С рабочей 7301 выжимка по PPPoE
IOS: c7301-advipservicesk9-mz.124-11.T.bin
Cisco IOS Software, 7301 Software (C7301-ADVIPSERVICESK9-M), Version 12.4(11)T, RELEASE SOFTWARE (fc2)
Код:
aaa new-model
aaa session-mib disconnect
!
!
aaa authentication ppp default group radius
aaa authorization network default group radius
aaa accounting update periodic 5
aaa accounting network default start-stop group radius
!
!
aaa session-id common
syscon address 1.1.1.11 public_xxxx
syscon shelf-id 0
!
ip cef
!
bba-group pppoe global
virtual-template 1
sessions max limit 8000
ac name nas1
sessions per-mac limit 1
sessions per-vlan limit 500
sessions auto cleanup
!
interface GigabitEthernet0/1
ip address 1.1.1.1 255.255.255.0
!
! На этом интерфейсе будут приниматься PPPoE-соединения.
interface GigabitEthernet0/2
pppoe enable group global
no cdp enable
!
interface Virtual-Template1
mtu 1492
ip unnumbered GigabitEthernet0/1
ip route-cache flow
autodetect encapsulation ppp
peer default ip address pool PPPoE
ppp max-bad-auth 3
ppp authentication chap radius
ppp authorization radius
ppp accounting radius
ppp timeout retry 3
ppp timeout authentication 45
ppp timeout idle 3600
!
ip local pool PPPoE 1.1.1.20 1.1.1.254
!
ip flow-cache timeout inactive 10
ip flow-cache timeout active 1
ip flow-export source GigabitEthernet0/1
ip flow-export version 5
ip flow-export destination 1.1.1.11 9996
!
access-list 3 permit 1.1.1.11
access-list 3 deny any log
!
snmp-server community public_xxxx RW 3
snmp-server ifindex persist
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps aaa_server
snmp-server host 1.1.1.11 161
snmp-server host 1.1.1.11 2c
snmp-server host 1.1.1.11 aaa
snmp-server host 1.1.1.11 public_xxxx snmp
!
!
!
!
!
radius-server attribute 8 include-in-access-req
radius-server attribute nas-port format e UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
radius-server attribute 31 mac format unformatted
radius-server host 1.1.1.11 auth-port 1812 acct-port 1813 non-standard
radius-server retransmit 5
radius-server timeout 30
radius-server deadtime 1
radius-server key 0 secret_pass
radius-server vsa send accounting
radius-server vsa send authentication