Estamos lutando com isso há algumas semanas. CISCO 3825 (15.1 IOS) com PPPoE adequadamente estabelecido (ou seja, pode executar ping na rede de dentro do CLI).
O problema que estamos enfrentando é que o cliente não pode executar ping no mundo exterior. Eu tenho o cliente conectado diretamente ao roteador e não estou tendo sorte em acessar a rede. A configuração:
Configuração atualizada
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
media-type rj45
pppoe enable group global
pppoe-client dial-pool-number 1
no cdp enable
!
interface GigabitEthernet0/1
ip address 192.168.2.1 255.255.255.0
ip broadcast-address 192.168.2.255
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
media-type rj45
no cdp enable
!
interface Dialer0
ip address negotiated
ip mtu 1492
ip flow ingress
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip route-cache policy
dialer pool 1
ppp authentication pap callin
ppp pap sent-username nonya@domain.local password 0 foobarme
ppp ipcp dns request accept
ppp ipcp route default
ppp ipcp address accept
no cdp enable
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
no cdp run
O ppoe estabelece perfeitamente. Ambas as interfaces estão ativadas / desativadas, no entanto, simplesmente não podem executar ping na Internet usando um cliente conectado diretamente. Sem dhcp, os clientes têm endereços IP estáticos
Estou certo de que esta pergunta foi respondida, mas nada que eu tenha lido foi capaz de me levantar.
Uma coisa a notar é que f0 / 1 tem uma taxa de bits de 255.255.255.255. A interface do cliente está configurada para 192.168.2.255. Esse poderia ser o problema? Preciso minimizar o tempo de inatividade o máximo possível e realmente aprecio sua ajuda.
Breve
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 unassigned YES NVRAM up up
GigabitEthernet0/1 192.168.2.1 YES NVRAM up up
Dialer0 <public ip> YES IPCP up up
NVI0 unassigned YES unset administratively down down
Virtual-Access1 unassigned YES unset up up
Virtual-Access2 unassigned YES unset up up
Cheio
do show ip interface
GigabitEthernet0/0 is up, line protocol is up
Internet protocol processing disabled
GigabitEthernet0/1 is up, line protocol is up
Internet address is 192.168.2.1/24
Broadcast address is 192.168.2.255
Address determined by non-volatile memory
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is enabled
Local Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP fast switching on the same interface is disabled
IP Flow switching is disabled
IP CEF switching is enabled
IP CEF switching turbo vector
IP multicast fast switching is enabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast, CEF
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Policy routing is disabled
Network address translation is enabled, interface in domain inside
BGP Policy Mapping is disabled
Input features: Stateful Inspection, Virtual Fragment Reassembly, Virtual Fragment Reassembly After IPSec Decryption, MCIk
Output features: NAT Inside, Stateful Inspection, NAT ALG proxy, Post-Ingress-NetFlow
WCCP Redirect outbound is disabled
WCCP Redirect inbound is disabled
WCCP Redirect exclude is disabled
Dialer0 is up, line protocol is up
Internet address is <public ip>/32
Broadcast address is 255.255.255.255
Address determined by IPCP
MTU is 1492 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is enabled
Local Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP fast switching on the same interface is enabled
IP Flow switching is disabled
IP CEF switching is enabled
IP CEF switching turbo vector
IP Null turbo vector
IP multicast fast switching is enabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast, Policy, CEF
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Policy routing is disabled
Network address translation is enabled, interface in domain outside
BGP Policy Mapping is disabled
Input features: Stateful Inspection, Dialer i/f override, Ingress-NetFlow, Virtual Fragment Reassembly, Virtual Fragment k
Output features: Post-routing NAT Outside, Stateful Inspection, NAT ALG proxy, Post-Ingress-NetFlow, Dialer idle reset, Dt
WCCP Redirect outbound is disabled
WCCP Redirect inbound is disabled
WCCP Redirect exclude is disabled
NVI0 is administratively down, line protocol is down
Internet protocol processing disabled
Virtual-Access1 is up, line protocol is up
Internet protocol processing disabled
Virtual-Access2 is up, line protocol is up
Peer address is 64.230.11.5
Dialer interface is Dialer0
Como sempre, pode executar ping no cli, mas não no cliente diretamente conectado. DNS no cliente definido como 8.8.8.8, pode executar ping no roteador etc. Parece um problema de rota de gateway para dia0?
Atualização - trabalhando mtu mss para Cisco Bell Canadá ip mtu 1492 ip tcp Adjust-mss 1452
Tudo está perfeito agora!
Desde já, obrigado,
Usuario.