公告

文章

评论

留言

连接

信息

登陆

搜索

2008-8-1 13:51:49
PPTP VPN

VPN 2441 作为 PPTP VPN 的服务器端,配置,show run ,以及  debug 信息如下。

这是拨通时候的debug信息。

*Mar  1 00:40:19.283: ppp2 PPP: Using vpn set call direction

*Mar  1 00:40:19.283: ppp2 PPP: Treating connection as a callin

*Mar  1 00:40:19.287: ppp2 PPP: Session handle[D2000003] Session id[2]

*Mar  1 00:40:19.479: ppp2 PPP: Authorization required

*Mar  1 00:40:19.967: ppp2 MS-CHAP: O CHALLENGE id 1 len 21 from "R1      "

*Mar  1 00:40:20.075: ppp2 MS-CHAP: I RESPONSE id 1 len 62 from "11111111"

*Mar  1 00:40:20.079: ppp2 PPP: Sent MSCHAP LOGIN Request

*Mar  1 00:40:20.095: ppp2 PPP: Received LOGIN Response PASS

*Mar  1 00:40:20.143: Vi2.1 PPP: Sent LCP AUTHOR Request

*Mar  1 00:40:20.147: Vi2.1 PPP: Sent IPCP AUTHOR Request

R1#

*Mar  1 00:40:20.151: Vi2.1 LCP: Received AAA AUTHOR Response PASS

*Mar  1 00:40:20.155: Vi2.1 IPCP: Received AAA AUTHOR Response PASS

*Mar  1 00:40:20.159: Vi2.1 MS-CHAP: O SUCCESS id 1 len 4

 

配置如下

R1(config)#int e1/0

R1(config-if)#ip add 172.16.99.2 255.255.0.0

R1(config-if)#end

R1#show ip int

*Mar  1 00:05:11.435: %SYS-5-CONFIG_I: Configured from console by console

R1#show ip int bri

Interface                  IP-Address      OK? Method Status                Protocol

Ethernet0/0                unassigned      YES unset  administratively down down   

Ethernet1/0                172.16.99.2     YES manual up                    up     

R1#ping 172.16.99.1                               //本机回环地址 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.99.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/43/68 ms

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#int e1/0

R1(config-if)#p?

pagp  pppoe  pppoe-client  priority-group

 

R1(config-if)#pp

R1(config-if)#pppoe ?

  enable  Enable pppoe

 

R1(config-if)#pppoe en

R1(config-if)#pppoe enable     打了这条命令也可以          

R1(config-if)#exit

R1(config)#int virtual-Template 1

R1(config-if)#ppp authentication ms-chap            

R1(config-if)#peer default ip address pool vpndhcp     这里少这一条命令,后面补上了

R1(config-if)#encapsulation ppp                                    

R1(config-if)#ip address 192.1.1.1 255.255.255.0

R1(config-if)#no shu

R1(config-if)#exit

R1(config)#ip local

R1(config)#ip local pool vpndhcp 192.1.1.2 192.1.1.5

R1(config)#int lo 0

R1(config-if)#ip add 192.1.1.6 255.255.255.0

% 192.1.1.0 overlaps with Virtual-Template1

R1(config-if)#exit

R1(config)#vpdn en

R1(config)#vpdn enable

R1(config)#vpdn-group 1

R1(config-vpdn)#accept-dialin

R1(config-vpdn-acc-in)#protocol ?

  any    Use any protocol

  l2f    Use L2F

  l2tp   Use L2TP

  pppoe  Use PPPoE

  pptp   Use PPTP

 

R1(config-vpdn-acc-in)#protocol pptp

R1(config-vpdn-acc-in)#exit

R1(config-vpdn)#^Z

R1(config)#int virtual-template 1

R1(config-if)#peer default ip address pool vpndhcp  

R1(config-if)#exit

R1(config)#username 11111111 password 11111111

R1(config)#end

R1#show run

Building configuration...

 

*Mar  1 00:19:32.379: %SYS-5-CONFIG_I: Configured from console by console

Current configuration : 970 bytes

!

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname R1

!

boot-start-marker

boot-end-marker

!

!

no aaa new-model

ip subnet-zero

!

!

no ip domain lookup

!

ip cef

ip audit po max-events 100

vpdn enable

!        

vpdn-group 1

! Default PPTP VPDN group

 accept-dialin

  protocol pptp

  virtual-template 1

!

username 11111111 password 0 11111111

!

interface Loopback0

 no ip address

!

interface Ethernet0/0

 no ip address

 shutdown

 half-duplex

!

interface Ethernet1/0

 ip address 172.16.99.2 255.255.0.0

 half-duplex

 pppoe enable

!

interface Virtual-Template1

 ip address 192.1.1.1 255.255.255.0

 peer default ip address pool vpndhcp

 ppp authentication ms-chap

!

ip local pool vpndhcp 192.1.1.2 192.1.1.5

ip http server

no ip http secure-server

ip classless

!

line con 0

 exec-timeout 0 0

 logging synchronous

line aux 0

line vty 0 4

!

!

end

 

R1#

*Mar  1 00:22:33.191: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up

R1#

*Mar  1 00:22:34.191: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up

R1#debug

R1#debug ppp auth

R1#debug ppp authentication

PPP authentication debugging is on

R1#debug vpdn pack

R1#debug vpdn packet

VPDN packet debugging is on

R1#

*Mar  1 00:24:47.347: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue

*Mar  1 00:24:47.351: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak

*Mar  1 00:24:47.355: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47

*Mar  1 00:24:47.355: VPDN CEF From tunnel: Received 66 byte pak

*Mar  1 00:24:47.359: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak

*Mar  1 00:24:47.359: Vi2.1 VPDN CEF From tunnel: Pak send successful

R1#

*Mar  1 00:24:57.587: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue

*Mar  1 00:24:57.591: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak

*Mar  1 00:24:57.595: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47

*Mar  1 00:24:57.619: VPDN CEF From tunnel: Received 66 byte pak

*Mar  1 00:24:57.619: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak

*Mar  1 00:24:57.623: Vi2.1 VPDN CEF From tunnel: Pak send successful

R1#

*Mar  1 00:25:07.827: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue

*Mar  1 00:25:07.827: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak

*Mar  1 00:25:07.827: VPDN CEF From tunnel: Received 66 byte pak

*Mar  1 00:25:07.831: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak

*Mar  1 00:25:07.831: Vi2.1 VPDN CEF From tunnel: Pak send successful

*Mar  1 00:25:07.831: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47

*Mar  1 00:25:08.375: VPDN CEF From tunnel: Received 279 byte pak

*Mar  1 00:25:08.375: Vi2.1 VPDN FS Tunnel to network: Sending 233 byte pak

R1#

*Mar  1 00:25:08.379: Vi2.1 VPDN CEF Tunnel to network: Fastswitching failed, punting pkt to process

*Mar  1 00:25:08.379: Vi2.1 VPDN CEF From tunnel: Punted 233 byte pak to ppp parse and iqueue

R1#

*Mar  1 00:25:18.067: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue

*Mar  1 00:25:18.071: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak

*Mar  1 00:25:18.075: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47

*Mar  1 00:25:18.155: VPDN CEF From tunnel: Received 66 byte pak

*Mar  1 00:25:18.155: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak

*Mar  1 00:25:18.159: Vi2.1 VPDN CEF From tunnel: Pak send successful

R1#u all

*Mar  1 00:25:28.307: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue

*Mar  1 00:25:28.311: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak

*Mar  1 00:25:28.315: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47

*Mar  1 00:25:28.407: VPDN CEF From tunnel: Received 66 byte pak

*Mar  1 00:25:28.407: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak

*Mar  1 00:25:28.411: Vi2.1 VPDN CEF From tunnel: Pak send successful



发表评论:

    昵称:
    密码:
    主页:
    标题:
Powered by Oblog.