%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%%%%%%%%%%
Internet
!
interface FastEthernet0/0
ip address 61.128.1.10 255.255.255.0
no shut
!
!
interface FastEthernet1/0
ip address 202.100.1.10 255.255.255.0
no shu
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%%%%%%%
GW
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin 服务器端接受拨入
protocol pptp
virtual-template 1 关联到虚模板用于clone产生的
Virtual-access接口
!
!
!
username pptpuser password 0 cisco
!
!
interface FastEthernet1/0
ip address 202.100.1.1 255.255.255.0
no shut
!
interface FastEthernet2/0
ip address 10.1.1.1 255.255.255.0
no shut
!
!
interface Virtual-Template1
ip unnumbered FastEthernet2/0 任意一个有ip地址的接口
peer default ip address pool ippool
ppp encrypt mppe auto required 启用MPPE对PPTP流量进行加密,required表示必须要加密
ppp authentication ms-chap
!
ip local pool ippool 123.1.1.100 123.1.1.200
ip route 0.0.0.0 0.0.0.0 202.100.1.10
!
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%%%%%%%%%%%%%
hostname Inside
!
interface FastEthernet2/0
ip address 10.1.1.10 255.255.255.0
no shut
line vty 0 4
password cisco
login
!
ip route 0.0.0.0 0.0.0.0 10.1.1.1
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %%%%%%%%%%%%%%%%%%%%%%
GW#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route
Gateway of last resort is 202.100.1.10 to network 0.0.0.0
C 202.100.1.0/24 is directly connected, FastEthernet1/0
10.0.0.0/24 is subnetted, 1 subnets
C 10.1.1.0 is directly connected, FastEthernet2/0
123.0.0.0/32 is subnetted, 1 subnets
C 123.1.1.100 is directly connected, Virtual-Access3
S* 0.0.0.0/0 [1/0] via 202.100.1.10
GW# sh user
GW# sh users
Line User Host(s) Idle Location
* 0 con 0 idle 00:00:00
Interface User Mode Idle Peer Address
Vi3 pptpuser PPPoVPDN 00:00:02 123.1.1.100
GW#
GW#sh ip int bri
Interface IP-Address OK? Method Status
Protocol
FastEthernet0/0 unassigned YES unset administratively down down FastEthernet0/1 unassigned YES unset administratively down down FastEthernet1/0 202.100.1.1 YES manual up up FastEthernet2/0 10.1.1.1 YES manual up up FastEthernet3/0 unassigned YES unset administratively down down Virtual-Access1 unassigned YES unset down
down
Virtual-Template1 10.1.1.1 YES TFTP down
down
Virtual-Access2 unassigned YES unset up up Virtual-Access3 10.1.1.1 YES TFTP up up GW#
GW(config)#int virtual-template 1
GW(config-if)#no ppp encrypt mppe auto required
GW(config-if)#
GW(config-if)#
GW(config-if)# ppp authentication ms-chap 无所谓存在GW(config-if)#
GW(config-if)#
GW(config-if)#
GW(config-if)#no ppp authentication ms-chap
GW(config-if)#