VPN 2441 作为 PPTP VPN 的服务器端,配置,show run ,以及 debug 信息如下。
这是拨通时候的debug信息。
*Mar 1 00:40:19.283: ppp2 PPP: Using vpn set call direction
*Mar 1 00:40:19.283: ppp2 PPP: Treating connection as a callin
*Mar 1 00:40:19.287: ppp2 PPP: Session handle[D2000003] Session id[2]
*Mar 1 00:40:19.479: ppp2 PPP: Authorization required
*Mar 1 00:40:19.967: ppp2 MS-CHAP: O CHALLENGE id 1 len 21 from "R1 "
*Mar 1 00:40:20.075: ppp2 MS-CHAP: I RESPONSE id 1 len 62 from "11111111"
*Mar 1 00:40:20.079: ppp2 PPP: Sent MSCHAP LOGIN Request
*Mar 1 00:40:20.095: ppp2 PPP: Received LOGIN Response PASS
*Mar 1 00:40:20.143: Vi2.1 PPP: Sent LCP AUTHOR Request
*Mar 1 00:40:20.147: Vi2.1 PPP: Sent IPCP AUTHOR Request
R1#
*Mar 1 00:40:20.151: Vi2.1 LCP: Received
*Mar 1 00:40:20.155: Vi2.1 IPCP: Received
*Mar 1 00:40:20.159: Vi2.1 MS-CHAP: O SUCCESS id 1 len 4
配置如下
R1(config)#int e1/0
R1(config-if)#ip add 172.16.99.2 255.255.0.0
R1(config-if)#end
R1#show ip int
*Mar 1 00:05:11.435: %SYS-5-CONFIG_I: Configured from console by console
R1#show ip int bri
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 unassigned YES unset administratively down down
Ethernet1/0 172.16.99.2 YES manual up up
R1#ping 172.16.99.1 //本机回环地址
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.99.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/43/68 ms
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#int e1/0
R1(config-if)#p?
pagp pppoe pppoe-client priority-group
R1(config-if)#pp
R1(config-if)#pppoe ?
enable Enable pppoe
R1(config-if)#pppoe en
R1(config-if)#pppoe enable 打了这条命令也可以
R1(config-if)#exit
R1(config)#int virtual-Template 1
R1(config-if)#ppp authentication ms-chap
R1(config-if)#peer default ip address pool vpndhcp 这里少这一条命令,后面补上了
R1(config-if)#encapsulation ppp
R1(config-if)#ip address 192.1.1.1 255.255.255.0
R1(config-if)#no shu
R1(config-if)#exit
R1(config)#ip local
R1(config)#ip local pool vpndhcp 192.1.1.2 192.1.1.5
R1(config)#int lo 0
R1(config-if)#ip add 192.1.1.6 255.255.255.0
% 192.1.1.0 overlaps with Virtual-Template1
R1(config-if)#exit
R1(config)#vpdn en
R1(config)#vpdn enable
R1(config)#vpdn-group 1
R1(config-vpdn)#accept-dialin
R1(config-vpdn-acc-in)#protocol ?
any Use any protocol
l
l2tp Use L2TP
pppoe Use PPPoE
pptp Use PPTP
R1(config-vpdn-acc-in)#protocol pptp
R1(config-vpdn-acc-in)#exit
R1(config-vpdn)#^Z
R1(config)#int virtual-template 1
R1(config-if)#peer default ip address pool vpndhcp
R1(config-if)#exit
R1(config)#username 11111111 password 11111111
R1(config)#end
R1#show run
Building configuration...
*Mar 1 00:19:32.379: %SYS-5-CONFIG_I: Configured from console by console
Current configuration : 970 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
no ip domain lookup
!
ip cef
ip audit po max-events 100
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
!
username 11111111 password 0 11111111
!
interface Loopback0
no ip address
!
interface Ethernet0/0
no ip address
shutdown
half-duplex
!
interface Ethernet1/0
ip address 172.16.99.2 255.255.0.0
half-duplex
pppoe enable
!
interface Virtual-Template1
ip address 192.1.1.1 255.255.255.0
peer default ip address pool vpndhcp
ppp authentication ms-chap
!
ip local pool vpndhcp 192.1.1.2 192.1.1.5
ip http server
no ip http secure-server
ip classless
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
!
!
end
R1#
*Mar 1 00:22:33.191: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up
R1#
*Mar 1 00:22:34.191: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up
R1#debug
R1#debug ppp auth
R1#debug ppp authentication
PPP authentication debugging is on
R1#debug vpdn pack
R1#debug vpdn packet
VPDN packet debugging is on
R1#
*Mar 1 00:24:47.347: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue
*Mar 1 00:24:47.351: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak
*Mar 1 00:24:47.355: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47
*Mar 1 00:24:47.355: VPDN CEF From tunnel: Received 66 byte pak
*Mar 1 00:24:47.359: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak
*Mar 1 00:24:47.359: Vi2.1 VPDN CEF From tunnel: Pak send successful
R1#
*Mar 1 00:24:57.587: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue
*Mar 1 00:24:57.591: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak
*Mar 1 00:24:57.595: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47
*Mar 1 00:24:57.619: VPDN CEF From tunnel: Received 66 byte pak
*Mar 1 00:24:57.619: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak
*Mar 1 00:24:57.623: Vi2.1 VPDN CEF From tunnel: Pak send successful
R1#
*Mar 1 00:25:07.827: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue
*Mar 1 00:25:07.827: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak
*Mar 1 00:25:07.827: VPDN CEF From tunnel: Received 66 byte pak
*Mar 1 00:25:07.831: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak
*Mar 1 00:25:07.831: Vi2.1 VPDN CEF From tunnel: Pak send successful
*Mar 1 00:25:07.831: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47
*Mar 1 00:25:08.375: VPDN CEF From tunnel: Received 279 byte pak
*Mar 1 00:25:08.375: Vi2.1 VPDN FS Tunnel to network: Sending 233 byte pak
R1#
*Mar 1 00:25:08.379: Vi2.1 VPDN CEF Tunnel to network: Fastswitching failed, punting pkt to process
*Mar 1 00:25:08.379: Vi2.1 VPDN CEF From tunnel: Punted 233 byte pak to ppp parse and iqueue
R1#
*Mar 1 00:25:18.067: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue
*Mar 1 00:25:18.071: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak
*Mar 1 00:25:18.075: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47
*Mar 1 00:25:18.155: VPDN CEF From tunnel: Received 66 byte pak
*Mar 1 00:25:18.155: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak
*Mar 1 00:25:18.159: Vi2.1 VPDN CEF From tunnel: Pak send successful
R1#u all
*Mar 1 00:25:28.307: Vi2.1 VPDN FS Network to tunnel: Punted 52 byte pak to l2x process queue
*Mar 1 00:25:28.311: Vi2.1 VPDN PROCESS Into tunnel: Sending 52 byte pak
*Mar 1 00:25:28.315: L2X: IP socket write 66 bytes, 172.16.99.2 to 172.16.99.1, prot 47
*Mar 1 00:25:28.407: VPDN CEF From tunnel: Received 66 byte pak
*Mar 1 00:25:28.407: Vi2.1 VPDN FS Tunnel to network: Sending 16 byte pak
*Mar 1 00:25:28.411: Vi2.1 VPDN CEF From tunnel: Pak send successful
