• 【PPPoE】CentOS下搭建PPPOE服务器


    1、检查是否安装 rp-pppoe 包

    rpm -qa rp-pppoe

    如果没有安装,则通过yum安装

    yum install -y rp-pppoe

    2、服务端

    (1)设置支持IP转发

    vi /etc/sysctl.conf
    net.ipv4.ip_forward = 1  # 修改为1

    (2)修改服务器配置

    vi /etc/ppp/pppoe-server-options
    # PPP options for the PPPoE server
    # LIC: GPL
    require-pap    # 认证方式为pap, 还可以配置为chap方式
    login
    lcp-echo-interval 10
    lcp-echo-failure 2

    (3)添加认证账户

    添加系统账户

    useradd test  # 添加系统用户test
    passwd test   # 设置账户密码, 这里设置密码为 123

    添加pppoe认证账户,认证账户必须为系统账户,这里使用刚添加的 test/123

    # 若采用chap认证方式

    vi /etc/ppp/chap-secrets
    # Secrets for authentication using CHAP
    # client        server  secret                  IP addresses
    "test"          *       "123"                   *

    # 若采用pap认证方式

    vi /etc/ppp/pap-secrets
    # Secrets for authentication using PAP
    # client        server  secret                  IP addresses
    "test"          *       "123"                   *

    (4)修改配置文件 /etc/ppp/options

    vi /etc/ppp/options
    # local    # local for chap
    auth       # auth for pap
    lock       # lock for pap

    (5)启动pppoe服务

    pppoe-server -I eth1 -L 192.168.0.101 -R 192.168.0.200 -N 10
    # -L 虚拟PPPoE接口
    # -R 起始地址
    # -N 地址个数

    3、客户端

    (1)与服务端一样,先安装 rp-pppoe 包

    (2)使用root用户,执行 pppoe-setup

    pppoe-setup
    Welcome to the PPPoE client setup.  First, I will run some checks on
    your system to make sure the PPPoE client is installed properly...
    
    
    LOGIN NAME
    
    Enter your Login Name (default root): test    # 输入拨号认证账户
    
    INTERFACE
    
    Enter the Ethernet interface connected to the PPPoE modem
    For Solaris, this is likely to be something like /dev/hme0.
    For Linux, it will be ethX, where 'X' is a number.
    (default eth0):                               # 默认以 eth0 连接拨号
    
    Do you want the link to come up on demand, or stay up continuously?
    If you want it to come up on demand, enter the idle time in seconds
    after which the link should be dropped.  If you want the link to
    stay up permanently, enter 'no' (two letters, lower-case.)
    NOTE: Demand-activated links do not interact well with dynamic IP
    addresses.  You may have some problems with demand-activated links.
    Enter the demand value (default no):
    
    DNS
    
    Please enter the IP address of your ISP's primary DNS server.
    If your ISP claims that 'the server will provide dynamic DNS addresses',
    enter 'server' (all lower-case) here.
    If you just press enter, I will assume you know what you are
    doing and not modify your DNS setup.
    Enter the DNS information here:
    
    PASSWORD
    
    Please enter your Password:                   # 输入认证账户密码
    Please re-enter your Password:
    
    USERCTRL
    
    Please enter 'yes' (three letters, lower-case.) if you want to allow
    normal user to start or stop DSL connection (default yes):
    
    FIREWALLING
    
    Please choose the firewall rules to use.  Note that these rules are
    very basic.  You are strongly encouraged to use a more sophisticated
    firewall setup; however, these will provide basic security.  If you
    are running any servers on your machine, you must choose 'NONE' and
    set up firewalling yourself.  Otherwise, the firewall rules will deny
    access to all standard servers like Web, e-mail, ftp, etc.  If you
    are using SSH, the rules will block outgoing SSH connections which
    allocate a privileged source port.
    
    The firewall choices are:
    0 - NONE: This script will not set any firewall rules.  You are responsible
              for ensuring the security of your machine.  You are STRONGLY
              recommended to use some kind of firewall rules.
    1 - STANDALONE: Appropriate for a basic stand-alone web-surfing workstation
    2 - MASQUERADE: Appropriate for a machine acting as an Internet gateway
                    for a LAN
    Choose a type of firewall (0-2): 0
    
    Start this connection at boot time
    
    Do you want to start this connection at boot time?
    Please enter no or yes (default no):no
    
    ** Summary of what you entered **
    
    Ethernet Interface: eth0
    User name:          test
    Activate-on-demand: No
    DNS:                Do not adjust
    Firewalling:        NONE
    User Control:       yes
    Accept these settings and adjust configuration files (y/n)?y

    输入y之后,会提示 ifup ppp0 拨号

    Congratulations, it should be all set up!
    
    Type '/sbin/ifup ppp0' to bring up your xDSL link and '/sbin/ifdown ppp0'
    to bring it down.
    Type '/sbin/pppoe-status /etc/sysconfig/network-scripts/ifcfg-ppp0'
    to see the link status.

    拨号成功后,ppp0的ip为从服务端分配的地址。

  • 相关阅读:
    第一章计算机系统知识
    Java面试宝典摘抄
    Java的容器类Collection和Map
    log4j.properties 详解与配置步骤(转)
    JSTL中的TLD配置和使用。
    (原创)mybatis学习四,利用mybatis自动创建代码
    C#常用方法
    Spring 3.x jar 包详解 与 依赖关系
    spring mvc JSON实现方式
    Structs2配置文件相关说明
  • 原文地址:https://www.cnblogs.com/fwonfo/p/7819457.html
Copyright © 2020-2023  润新知