如何實現Juniper JunOS PPPOE配置

這篇文章給大家介紹如何實現Juniper JunOS PPPOE配置，內容非常詳細，感興趣的小伙伴們可以參考借鑒，希望對大家能有所幫助。

1）選擇接口fe-0/0/1作為PPPOE撥號接口的物理接口，并封裝成pppoe

set interfaces fe-0/0/1 unit 0 encapsulation ppp-over-ether

2）配置PPPOE接口的PP0.0參數

set interfaces pp0 unit 0 pppoe-options underlying-interface fe-0/0/1.0

set interfaces pp0 unit 0 pppoe-options idle-timeout 0

set interfaces pp0 unit 0 pppoe-options auto-reconnect 3

set interfaces pp0 unit 0 pppoe-options client

3）配置MTU與MSS

set interfaces pp0 unit 0 family inet mtu 1492

set security flow tcp-mss all-tcp mss 1350

4）配置pppoe接口的地址為negotiate-address

set interfaces pp0 unit 0 family inet negotiate-address

5）配置PPPOE pap 認證

set interfaces pp0 unit 0 ppp-options chap default-chap-secret 12345678

set interfaces pp0 unit 0 ppp-options chap local-name szXXXXXXXX@163.gd

set interfaces pp0 unit 0 ppp-options chap no-rfc2486

set interfaces pp0 unit 0 ppp-options chap passive

set interfaces pp0 unit 0 ppp-options pap default-password 12345678

set interfaces pp0 unit 0 ppp-options pap local-name szXXXXXXXX@163.gd

set interfaces pp0 unit 0 ppp-options pap local-password 12345678

set interfaces pp0 unit 0 ppp-options pap passive

6）配置缺省路由

set routing-options static route 0.0.0.0/0 next-hop pp0.0

7）設置區域

set security zones security-zone untrust interfaces pp0.0

set security zones security-zone untrust interfaces fe-0/0/1.0

8）Interface based Nat 基于接口的源地址轉換

內部網段請自行更改，別全部復制。。。

set security nat source rule-set trust-to-untrust from zone trust

set security nat source rule-set trust-to-untrust to zone untrust

set security nat source rule-set trust-to-untrust rule source-nat-rule match source-address 192.168.10.0/24

set security nat source rule-set trust-to-untrust rule source-nat-rule match source-address 172.16.0.0/16

set security nat source rule-set trust-to-untrust rule source-nat-rule then source-nat interface

關于如何實現Juniper JunOS PPPOE配置就分享到這里了，希望以上內容可以對大家有一定的幫助，可以學到更多知識。如果覺得文章不錯，可以把它分享出去讓更多的人看到。