Đây là một file cấu hình cho 2 routers, một router Cisco 2600 là pppoe se rver và một router còn lại làm pppoe clients. TOPIC: GRE over IPSEC Network Diagram Configuration file: ================================================== ===== ISP-Long Reach Simulation - R1 (3660) PPPoE Server flash: c3660-jk9s-mz.122-15.T8.bin ================================================== ===== ISP-L#sh run Building configuration Current configuration : 1229 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname ISP-L ! logging queue-limit 100 ! memory-size iomem 10 ip subnet-zero ! ! ! vpdn enable ! vpdn-group 1 accept-dialin protocol pppoe virtual-template 1 ! mpls ldp logging neighbor-changes ! no voice hpi capture buffer no voice hpi capture destination ! ! mta receive maximum-recipients 0 ! interface Loopback1 ip address 203.162.1.1 255.255.255.255 ! interface FastEthernet0/0 no ip address duplex auto speed auto pppoe enable ! interface Serial4/0 ip address 20.20.20.2 255.255.255.252 serial restart_delay 0 no fair-queue ! interface Virtual-Template1 ip unnumbered Loopback1 ! ip http server no ip http secure-server ip classless ip route 0.0.0.0 0.0.0.0 20.20.20.1 ! end ================================================== ===== Client-Long Reach Simulation - R3 (2620XM) PPPoE Client flash: c2600-ik9s-mz.122-11.T11.bin ================================================== ===== Client-L#sh run Building configuration Current configuration : 1831 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Client-L ! ! memory-size iomem 10 ip subnet-zero ! ! ! vpdn enable ! vpdn-group 1 request-dialin protocol pppoe ! ! crypto isakmp policy 100 authentication pre-share crypto isakmp key cisco1234 address 192.168.1.2 ! ! crypto ipsec transform-set MYSET esp-des esp-md5-hmac mode transport ! crypto map MYMAP 110 ipsec-isakmp set peer 192.168.1.2 set transform-set MYSET match address 120 ! ! ! voice call carrier capacity active ! mta receive maximum-recipients 0 ! interface Loopback0 description LAN ip address 10.10.1.1 255.255.255.0 ip nat inside ! interface Tunnel0 ip address 1.1.1.1 255.255.255.0 tunnel source Dialer1 tunnel destination 192.168.1.2 crypto map MYMAP ! interface FastEthernet0/0 no ip address duplex auto speed auto pppoe enable pppoe-client dial-pool-number 1 ! ! interface Dialer1 mtu 1492 ip address 203.162.3.1 255.255.255.0 ip nat outside encapsulation ppp dialer pool 1 dialer-group 1 crypto map MYMAP ! ip nat inside source route-map NAT interface Dialer1 overload ip classless ip route 0.0.0.0 0.0.0.0 203.162.1.1 ip route 10.10.2.0 255.255.255.0 Tunnel0 ip http server ! ! access-list 120 permit ip 10.10.1.0 0.0.0.255 10.10.2.0 0.0.0.255 access-list 130 deny ip 10.10.1.0 0.0.0.255 10.10.2.0 0.0.0.255 access-list 130 permit ip 10.10.1.0 0.0.0.255 any dialer-list 1 protocol ip permit ! route-map NAT permit 10 match ip address 130 ! call rsvp-sync ! ! mgcp profile default ! dial-peer cor custom ! ! ! ! ! line con 0 line aux 0 line vty 0 4 login ! ! end Client-L# . permit ! route-map NAT permit 10 match ip address 130 ! call rsvp-sync ! ! mgcp profile default ! dial-peer cor custom ! ! ! ! ! line con 0 line aux 0 line vty 0 4 login ! ! end. subnet-zero ! ! ! vpdn enable ! vpdn-group 1 request-dialin protocol pppoe ! ! crypto isakmp policy 100 authentication pre-share crypto isakmp key cisco1234 address 192.168.1.2 ! ! crypto. transport ! crypto map MYMAP 110 ipsec-isakmp set peer 192.168.1.2 set transform-set MYSET match address 120 ! ! ! voice call carrier capacity active ! mta receive maximum-recipients 0 ! interface