Jump to content
Калькуляторы

m320 pppoe bras routing

Добрый день.

Очень нужна помощь форумчан.

Сабж м320 настраиваем PPPoE BRAS. PPPOE сессия успешно поднимается. Клиент получает адрес из пула. Дальше столкнулись с проблемой, pppoe клиент пингует только интерфейс xe-2/1/0 82.114.242.75, за которым дефолт роутер и более ничего не пингует. Интернета на клиенте нет.

М320 пингует внешку.

Предполагаем дело в маршрутизации, но никак не можем разобраться.

Помогите кто чем может, в тупике мы с этим девайсом.

Ниже следует конфиг:

 

version 12.3R6.6;

dynamic-profiles {

DS-dyn-ipv4v6-ra {

interfaces {

pp0 {

unit "$junos-interface-unit" {

ppp-options {

chap;

authentication chap;

}

pppoe-options {

underlying-interface "$junos-underlying-interface";

server;

}

keepalives interval 30;

family inet {

unnumbered-address lo0.0;

}

}

}

}

}

}

system {

host-name SCTS_m320;

domain-name ru;

time-zone Europe/Samara;

authentication-order radius;

root-authentication {

encrypted-password SV2GqfMSb6pVA; ## SECRET-DATA

}

name-server {

8.8.8.8;

#######################

services {

ftp {

connection-limit 3;

}

ssh {

root-login allow;

connection-limit 10;

}

telnet {

connection-limit 10;

}

subscriber-management {

traceoptions {

file subscriber.log size 1m;

flag all;

}

}

}

syslog {

user * {

any emergency;

}

file messages {

any notice;

authorization info;

}

file firewall {

firewall any;

}

}

commit synchronize;

auto-configuration {

traceoptions {

file autoconf.log size 1m;

flag all;

}

}

processes {

general-authentication-service {

traceoptions {

file aap_logfile_l size 2m files 20;

flag radius;

flag address-assignment;

flag user-access;

flag configuration;

flag local-authentication;

}

}

}

ntp {

server 194.149.67.129;

}

}

chassis {

redundancy {

routing-engine 0 backup;

routing-engine 1 master;

failover {

on-loss-of-keepalives;

on-disk-failure;

}

graceful-switchover;

}

fpc 1 {

power on;

}

ppp-subscriber-services enable;

}

access-profile Access-Profile;

interfaces {

traceoptions {

file interfaces.log size 5m files 3;

flag all;

}

xe-2/1/0 {

vlan-tagging;

unit 450 {

encapsulation ppp-over-ether;

vlan-id 450;

pppoe-underlying-options {

dynamic-profile DS-dyn-ipv4v6-ra;

}

}

unit 1001 {

vlan-id 1001;

family inet {

filter {

input rad;

output rad;

}

address 82.114.242.75/24;

}

}

}

fxp0 {

unit 0 {

family inet {

address 192.168.61.143/21;

}

}

}

lo0 {

unit 0 {

family inet {

filter {

input defend;

}

address 127.0.0.1/32;

address 82.114.224.1/32;

}

}

}

}

routing-options {

static {

route 0.0.0.0/0 next-hop 82.114.242.2;

}

}

protocols {

ancp {

traceoptions {

file ancp_1_logfile_1 size 2m files 20;

}

}

ppp-service {

traceoptions {

file ppp-service.log size 1m;

flag all;

}

}

ppp {

traceoptions {

file ppp.log size 5m files 5;

flag all;

}

monitor-session {

all;

pp0.0;

}

}

pppoe {

traceoptions {

file pppoe.log size 5m files 5;

level all;

flag all;

}

}

}

firewall {

filter defend {

term 0 {

from {

source-address {

0.0.0.0/0;

82.114.224.0/19 except;

192.168.56.0/21 except;

}

destination-port [ ssh telnet ];

}

then {

discard;

}

}

term 1 {

from {

port ntp;

}

then {

discard;

}

}

term 2 {

then accept;

}

}

filter rad {

term 1 {

from {

address {

82.114.242.14/32;

}

}

then {

log;

syslog;

accept;

}

}

term 2 {

then accept;

}

}

}

access {

radius-server {

82.114.242.14 {

port 1812;

accounting-port 1813;

secret "$9$DKkfz9Cu1Ic9ABEhSW8"; ## SECRET-DATA

timeout 45;

retry 4;

source-address 82.114.242.75;

}

}

profile Access-Profile {

authentication-order radius;

domain-name-server {

8.8.8.8;

}

radius {

authentication-server 82.114.242.14;

accounting-server 82.114.242.14;

}

radius-server {

82.114.242.14 {

port 1812;

accounting-port 1813;

secret "$9$mTnCOBEyrvO1SeKM-d"; ## SECRET-DATA

source-address 82.114.242.75;

}

}

accounting {

order radius;

immediate-update;

update-interval 10;

statistics volume-time;

}

service {

accounting-order radius;

}

}

address-assignment {

pool default-ipv4-pool-2 {

family inet {

network 82.114.224.0/24;

range r5 {

low 82.114.224.10;

high 82.114.224.254;

}

}

}

}

}

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.