Доброе время суток всем! Есть циска 2651XM вот в таком виде:
(syslog) IOS (tm) C2600 Software (C2600-IS-M), Version 12.2(13)T4, RELEASE SOFTWARE (fc2)
(console) System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)
(console) Copyright (c) 2002 by cisco Systems, Inc.
(console) C2600 platform with 65536 Kbytes of main memory
Поставлена задача раздавать клиентам интернет через PPPoE с примененим NAT
fa0/0 смотрит в интернет fa0/1 смотрит в локалку
В чем собсно проблема: клиенты подключаются,
авторизируются, но дальше цисковских интерфейсов ничего не пингуется.
Сислог пишет следующее:
(syslog) GST: CEF-IDB: Virtual-Template1 coming up failed: interface not up
(syslog) GST: CEF-IDB: Virtual-Access2 coming up failed: interface not up
Я уже все перепробовал, подсобите плз! Ниже мой конфиг:
!
version 12.2
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname Cisco2651
!
logging buffered 16384 debugging
no logging console
enable secret 5 *************************
!
username ***** privilege 8 password 7 *********************
username ***** privilege 15 password 7 *********************
username ***** privilege 8 password 7 *********************
clock timezone GST **
clock summer-time GST recurring last Sun Mar 1:00 last Sun Oct 1:00
aaa new-model
!
!
aaa authentication login default group local
aaa authentication ppp radius group radius
aaa authorization network default group radius
aaa accounting network default start-stop group radius
aaa accounting update periodic 5
aaa session-id common
ip subnet-zero
no ip source-route
ip rcmd rcp-enable
ip rcmd rsh-enable
ip rcmd remote-host ***** 172.17.0.4 ***** enable 8
ip rcmd remote-host ***** 172.17.0.4 ***** enable
ip rcmd remote-username *****
ip cef
!
!
no ip domain lookup
!
no ip bootp server
vpdn enable
!
vpdn-group 1
accept-dialin
protocol pppoe
virtual-template 1
pppoe limit per-mac 1
!
!
!
!
!
!
!
!
!
!
!
!
mta receive maximum-recipients 0
!
!
!
!
interface Loopback0
ip address 192.168.0.1 255.255.192.0
!
interface Null0
no ip unreachables
!
interface FastEthernet0/0
description connected to Internet
ip address xxx.xxx.xxx.xxx 255.255.255.252
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
description connected to PrivateLAN
ip address 172.17.0.10 255.255.192.0
duplex auto
speed auto
pppoe enable
!
interface virtual-template 1
ip unnumbered Loopback0
ip access-group 1 in
ip accounting output-packets
ip nat inside
ppp authentication chap radius
mtu 1492
!
router rip
version 2
passive-interface FastEthernet0/0
network 192.168.0.0
no auto-summary
!
ip nat inside source list 1 interface FastEthernet0/0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
no ip http server
!
!
logging trap debugging
logging source-interface Loopback0
logging 172.17.0.4
access-list 1 permit 192.168.0.0 0.0.63.255
access-list 1 deny any
!
snmp-server community ****** RO
snmp-server enable traps tty
radius-server host 172.17.0.3 auth-port 1812 acct-port 1812
radius-server attribute 8 include-in-access-req
radius-server key 7 ***************************
radius-server authorization permit missing Service-Type
radius-server vsa send accounting
call rsvp-sync
!
!
mgcp profile default
!
!
!
dial-peer cor custom
!
!
!
privilege exec level 8 show ip accounting
privilege exec level 1 show ip
privilege exec level 1 show
privilege exec level 8 clear ip accounting
privilege exec level 8 clear ip
privilege exec level 8 clear
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
password 7 ******************************
!
ntp authentication-key **** md5 ****** 0
ntp authenticate
ntp trusted-key ****
ntp access-group peer 20
ntp server 172.17.0.1 key ****
!
end