martedì 1 dicembre 2009

Howto: create a PPPoE testing environment in GNS3 with dynamips

In this howto I'll try to explain how to create a PPPoE infrastructure for testing purpose with GNS3.
I have spent a few time searching the net during my current ISCW exam studying without success....so this is my solution.
Please notice that the server-side configuration is not what you'll find out there (for instance no one in production environment I guess is using local database to authenticate users), but the target here is to test and practice configuring PPPoE client.

1) Open a new project in GNS3 and then create the following topology:


2) Configure the "provider" router with the following from configuration mode

hostname provider
vpdn enable

vpdn-group pppoe-test
 accept-dialin

 protocol pppoe

 virtual-template 11

exit



interface Virtual-Template11

 ip unnumbered FastEthernet0/0

 ppp authentication pap pppoe-test

 ppp authorization pppoe-test

 ppp accounting pppoe-test

exit

aaa new-model

aaa authentication ppp pppoe-test local

aaa authorization network pppoe-test local
 username pppoeuser password cisco20;

interface fastethernet 0/0

 pppoe enable

 no shutdown
 interface fastethernet 0/1

 ip address 192.168.93.3 255.255.255.0

 no shutdown

exit

end


debug vpdn event
 
 
3) Configure the "subscriber" router with the following:

hostname subscriber




interface FastEthernet0/0
 no ip address
 pppoe enable
 pppoe-client dial-pool-number 1
 no shutdown


interface Dialer1
 mtu 1492
 ip address 192.168.233.10
 ip nat outside
 encapsulation ppp
 ip tcp adjust-mss 1452
 dialer pool 1
 dialer-group 1
 ppp pap sent-username pppoeuser password cisco20;
exit
end
debug ppp authentication
debug pppoe events



After less than 30 secs you should see these messages on the console of the subscriber router:

*Mar 1 00:09:33.107: Sending PADI: Interface = FastEthernet0/0
*Mar 1 00:09:33.179: PPPoE 0: I PADO R:c203.0dfc.0000 L:c202.0dfc.0000 Fa0/0
*Mar 1 00:09:35.155: PPPOE: we've got our pado and the pado timer went off
*Mar 1 00:09:35.155: OUT PADR from PPPoE Session
*Mar 1 00:09:35.227: PPPoE 3: I PADS R:c203.0dfc.0000 L:c202.0dfc.0000 Fa0/0
*Mar 1 00:09:35.227: IN PADS from PPPoE Session
*Mar 1 00:09:35.239: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
*Mar 1 00:09:35.239: PPPoE: Virtual Access interface obtained.
*Mar 1 00:09:35.239: PPPoE : encap string prepared
*Mar 1 00:09:35.243: [0]PPPoE 3: data path set to Virtual Acess
*Mar 1 00:09:35.243: Vi1 PPP: Using dialer call direction
*Mar 1 00:09:35.247: Vi1 PPP: Treating connection as a callout
*Mar 1 00:09:35.247: Vi1 PPP: Session handle[4E00000A] Session id[0]
*Mar 1 00:09:35.247: Vi1 PPP: Authorization required
*Mar 1 00:09:35.251: Vi1 PPP: No remote authentication for call-out
*Mar 1 00:09:35.251: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t o up
*Mar 1 00:09:37.163: Vi1 PPP: No authorization without authentication
*Mar 1 00:09:37.163: Vi1 PAP: Using hostname from interface PAP
*Mar 1 00:09:37.167: Vi1 PAP: Using password from interface PAP
*Mar 1 00:09:37.167: Vi1 PAP: O AUTH-REQ id 1 len 23 from "pppoeuser"
*Mar 1 00:09:37.475: Vi1 PAP: I AUTH-ACK id 1 len 5
*Mar 1 00:09:38.475: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state t o up
 
When the connection is initialized you should successfully ping 192.168.93.3 from subscriber router....


1 commento:

  1. Its not pinging at all after more than 30 secs.

    here is the script when configuring the Virtual Template 11


    PROVIDER(config)#interface virtual-template 11
    PROVIDER(config-if)#ip unnumbered fastEthernet 0/0
    PROVIDER(config-if)#ppp authentication pap pppoe-test

    PROVIDER(config-if)#ppp authorization pppoe-test
    AAA: Warning, authorization list "pppoe-test" is not defined for network authorization.

    PROVIDER(config-if)#ppp accounting pppoe-test
    AAA: Warning accounting list "pppoe-test" is not defined for network accounting.

    PROVIDER(config-if)#exit

    hope you can help and clarify, because it tells bba-group

    thanks :)

    RispondiElimina