B B B B B B B B B B B B B
50: B B B B B B B B B B B B B B 2 C
60: B B B B B B B B B B B B B B B B
70: B B B B B B B B B B B B B B B B
80: B B B B B B B B B B B B B B B B
90: B B B B B B B B B B B B B B B B
A0: B B B B B B B B B B B B B B B B
B0: B B B B B B B B B B B B B B B B
C0: B B B B B B B B B B B B B B B B
D0: B B B B B B B B B B B A A A A A
E0: A A A A A A A A A A A 9 9 8 7 6
F0: 5 4 5 4 3 0 0 0 0 0 0 0 0 0 0 0
DSL: Training log buffer capability is not enabled
CPE#
CPE#
*Mar 1 02:42:55.905: %DIALER-6-BIND: Interface Vi2 bound to profile Di1
*Mar 1 02:42:55.909: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up
*Mar 1 02:42:58.998: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up
CPE#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 10.10.10.1 YES manual up up
Serial0/0 unassigned YES unset administratively down down
Virtual-Access1 unassigned YES unset up up
Virtual-Access2 unassigned YES unset up up
Dialer1 205.1.1.2 YES IPCP up up
ATM0/0 unassigned YES unset up up
CPE#
ISP1#sh ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 10.10.10.1 YES manual up down
FastEthernet0/1 unassigned YES NVRAM up up
Serial0/1/0 unassigned YES NVRAM administratively down down
Virtual-Access1 unassigned YES unset up up
Virtual-Access1.1 205.1.1.1 YES TFTP up up
Virtual-Template1 205.1.1.1 YES TFTP down down
Virtual-Access2 unassigned YES unset down down
Loopback0 205.1.1.1 YES manual up up
ISP1#
CPE#sh ip dhcp import
Address Pool Name: DHCP
Domain Name Server(s): 215.1.1.1 215.1.1.2
CPE#
CPE#ping 205.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 205.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 41/43/44 ms
CPE#