Juniper MX104 上的 PPPoE 接口需要帮助

网络工程 IPv4 杜松 pppoe
2022-02-24 16:45:25

我一直在尝试在 MX104 上配置动态订阅者管理,并且也非常成功。我现在面临的问题是,MX 正在侦听并响应 PADI,但是一旦它发送 PADS,它也会发送 PADT,从而终止连接并且 pppoe 统计信息中没有错误。

这是完整的配置:

version 13.3R1.8;
dynamic-profiles {
    LE-profile {
        interfaces {
            pp0 {
                unit "$junos-interface-unit" {
                    ppp-options {
                        pap;
                    }
                    pppoe-options {
                        underlying-interface "$junos-underlying-interface";
                        server;
                    }
                    keepalives interval 30;
                    family inet {
                        filter {
                            input "$junos-input-filter";
                            output "$junos-output-filter";
                        }
                        unnumbered-address lo0.0;
                    }
                }
            }
        }
    }
}
system {
    root-authentication {
        encrypted-password "*********************"; ## SECRET-D     ATA
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    ge-0/0/0 {
        vlan-tagging;
        unit 800 {
            encapsulation ppp-over-ether;
            vlan-id 800;
            pppoe-underlying-options {
                dynamic-profile LE-profile;
            }
        }
        unit 900 {
            encapsulation ppp-over-ether;
            vlan-id 900;
            pppoe-underlying-options {
                dynamic-profile LE-profile;
            }
        }
    }
    fxp0 {
        unit 0 {
            family inet {
                address 10.10.10.10/24;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 90.90.90.1/32;
            }
        }
    }
}
firewall {
    family inet {
        filter MONTHLY_4096_OUT {
            interface-specific;
            term 1 {
                then {
                    policer MONTHLY_4096_POLICER;
                    accept;
                }
            }
        }
        filter MONTHLY_4096_IN {
            interface-specific;
            term 1 {
                then {
                    policer MONTHLY_256K_POLICER;
                    accept;
                }
            }
        }
    }
    policer MONTHLY_4096_POLICER {
        if-exceeding {
            bandwidth-limit 4m;
            burst-size-limit 100k;
        }
        then discard;
    }
    policer MONTHLY_256K_POLICER {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 128k;
        }
        then discard;
    }
}
access {
    radius-server {
        10.10.10.111 {
            secret "*******************"; ## SECRET-DATA
            source-address 10.10.10.10;
        }
    }
    profile RAD {
        accounting-order radius;
        authentication-order radius;
        radius {
            authentication-server 10.10.10.111;
            accounting-server 10.10.10.111;
            options {
                nas-identifier 10.10.10.10;
            }
        }
    }
    address-assignment {
        pool VJ-POOL {
            family inet {
                network 10.170.0.0/15;
                range 1 {
                    low 10.170.0.10;
                    high 10.171.255.252;
                }
                dhcp-attributes {
                    maximum-lease-time 86400;
                    name-server {
                        8.8.8.8;
                    }
                    router {
                        10.170.0.1;
                    }
                }
            }
        }
    }
}

请帮忙。

谢谢。

来自 MX104 的 PPPoE 统计信息

1个回答

很抱歉发布得太晚,但事实证明,由于防火墙,NAS 无法连接到 RADIUS,因此所有请求都被拒绝。我们修复了 RADIUS 上的 iptables 规则,并且现在正在使用相同的动态配置文件。