H3C SecPath Series Operation Manual page 34

Operation Manual – User Access
H3C SecPath Series Security Products
III. Configuration procedure
1) Configure SecPath A
# Configure a Dialer interface.
[H3C] dialer-rule 1 ip permit
[H3C] interface dialer 1
[H3C-Dialer1] dialer user secpathb
[H3C-Dialer1] dialer-group 1
[H3C-Dialer1] dialer bundle 1
[H3C-Dialer1] ip address ppp-negotiate
[H3C-Dialer1] ppp pap local-user adsluser password cipher 123456
# Configure a PPPoE session.
[H3C] interface ethernet 2/0/0
[H3C-Ethernet2/0/0] pppoe-client dial-bundle-number 1
# Configure a LAN interface and the default route.
[H3C] interface ethernet 0/0/0
[H3C-Ethernet0/0/0] ip address 192.168.1.1 255.255.255.0
[H3C-Ethernet0/0/0] quit
[H3C] ip route-static 0.0.0.0 0 dialer 1
If the IP addresses of the PCs in the LAN are private addresses, it is necessary to
configure NAT (Network Address Translation) on the firewall. The NAT configuration
will not be elaborated here. For details, refer to the part about NAT configuration in the
Security module of this manual.
2) Configure SecPath B
# Add a PPPoE user
[H3C] local-user adsluser
[H3C-luser-adsluser] password simple 123456
[H3C-luser-adsluser] service-type ppp
# Configure virtual template parameters on the SecPath B:
[H3C] interface virtual-template 1
[H3C-Virtual-Template1] ppp authentication-mode pap scheme default
[H3C-Virtual-Template1] ip address 1.1.1.1 255.0.0.0
[H3C-Virtual-Template1] remote address pool 1
# Configure the PPPoE parameter on the SecPath B:
[H3C] interface ethernet 2/0/0
[H3C-Ethernet2/0/0] pppoe-server bind virtual-template 1
# Configure domain users to use the local authentication scheme
[H3C] domain system
[H3C-isp-domain] scheme radius-scheme cams
Chapter 3 PPPoE Client Configuration
3-8