Giúp mình cấu hình router Cisco 851 xài internet ADSL Viettel với

[MuonHocHoi]

Mình có con router Cisco 851 bao gồm 4 cổng LAN FE0-3 (layer2) và 1 cổng WAN FE4 (Layer3) cùng cổng Console/AUX

+ Yêu cầu: sử dụng router Cisco 851 quay số PPoE ra ngoài internet thông qua modem ADSL của Viettel (đã cấu hình làm bridge và test PC Win7 connect PPoE thành công)

+ Thông tin cấu hình modem ADSL làm bridge như sau:
Thông số cấu hình modem ADSL làm bridge:
6f60de7f885cd50ca63ac192c9d186cf_45976259.bridgeconfig.jpg

Thông tin modem ADSL kết nối với line ADSL của Viettel sau khi đã cấu hình bridge:
2cf5b70b2007e5b81c09daeda5d76a01_45976264.bridgeconfigstat.jpg

Thử lấy PC Win7 kết nối cable với modem ADSL (đã cấu hình bridge) và quay số PPoE ra internet bằng user/pass của Viettel (OK):
291da7c273ba46fd1bcda98c3ee10ac2_45976262.bridgeconfigpcconnectppoeok.jpg

+ Thông tin router Cisco 851 như sau:
Hình minh họa các interfaces của router:
851b.jpg
Do router không có cổng DSL mà chỉ có cổng FE làm cổng WAN nên mình mới nối qua modem ADSL làm bridge và cấu hình router Cisco 851 làm modem quay số PPoE (chứ không phải PPoA như các loại router Cisco 877 có cổng DSL luôn)

Các thông số mình đã cài đặt như sau:
Router#show running-config
Building configuration...


*Mar 1 04:34:34.865: %SYS-5-CONFIG_I: Configured from console by console
Current configuration : 1502 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
!
dot11 syslog
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.2.1 192.168.2.9
!
ip dhcp pool inside
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
!
!
ip cef
no ip domain lookup
!
vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
no ip address
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface Vlan1
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Dialer0
ip address negotiated
ip mtu 1492
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap
ppp pap sent-username xxxxxx_hcm@homen password 0 xxxxxxxx (đã thay đổi username/pass thành xxxxx nhé)
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
no ip http server
no ip http secure-server
ip nat inside source list 101 interface FastEthernet4 overload
!
access-list 101 permit ip any any
dialer-list 1 protocol ip permit
!
control-plane
!
!
line con 0
logging synchronous
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
end



Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface dialer 0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#interface fastEthernet 4
Router(config-if)#no shutdown
Router(config-if)#end



Thông tin routing:
Router#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route


Gateway of last resort is 0.0.0.0 to network 0.0.0.0


C 192.168.2.0/24 is directly connected, Vlan1
S* 0.0.0.0/0 is directly connected, Dialer0


Thông tin DHCP server:
Router#show ip dhcp pool


Pool inside :
Utilization mark (high/low) : 100 / 0
Subnet size (first/next) : 0 / 0
Total addresses : 254
Leased addresses : 1
Pending event : none
1 subnet is currently in the pool :
Current index IP address range Leased addresses
192.168.2.11 192.168.2.1 - 192.168.2.254 1


Thông tin các interfaces:
Router#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Dialer0 unassigned YES NVRAM up up
FastEthernet0 unassigned YES unset up down
FastEthernet1 unassigned YES unset up down
FastEthernet2 unassigned YES unset up down
FastEthernet3 unassigned YES unset up down
FastEthernet4 unassigned YES manual up up
NVI0 unassigned YES unset administratively down down
Virtual-Access1 unassigned YES unset down down
Vlan1 192.168.2.1 YES NVRAM up down


+ Kết quả: PC kết nối với router thì nhận được IP với defaule gateway do DHCP pool của router cấp, ping 192.168.2.1 OK nhưng không ra ngoài internet được.
Trên router cứ định kỳ khoảng 5giây hiện ra dòng thông báo lỗi này:
Router#
*Mar 1 04:35:19.118: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet4, changed state to up
Router#
*Mar 1 04:35:43.245: %DIALER-6-BIND: Interface Vi1 bound to profile Di0
*Mar 1 04:35:43.249: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Mar 1 04:35:43.429: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di0
Router#
*Mar 1 04:35:43.433: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down


Kiểm tra thông tin pppoe:
Router#show pppoe summary
1 client session



Router#show pppoe session all
Total PPPoE sessions 1
session id: 2049
local MAC address: 0064.400e.838d, remote MAC address: 0030.8822.fb52
virtual access interface: N/A, outgoing interface: Fa4
493 packets sent, 486 received
6576 bytes sent, 6534 received



Tiếp tục báo lỗi định kỳ trên router và PC chưa kết nối internet được:
Router#
*Mar 1 04:36:28.919: %DIALER-6-BIND: Interface Vi1 bound to profile Di0
*Mar 1 04:36:28.923: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Mar 1 04:36:29.107: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di0
Router#
*Mar 1 04:36:29.111: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down



Router#
*Mar 1 04:36:51.806: %DIALER-6-BIND: Interface Vi1 bound to profile Di0
Router#
*Mar 1 04:36:51.810: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Mar 1 04:36:52.130: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di0
Router#
*Mar 1 04:36:52.134: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down


Router ping 8.8.8.8 thử cũng không được:
Router#ping 8.8.8.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)



Bật debug lên xem thông tin pppoe thế nào:
Router#debug pppoe events
PPPoE protocol events debugging is on
Router#
*Mar 1 04:37:12.109: Sending PADI: Interface = FastEthernet4
*Mar 1 04:37:12.149: PPPoE 0: I PADO R:0030.8822.fb52 L:0064.400e.838d Fa4
Router#
*Mar 1 04:37:14.157: PPPOE: we've got our pado and the pado timer went off
*Mar 1 04:37:14.157: OUT PADR from PPPoE Session
*Mar 1 04:37:14.477: PPPoE 5226: I PADS R:0030.8822.fb52 L:0064.400e.838d Fa4
*Mar 1 04:37:14.477: IN PADS from PPPoE Session
*Mar 1 04:37:14.477: %DIALER-6-BIND: Interface Vi1 bound to profile Di0
*Mar 1 04:37:14.477: PPPoE: Virtual Access interface obtained.
*Mar 1 04:37:14.477: PPPoE : encap string prepared
*Mar 1 04:37:14.477: [0]PPPoE 5226: data path set to Virtual Acess
*Mar 1 04:37:14.481: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
Router#
*Mar 1 04:37:16.657: PPPoE : Shutting down client session
*Mar 1 04:37:16.657: [0]PPPoE 5226: O PADT R:0030.8822.fb52 L:0064.400e.838d Fa4
*Mar 1 04:37:16.657: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di0
Router#
*Mar 1 04:37:16.661: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down


Kiểm tra lại trạng thái các interfaces 1 lần nữa:
Router#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Dialer0 unassigned YES NVRAM up up
FastEthernet0 unassigned YES unset up down
FastEthernet1 unassigned YES unset up down
FastEthernet2 unassigned YES unset up down
FastEthernet3 unassigned YES unset up down
FastEthernet4 unassigned YES manual up up
NVI0 unassigned YES unset administratively down down
Virtual-Access1 unassigned YES unset down down
Vlan1 192.168.2.1 YES NVRAM up down


Tiếp tục thông báo lỗi theo chu kỳ khoảng 5 giây/lần:
Router#
*Mar 1 04:37:36.696: Sending PADI: Interface = FastEthernet4
*Mar 1 04:37:36.796: PPPoE 0: I PADO R:0030.8822.fb52 L:0064.400e.838d Fa4
Router#
*Mar 1 04:37:38.768: PPPOE: we've got our pado and the pado timer went off
*Mar 1 04:37:38.768: OUT PADR from PPPoE Session
*Mar 1 04:37:38.988: PPPoE 351: I PADS R:0030.8822.fb52 L:0064.400e.838d Fa4
*Mar 1 04:37:38.988: IN PADS from PPPoE Session
*Mar 1 04:37:38.988: %DIALER-6-BIND: Interface Vi1 bound to profile Di0
*Mar 1 04:37:38.992: PPPoE: Virtual Access interface obtained.
*Mar 1 04:37:38.992: PPPoE : encap string prepared
*Mar 1 04:37:38.992: [0]PPPoE 351: data path set to Virtual Acess
*Mar 1 04:37:38.996: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Mar 1 04:37:39.252: PPPoE : Shutting down client session
*Mar 1 04:37:39.252: [0]PPPoE 351: O PADT R:0030.8822.fb52 L:0064.400e.838d Fa4
*Mar 1 04:37:39.252: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di0
*Mar 1 04:37:39.256: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down








Các bác xem và hỗ trợ mình nhé, cám ơn các bác đã xem bài post của mình

[MuonHocHoi]

Bình tĩnh tự tin đợi cao thủ ^_^

[MuonHocHoi]

Các bác cao thủ ơi, kíu em với, hic hic hic

[marriottvn]

bạn thử coi seo:

interface fa4
no ip nat outside
no pppoe enable group global

int dialer0
ip nat outside
no dialer-group 1

access-list 1 permit 192.168.2.0 0.0.0.255

no ip nat inside source list 101 interface FastEthernet4 overload
ip nat inside source list 1 interface Dialer0

interface dialer0
shut
no shut

sau đó test lại: ping 8.8.8.8 source vlan 1

[MuonHocHoi]

thanks bạn, mình sẽ thử và báo cáo tình hình lại nhé ^_^

[newhorizon]

interface Dialer0
ip address negotiated
ip mtu 1492
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
no ppp authentication pap

Remove ppp authentication pap nhé

[MuonHocHoi]

Cám ơn các bác cao thủ nhiều, mình đã làm được rồi, giống như bác NewHorizon nói là bỏ lệnh ppp authenticaion pap đi vì nó force ISP authenticate theo router chứ ko theo ISP (mà trên dòng 1800 thì lệnh này OK)

Mình cũng search trên forum cisco support được y chang gợi ý của bác NewHorizon:

Jul 12, 2011 3:01 PM (in response to Afshan Navazdeen)
Re: cisco 887 adsl "Interface Vi1 unbound from profile Di0"
Afshan,

Please remove also the command ppp authentication pap chap - in other words, there shall be no command present in the Dialer0 configuration that starts with the words "ppp authentication". Using that command, you are forcing your DSL provider to authenticate to you which is wrong - only you are authenticating towards your DSL provider, not vice versa. Your Di0 configuration should look only as follows:


interface Dialer0 ip address negotiated encapsulation ppp dialer pool 1 ppp chap hostname ****** ppp chap password 0 *** ppp pap sent-username ****** password 0 ***
Give it a try - and if it does not work either then please enclose the output of the same debug commands once more.

Best regards,
Peter

Link: https://supportforums.cisco.com/thread/2093513