Исходное сообщение
"задачка по cisco ping vs tracer" Отправлено sergeyfromkomi, 29-Сен-09 09:29
Добрый день! Есть задачка по Cisc-ке... При авторизации (PPPoE) у юзера во внешний мир проходят только tracer-овки(и болше ничего!). Авторизация через freeradius, c присвоением ip адреса(192.168.12.x/32). В чем отличия пакета ping-a от пакета tracert-а ? Current configuration : 3401 bytes ! version 12.4 service timestamps debug datetime localtime service timestamps log datetime localtime no service password-encryption ! hostname PPPoE ! boot-start-marker boot system flash c3725-advipservicesk9-mz.124-5.bin boot-end-marker ! logging reload errors no logging console enable password jjjjjjjjjj ! aaa new-model aaa session-mib disconnect ! ! aaa authentication ppp default local aaa authorization network default local aaa accounting network default none ! aaa session-id common ! resource policy ! clock timezone jjjjj clock summer-time UTC recurring last Sun Mar 0:00 last Sun Oct 0:00 no ip source-route ip cef ! no ip dhcp conflict logging ! ip flow-cache timeout inactive 10 ip flow-cache timeout active 1 vpdn enable ! ! username vvv privilege 15 secret 5 $jjjjjjjjjjjjjjjjjjj ! ! bba-group pppoe PPPoE virtual-template 1 sessions per-vlan limit 1000 ! ! interface Loopback0 description PPPoE users ip address 192.168.12.100 255.255.255.0 ip nat outside ip virtual-reassembly ! interface FastEthernet0/0 description WAN access ip address x.x.x.x 255.255.255.252 no ip redirects no ip unreachables no ip proxy-arp ip nat outside no ip virtual-reassembly ip route-cache policy duplex auto speed auto ! interface Serial0/0 no ip address shutdown clock rate 2000000 ! interface FastEthernet0/1 description connect to catalyst no ip address no ip redirects no ip unreachables no ip proxy-arp duplex auto speed auto pppoe enable no cdp enable ! interface FastEthernet0/1.1 description PPP clients encapsulation dot1Q 1 native no ip redirects ip nat inside ip virtual-reassembly no snmp trap link-status pppoe enable group PPPoE ! interface FastEthernet0/1.2 description Radius and Billing and Admin encapsulation dot1Q 3 ip address 10.14.6.169 255.255.255.224 no snmp trap link-status ! interface Serial0/1 no ip address shutdown clock rate 2000000 ! interface Virtual-Template1 mtu 1400 ip unnumbered Loopback0 ip flow ingress ip flow egress ip nat inside no ip virtual-reassembly no peer default ip address ppp authentication ms-chap-v2 chap ! ip route 0.0.0.0 0.0.0.0 x.x.x.x ip route 192.168.168.0 255.255.255.0 10.14.6.183 ! ip flow-export source FastEthernet0/1.2 ip flow-export version 5 ip flow-export destination 10.14.6.179 9996 ! no ip http server no ip http secure-server ip nat inside source list 100 interface FastEthernet0/0 overload ! no logging trap access-list 1 permit 10.14.6.160 0.0.0.31 access-list 1 deny   any access-list 25 permit any access-list 100 permit ip 192.168.12.0 0.0.0.255 any snmp-server community dfyzdfyzghjcnjnf RO 1 snmp-server enable traps tty ! ! ! radius-server host 192.168.168.202 auth-port 1812 acct-port 1813 radius-server retransmit 0 radius-server timeout 15 radius-server key testing123 radius-server vsa send accounting radius-server vsa send authentication ! control-plane ! ! line con 0 exec-timeout 0 0 logging synchronous terminal-type mon history size 100 line aux 0 exec-timeout 0 0 transport input telnet line vty 0 4 access-class 1 in exec-timeout 0 0 logging synchronous terminal-type mon history size 100 line vty 5 15 access-class 1 in exec-timeout 0 0 logging synchronous terminal-type mon history size 100 ! ntp clock-period 17180613 ntp master 15 ntp server v.v.v.v ! end