Pagina 1 di 1

Cisco 877 autenticazione con ppoa ip dinamico

Inviato: sab 16 mag , 2009 9:10 pm
da TeCer
Salve,
ho un cisco 877 e lo stavo configurando per la mia linea adsl di aruba

Codice: Seleziona tutto

Encapsulation : PPPoA, PPPoverATM
Multiplexing  : VC-BASED
Vpi : 8
Vci : 35
IP: Dinamico
il mio problema è che non viene assegnato nessun indirizzo ip wan, penso sia un problema di qualche comando nell'atm0 o dialer0
vi posto la sh run, vi ringrazio in anticipo per l'aiuto.

Codice: Seleziona tutto

no aaa new-model
ip subnet-zero
no ip domain lookup
ip name-server 208.67.222.222
ip name-server 208.67.220.220
!
! 
 no ip dhcp use vrf connected 
ip dhcp excluded-address 192.168.0.6 192.168.0.254
! 
ip dhcp pool Pool1 
   import all 
   network 192.168.0.0 255.255.255.0 
   default-router 192.168.0.1 
   dns-server 208.67.222.222 208.67.220.220
   lease infinite 
!
interface FastEthernet0  
! 
interface FastEthernet1  
! 
interface FastEthernet2  
! 
interface FastEthernet3 
!
!
interface Vlan1 
ip address 192.168.0.1 255.255.255.0 
no ip redirects 
no ip unreachables 
no ip proxy-arp
ip nat inside 
ip virtual-reassembly 
ip tcp adjust-mss 1360
!
interface ATM0 
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip virtual-reassembly
no ip split-horizon
pvc 8/35 
encapsulation aal5mux ppp dialer
no atm ilmi-keepalive 
dialer pool-member 1
!
dsl operating-mode auto
!
interface Dialer0
description Interfaccia Dialer0/0 - Aruba ADSL 7MB
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
ip tcp header-compression
dialer pool 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username XXX password XXX
!
ip nat translation timeout 420
ip nat translation tcp-timeout 120
ip nat translation pptp-timeout 420
ip nat translation icmp-timeout 1
ip nat translation max-entries 1000
ip nat inside source list 1 interface Dialer0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
no ip http secure-server
! 
! 
access-list 11 remark ************************************ 
access-list 11 remark ACL 11 PER CONTROLLO APLET JAVA 
access-list 11 permit any 
access-list 100 remark ********* ACL per NAT ************************** 
access-list 100 permit ip 192.168.0.0 0.0.0.255 any 
access-list 111 remark ************************************************ 
access-list 111 remark ANTI-SPOOFING 
access-list 111 deny icmp any any redirect log 
access-list 111 deny ip 10.0.0.0 0.255.255.255 any log 
access-list 111 deny ip 172.16.0.0 0.15.255.255 any log 
access-list 111 deny ip 192.168.0.0 0.0.255.255 any log 
access-list 111 deny ip 127.0.0.0 0.255.255.255 any log 
access-list 111 deny ip 224.0.0.0 31.255.255.255 any log 
access-list 111 deny ip host 0.0.0.0 any log 
access-list 111 deny ip any any log 
! 
control-plane 
!
! 
banner motd ^CC 
**************************************************************** 
---------------------------------------------------------------- 
* ***   ROUTER PERIMETRALE ----      ***   * 
---------------------------------------------------------------- 
* WARNING: System is RESTRICTED to authorized personnel ONLY! * 
* Unauthorized use of this system will be logged and * 
* prosecuted to the fullest extent of the law. * 
* * 
* If you are NOT authorized to use this system, LOG OFF NOW! * 
* * 
**************************************************************** 
^C 
! 
!
line con 0
line aux 0
 access-class 23 in
 exec-timeout 5 0
 modem DTR-active
 transport input telnet
line vty 0 4
 access-class 23 in
 exec-timeout 5 0
 transport preferred none
 transport input telnet
!
scheduler max-task-time 5000
end

Inviato: sab 16 mag , 2009 9:32 pm
da Gianremo.Smisek
se non ti viene assegnato l'ip, vuol dire che il PPP non e' salito. Attiva anche l'autenticazione CHAP sotto la dialer0.

Inviato: dom 17 mag , 2009 1:09 pm
da TeCer
ho provato ad inserire anche l'auth chap ma il risultato non cambia.
questa è la dialer0 attuale.

Codice: Seleziona tutto

interface Dialer0
description Interfaccia Dialer0/0 - Aruba ADSL 7MB
ip address negotiated
ip nat outside
encapsulation ppp
ip tcp header-compression
dialer pool 1
no cdp enable 
ppp authentication chap pap callin
ppp chap hostname XXX
ppp chap password XXX
ppp pap sent-username XXX password XXX

Inviato: dom 17 mag , 2009 4:40 pm
da TeCer
ho risolto cosi, posto lo sh run se dovesse servire ad altri utenti.

Codice: Seleziona tutto

no aaa new-model
ip subnet-zero
no ip domain lookup
ip name-server 208.67.222.222
ip name-server 208.67.220.220
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.6 192.168.0.254
!
ip dhcp pool Pool1
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 208.67.222.222 208.67.220.220
lease infinite
!
interface FastEthernet0 
!
interface FastEthernet1 
!
interface FastEthernet2 
!
interface FastEthernet3
!
!
interface Vlan1
ip address 192.168.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1360
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description ADSL Aruba 7MB
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
interface Dialer0
description Interfaccia Dialer0/0 - Aruba ADSL 7MB
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp authentication chap pap callin
ppp pap sent-username XXX password XXX
!
ip nat translation timeout 420
ip nat translation tcp-timeout 120
ip nat translation pptp-timeout 420
ip nat translation icmp-timeout 1
ip nat translation max-entries 1000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static udp 192.168.0.2 4672 interface Dialer0 4672
ip nat inside source static tcp 192.168.0.2 4661 interface Dialer0 4661
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
no ip http secure-server
!
!
access-list 11 remark ************************************
access-list 11 remark ACL 11 PER CONTROLLO APLET JAVA
access-list 11 permit any
access-list 100 remark ********* ACL per NAT **************************
access-list 100 permit ip 192.168.0.0 0.0.0.255 any
access-list 111 remark ************************************************
access-list 111 remark ANTI-SPOOFING
access-list 111 deny icmp any any redirect log
access-list 111 deny ip 10.0.0.0 0.255.255.255 any log
access-list 111 deny ip 172.16.0.0 0.15.255.255 any log
access-list 111 deny ip 192.168.0.0 0.0.255.255 any log
access-list 111 deny ip 127.0.0.0 0.255.255.255 any log
access-list 111 deny ip 224.0.0.0 31.255.255.255 any log
access-list 111 deny ip host 0.0.0.0 any log
access-list 111 deny ip any any log
!
!
line con 0
line aux 0
 access-class 23 in
 exec-timeout 5 0
 modem DTR-active
 transport input telnet
line vty 0 4
 access-class 23 in
 exec-timeout 5 0
 transport preferred none
 transport input telnet
!
scheduler max-task-time 5000
end