Заработала!
Вот реальный конфиг!service timestamps debug datetime localtime
service timestamps log datetime localtime
no service password-encryption
!
hostname C7206.MTS
!
boot-start-marker
boot-end-marker
!
enable password 123
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp PPPoE local
aaa authorization exec default local
aaa authorization network default local
aaa authorization network PPPoE local
aaa accounting delay-start
aaa accounting update periodic 5
!
aaa session-id common
!
resource policy
!
ip subnet-zero
ip cef
!
!
vpdn enable
!
!
username 456 password 0 456
!
!
bba-group pppoe global
virtual-template 1
sessions max limit 10
ac name nas1
sessions per-mac limit 1
sessions per-vlan limit 5
sessions auto cleanup
!
!
interface Loopback0
ip address 10.10.10.1 255.255.255.255
!
interface GigabitEthernet0/1
ip address 192.168.1.50 255.255.255.0
duplex auto
speed auto
media-type rj45
no negotiation auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
media-type rj45
no negotiation auto
pppoe enable group global
no cdp enable
!
interface GigabitEthernet0/3
no ip address
duplex auto
speed auto
media-type rj45
no negotiation auto
!
interface Virtual-Template1
mtu 1492
ip unnumbered Loopback0
ip access-group 100 in
ip access-group 100 out
no ip route-cache cef
no ip route-cache
peer default ip address pool PPPoE
ppp max-bad-auth 3
ppp authentication chap pap callin PPPoE
ppp authorization PPPoE
ppp ipcp dns ххх ххх
ppp timeout retry 3
ppp timeout authentication 45
!
ip local pool PPPoE 10.10.10.2 10.10.10.100
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1 (шлюз выхода в мир)
no ip http server
no ip http secure-server
!
!
logging alarm informational
snmp-server community public RO 1
snmp-server community private RW 1
!
!
control-plane
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
access-class 1 in
exec-timeout 0 0
!
!
end
Но теперь иная задача! Нужно организовать такую сеть:
_____
клиент--| |
| |trunk
клиент--|swich|------cisco7206---internet
| |
клиент--|_____|
Для каждого клиента создавать interface Virtual-Template ?
Как обезопасить доступ на рутер клиентов?
Нужны ли vlan-ы?
