我正在尝试使用 SUP7203BXL、SIP-400 和 SPA5xGE 作为 BRAS 配置 7609 路由器。配置位于问题的底部。
会话已创建,但客户端无法访问 Internet。(7609 本身可以访问互联网。)我有一台使用相同配置的 7206VXR。
我可以看出它们之间的区别。
7200 中的虚拟接口显示为 Radius 提供的公共 IP 地址,但 7609 中的虚拟接口具有我为模板配置的本地池。
我想 7609 的工作方式不同,因此必须更改 7200 上运行的配置。
我怎么解决这个问题?
配置:
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service counters max age 10
!
hostname R7609
!
boot-start-marker
boot system disk0:c7600s72033-advipservicesk9-mz.122-33.SRE1.bin
boot-end-marker
!
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication enable default none
aaa authentication ppp default group radius
aaa accounting network default
action-type start-stop
group radius
!
!
aaa session-id common
!
ip source-route
!
!
ip domain name 7609PPP.com
ip name-server Y.Y.Y.40
ip name-server Y.Y.Y.20
!
!
!
vtp mode transparent
mls flow ip interface-full
no mls flow ipv6
no mls acl tcam share-global
mls cef error action freeze
multilink bundle-name authenticated
!
!
spanning-tree mode rapid-pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
diagnostic bootup level complete
diagnostic cns publish cisco.cns.device.diag_results
diagnostic cns subscribe cisco.cns.device.diag_commands
!
redundancy
main-cpu
auto-sync running-config
mode sso
!
vlan internal allocation policy ascending
vlan access-log ratelimit 2000
!
!
!
bba-group pppoe Servidor_PPPoE
virtual-template 1
sessions per-mac limit 1
sessions per-vlan limit 6000
!
!
!
interface Loopback1
ip address X.X.X.X 255.255.255.0 secondary
ip address 10.10.0.1 255.255.0.0
no ip redirects
!
interface GigabitEthernet5/1
no ip address
shutdown
!
interface GigabitEthernet5/2
no ip address
shutdown
!
interface GigabitEthernet8/0/0
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet8/0/1
description PPPOE_IN
no ip address
negotiation auto
pppoe enable group Servidor_PPPoE
!
interface GigabitEthernet8/0/1.100
description VLAN_PPPOE
encapsulation dot1Q 100
pppoe enable group Servidor_PPPoE
!
interface GigabitEthernet8/0/2
no ip address
negotiation auto
!
interface GigabitEthernet8/0/2.10
description PPPOE_Out
encapsulation dot1Q 10
ip address Y.Y.Y.1 255.255.255.0
!
interface GigabitEthernet8/0/3
no ip address
negotiation auto
!
interface GigabitEthernet8/0/3.55
description To_Radius
encapsulation dot1Q b
ip address 172.20.3.7 255.255.255.192
!
interface GigabitEthernet8/0/4
no ip address
shutdown
negotiation auto
!
interface Virtual-Template1
description Template_PPPoE
ip unnumbered Loopback1
ip policy route-map toallot
peer default ip address pool PPPoE_pool
ppp authentication pap
!
interface Vlan1
no ip address
!
ip local pool PPPoE_pool 10.10.0.10 10.10.255.254
!
route-map toallot permit 10
match ip address 100
set ip next-hop Z.Z.Z.1
!
access-list 100 permit ip any any
!
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 Z.Z.Z.1
ip route 192.168.50.0 255.255.255.248 172.20.3.1
radius-server attribute nas-port format d
radius-server attribute 31 mac format unformatted
radius-server attribute 31 send nas-port-detail mac-only
radius-server host 172.20.3.12 auth-port 1812 acct-port 1813 key --------