HP VPN Firewall Appliances Network Management Configuration Guide
134
[Firewall-Dialer1] ip address ppp-negotiate
[Firewall-Dialer1] ppp pap local-user user1 password cipher 123456
[Firewall-Dialer1] quit
# Configure a PPPoE session.
[Firewall] interface gigabitethernet 0/1
[Firewall-GigabitEthernet0/1] pppoe-client dial-bundle-number 1
[Firewall-GigabitEthernet0/1] quit
# Configure an Internet interface for the LAN and configure the default route.
[Firewall] interface gigabitethernet 0/2
[Firewall-GigabitEthernet0/2] ip address 192.168.1.1 255.255.255.0
[Firewall-GigabitEthernet0/2] quit
[Firewall] ip route-static 0.0.0.0 0 dialer 1
If the IP addresses of the hosts in the LAN are private addresses, configure NAT on Firewall. For
more information about NAT, see NAT and ALG Configuration Guide.
2. Configure Router as the PPPoE server:
# Add a PPPoE user.
<Router> system-view
[Router] local-user user1
[Router-luser-user1] password simple 123456
[Router-luser-user1] service-type ppp
[Router-luser-user1] quit
# Configure ATM 1/0 interface.
[Router] interface atm 1/0
[Router-Atm1/0] pvc 0/32
[Router-atm-pvc-Atm1/0-0/32] map bridge virtual-ethernet 1
[Router-atm-pvc-Atm1/0-0/32] quit
[Router-Atm1/0] quit
# Enable PPPoE server on the virtual Ethernet interface.
[Router] interface virtual-ethernet 1
[Router-Virtual-Ethernet1] pppoe-server bind virtual-template 1
[Router-Virtual-Ethernet1] quit
# Configure virtual template 1.
[Router] interface virtual-template 1
[Router-Virtual-Template1] ppp authentication-mode pap domain system
[Router-Virtual-Template1] remote address pool 1
[Router-Virtual-Template1] ip address 1.1.1.1 255.0.0.0
[Router-Virtual-Template1] quit
# Configure local authentication for the users in the default ISP domain system.
[Router] domain system
[Router-isp-system] authentication ppp radius-scheme test
# Add a local IP address pool that contains nine IP addresses.
[Router-isp-system] ip pool 1 1.1.1.2 1.1.1.10
[Router-isp-system] quit
# Configure RADIUS scheme.
[Router] radius scheme test
[Router-radius-test] primary authentication 10.110.91.146 1812