0103 Layer 2 WAN Circuit Technologies

CCIE
Routing and Switching v5.0
Instructor – JI ZHU CCIE#15101
© 2014 Cisco Systems, Inc. All rights reserved.

01 Layer 2 Technologies
0103 Layer 2 WAN Circuit Technologies

 3.1 Implement and troubleshoot HDLC

 3.2 Implement and troubleshoot PPP

Circuit Switching

Public Switched Telephone Network

PSTN Considerations
 Advantages
 Simplicity
 Availability
 Cost
 Disadvantages
 Low data rates
 Relatively long connection setup time

Leased Line

WAN Connection Bandwidth

Point-to-Point Considerations
 Advantages
 Simplicity
 Quality
 Availability
 Disadvantages
 Cost
 Limited flexibility

HDLC and Cisco HDLC

Configuring HDLC Encapsulation
RouterX(config-if)# encapsulation hdlc
 Enables Cisco HDLC encapsulation

 Uses the default encapsulation on synchronous serial
interfaces


 PPP
 Using and Configuring Other PPP LCP Options
 PPPoE

PPP

PPP Architecture

Format of PPP Frame

PPP Session Establishment
PPP session establishment:

1. Link establishment phase
2. Authentication phase (optional)
Two PPP authentication protocols: PAP and CHAP
3. Network layer protocol phase

PPP Session Establishment

Configuring PPP and Authentication Overview

Enable PPP Encapsulation
RouterX(config-if)# encapsulation ppp
 Enables PPP encapsulation

PPP Configuration Example
hostname left hostname right

! !
int serial 0 int serial 0
ip address 10.0.1.1 255.255.255.0 ip address 10.0.1.2 255.255.255.0
encapsulation ppp encapsulation ppp

Verifying a Serial Interface Configuration
RouterX# show interface s0/0/0
Serial0/0/0 is up, line protocol is up
Hardware is HD64570
Internet address is 10.140.1.2/24
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255
Encapsulation PPP, loopback not set, keepalive set (10 sec)
LCP Open
Open: IPCP, CDPCP
Last input 00:00:05, output 00:00:05, output hang never
Last clearing of "show interface" counters never
Queueing strategy: fifo
Output queue 0/40, 0 drops; input queue 0/75, 0 drops
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
38021 packets input, 5656110 bytes, 0 no buffer
Received 23488 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
38097 packets output, 2135697 bytes, 0 underruns
0 output errors, 0 collisions, 6045 interface resets
0 output buffer failures, 0 output buffers swapped out
482 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up

Verifying the HDLC and PPP Encapsulation
Configuration
RouterX# show interface s0/0/0
Serial0/0/0 is up, line protocol is up
Hardware is HD64570
LCP Open
Open: IPCP, CDPCP


 PPP
– Authentication (PAP, CHAP)
– Callback
– Compression
– MLPPP
 PPPoE

PPP LCP Options

PPP Authentication

PPP Negotiating PAP Authentication

PAP Authentication

Configuring PAP Example

PPP Using CHAP Authentication

CHAP Authentication

Configuring CHAP Example

Verifying the PPP Encapsulation Configuration
RouterX# show interface s0
Serial0 is up, line protocol is up
Hardware is HD64570
LCP Open
Open: IPCP, CDPCP

Verifying PPP Authentication
RouterX# debug ppp authentication

4d20h: %LINK-3-UPDOWN: Interface Serial0, changed state to up
4d20h: Se0 PPP: Treating connection as a dedicated line
4d20h: Se0 PPP: Phase is AUTHENTICATING, by both
4d20h: Se0 CHAP: O CHALLENGE id 2 len 28 from ”left"
4d20h: Se0 CHAP: I CHALLENGE id 3 len 28 from ”right"
4d20h: Se0 CHAP: O RESPONSE id 3 len 28 from ”left"
4d20h: Se0 CHAP: I RESPONSE id 2 len 28 from ”right"
4d20h: Se0 CHAP: O SUCCESS id 2 len 4
4d20h: Se0 CHAP: I SUCCESS id 3 len 4
4d20h: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to up
The debug ppp authentication command shows successful

CHAP output
Verifying PPP Negotiation
RouterX# debug ppp negotiation

PPP protocol negotiation debugging is on
RouterX#
*Mar 1 00:06:36.645: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
*Mar 1 00:06:36.661: BR0:1 PPP: Treating connection as a callin
*Mar 1 00:06:36.665: BR0:1 PPP: Phase is ESTABLISHING, Passive Open
*Mar 1 00:06:36.669: BR0:1 LCP: State is Listen
*Mar 1 00:06:37.034: BR0:1 LCP: I CONFREQ [Listen] id 7 len 17
*Mar 1 00:06:37.038: BR0:1 LCP: AuthProto PAP (0x0304C023)
*Mar 1 00:06:37.042: BR0:1 LCP: MagicNumber 0x507A214D (0x0506507A214D)
*Mar 1 00:06:37.046: BR0:1 LCP: Callback 0 (0x0D0300)
*Mar 1 00:06:37.054: BR0:1 LCP: O CONFREQ [Listen] id 4 len 15
*Mar 1 00:06:37.058: BR0:1 LCP: AuthProto CHAP (0x0305C22305)
*Mar 1 00:06:37.062: BR0:1 LCP: MagicNumber 0x1081E7E1 (0x05061081E7E1)
*Mar 1 00:06:37.066: BR0:1 LCP: O CONFREJ [Listen] id 7 len 7
*Mar 1 00:06:37.070: BR0:1 LCP: Callback 0 (0x0D0300)
*Mar 1 00:06:37.098: BR0:1 LCP: I CONFACK [REQsent] id 4 len 15
*Mar 1 00:06:37.102: BR0:1 LCP: AuthProto CHAP (0x0305C22305)
*Mar 1 00:06:37.106: BR0:1 LCP: MagicNumber 0x1081E7E1 (0x05061081E7E1)
*Mar 1 00:06:37.114: BR0:1 LCP: I CONFREQ [ACKrcvd] id 8 len 14
*Mar 1 00:06:37.117: BR0:1 LCP: AuthProto PAP (0x0304C023)
*Mar 1 00:06:37.121: BR0:1 LCP: MagicNumber 0x507A214D (0x0506507A214D)


 PPP
– Callback
– Compression
– MLPPP
 PPPoE

PPP Callback Implementation Considerations

Asynchronous Callback Operation Flowchart

PPP Callback Operation

Asynchronous Callback Line/Interface Commands

Configuring a PPP Callback Client

Configuring a PPP Callback Server


 PPP
– Callback
– Compression
– MLPPP
 PPPoE

Supported Compression Algorithms

Configuring Compression

Using the show compress Command


 PPP
– Callback
– Compression
– MLPPP
 PPPoE

Why Use Multilink PPP?

Multilink PPP Operation and Configuration

Multilink PPP Example


 PPP
– Callback
– Compression
– MLPPP
 PPPoE
– Data over ADSL: PPPoE
– Configuring the CPE as the PPPoE Client
– Configuration of the DSL ATM Interface
– Verifying a PPPoE Configuration

Data over ADSL
 IP包通过ATM被封装
 三种主要方法:
– RFC 1483/2684 Bridged
– PPPoE
– PPPoA

RFC 1483/2684 Bridged

PPP over Ethernet
 Ethernet frame carrying PPP frame

 Service provider end:
– DSLAM for DSL connection termination
– Aggregation router for PPP session termination
 Subscriber end:
– DSL modem for DSL connection termination
– PPPoE client for PPP session termination
 The client device is the PC or the router at the CPE

PPP over Ethernet (Cont.)
 IP is assigned to PPPoE client functioning device.

 A CPE router can connect multiple users via a single ADSL connection using
NAT/PAT and DHCP.

PPPoE Session Variables
 DSL and PPPoE deployment types:

 Router terminating DSL and with PPPoE client
 Modem terminating DSL and router with PPPoE client
 Modem terminating DSL and end-user PC with PPPoE client

PPPoE Session Establishment
 PPP session is from PPPoE client to the aggregation router.

 Subscriber IP address is assigned by the aggregation router via IPCP.

PPP over ATM
 Routed solution
 User packets routed over ATM
 Service provider end:
– DSLAM for DSL connection termination
– Aggregation router for PPP session termination
 Subscriber end: CPE for DSL connection and PPP session termination

PPP over ATM (Cont.)
 CPE receives an IP address via IPCP like in the dial model.


 PPP
– Callback
– Compression
– MLPPP
 PPPoE

Configuration Tasks: Configuring the CPE as the PPPoE Client over
the Ethernet Interface
1. Configure an Ethernet interface

2. Configure a dialer interface
3. Configure PAT
4. Configure DHCP server
5. Configure a static default route

PPPoE Client Configuration
router(config)#
interface ethernet number
 Configures the Ethernet interface
router(config-if)#
pppoe enable
• Enables PPPoE on Ethernet interface
router(config-if)#
pppoe-client dial-pool-number number
• Binds a dialer profile to the Ethernet interface

Example: CPE as the PPPoE Client
over the Ethernet Interface

Example: Configuring the PPPoE Dialer Interface
ppp chap hostname cd84455589

over the Ethernet Interface (Cont.)

Router as the PPPoE Server Configuration
vpdn enable
!
bba-group pppoe global
Virtual-template 1
!
Interface virtual-Template 1
Ip mtu 1492
IP unnumbered FastEthernet0/0
Peer default ip address pool cisco
encapsulation ppp
ppp authentication chap
!
Interface FastEthernet0/0
ip add x.x.x.x 255.255.255.0
pppoe enable
no shutdown
!
Username xxxxxx password xxxxxx
Ip local pool cisco x.x.x.x
Port Address Translation

Configure PAT
router(config)#
access-list ACL_num {permit | deny} protocol source_network
source_wildcard destination_network destination_wildcard
 Specifies the addresses that may be translated
router(config)#
ip nat inside source list ACL_num interface interface number
[overload]
• Enables dynamic translation of addresses using the assigned IP

address of the interface
router(config-if)#
ip nat {inside | outside}
• Specifies the interface as inside or outside related to PAT

Example: PAT Configuration

Configure a DHCP Server
router(config)#
ip dhcp pool pool_name
 Enables a DHCP pool for use by hosts and enters DHCP pool configuration mode.
router(dhcp-config)#
import all
• Imports DNS and WINS information from IPCP.

network network_address subnet_mask
• Specifies the network and subnet mask of the pool.

default-router address
• Specifies the default router for the pool to use.

Example: DHCP Server Configuration

Configuring a Static Default Route
router(config)#
ip route 0.0.0.0 0.0.0.0 interface number
 The CPE can use a static default route to reach all remote destinations.

Example: Static Default Route


 PPP
– Callback
– Compression
– MLPPP
 PPPoE

Configuration Tasks: Configuring the CPE as the PPPoE Client over
the ATM Interface
1. Configure an ATM interface

2. Configure a dialer interface
3. Configure PAT
4. Configure DHCP server
5. Configure a static default route

Configuring the PPPoE Dialer Interface
router(config)#
interface dialer number
 Configures the dialer interface.
router(config-if)#
encapsulation ppp
• Specifies PPP encapsulation for the dialer interface.
router(config-if)#
ip address negotiated
• Sets IP address to be negotiated with the remote peer using

IPCP.

Configuring the PPPoE Dialer Interface (Cont.)
router(config-if)#
dialer pool pool_number
 Binds dialer interface to the dialer pool
router(config-if)#
ip mtu mtu_size
• Reduces the maximum Ethernet payload size because the

PPPoE header requires 8 bytes
router(config-if)#
ppp authentication chap [callin]
• (Optional) Configures PPP authentication CHAP

Example: CPE as the PPPoE Client over the ATM
Interface

over the ATM Interface (Cont.)

Example: Configuring the PPPoE Dialer Interface
ppp chap hostname cd84455589

Router as the PPPoE Server Configuration
vpdn enable
!
bba-group pppoe global
Virtual-template 1
!
Interface virtual-Template 1
Ip mtu 1492
IP unnumbered FastEthernet0/0
Peer default ip address pool cisco
encapsulation ppp
ppp authentication chap
!
Interface FastEthernet0/0
ip add x.x.x.x 255.255.255.0
pppoe enable
no shutdown
!
Username xxxxxx password xxxxxx
Ip local pool cisco x.x.x.x
Port Address Translation

Configure PAT
router(config)#
access-list ACL_num {permit | deny} protocol source_network
source_wildcard destination_network destination_wildcard
 Specifies the addresses that may be translated
router(config)#
ip nat inside source list ACL_num interface interface number
[overload]
• Enables dynamic translation of addresses using the assigned IP

address of the interface
router(config-if)#
ip nat {inside | outside}
• Specifies the interface as inside or outside related to PAT

Example: PAT Configuration

Configure a DHCP Server
router(config)#
ip dhcp pool pool_name
 Enables a DHCP pool for use by hosts and enters DHCP pool configuration mode.
import all
• Imports DNS and WINS information from IPCP.

network network_address subnet_mask
• Specifies the network and subnet mask of the pool.

default-router address
• Specifies the default router for the pool to use.

Example: DHCP Server Configuration

Configuring a Static Default Route
router(config)#
ip route 0.0.0.0 0.0.0.0 interface number
 The CPE can use a static default route to reach all remote destinations.

Example: Static Default Route


 PPP
– Callback
– Compression
– MLPPP
 PPPoE

Verifying a PPPoE Configuration
router#
debug pppoe events
 Displays PPPoE protocol messages about events that are part of normal session
establishment or shutdown
router#
debug ppp authentication
• Displays authentication protocol messages, including CHAP

and PAP packet exchanges
router#
show pppoe session
• Displays basic information about currently active PPPoE

sessions

Verifying a PPPoE Configuration (Cont.)
router#
show ip dhcp binding
 Displays address bindings on the Cisco IOS DHCP server
router#
show ip nat translations
• Displays active NAT translations
C:\Documents and Settings\User>

ipconfig /all
• Displays the complete IP configuration on Windows NT, 2000,

or XP system

Debug VPDN PPPoE Events
CPE#debug pppoe events

15:13:41.991: Sending PADI: Interface = Ethernet1
15:13:42.083: PPPoE 0: I PADO
15:13:44.091: PPPOE: we've got our pado and the pado timer went off
15:13:44.091: OUT PADR from PPPoE Session
15:13:44.187: PPPoE 5989: I PADS
15:13:44.187: IN PADS from PPPoE Session
 Determine if the PPPoE connect phase is successful.
CPE#show pppoe session

Total PPPoE sessions 1
PPPoE Session Information

UID SID RemMAC Intf Intf Session
LocMAC VASt state
0 5989 0090.1a41.1a83 Et1 Vi2 N/A
000b.46e2.eb36 UP
• Get the status of the PPPoE session.

Debug PPP Authentication
CPE#debug ppp authentication

CPE#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
CPE(config)#interface ATM 0/0
CPE(config-if)#no shutdown
00:19:05: %LINK-3-UPDOWN: Interface ATM 0/0, changed state to up
00:19:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0/0,
changed state to up
00:19:29: %DIALER-6-BIND: Interface Vi2 bound to profile Di1
00:19:29: Vi2 PPP: Using dialer call direction
00:19:29: Vi2 PPP: Treating connection as a callout
00:19:29: Vi2 PPP: Authorization required
00:19:29: Vi2 PPP: No remote authentication for call-out
00:19:29: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up
00:19:31: Vi2 CHAP: I CHALLENGE id 1 len 24 from "ISP"
00:19:31: Vi2 CHAP: Using hostname from interface CHAP
00:19:31: Vi2 CHAP: Using password from AAA
00:19:31: Vi2 CHAP: O RESPONSE id 1 len 25 from "CPE"
00:19:32: Vi2 CHAP: I SUCCESS id 1 len 4
00:19:33: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-
Access2, changed state to up
 Enable debugging for PPP authentication to verify authentication success.

Verify DHCP Clients
C:\Documents and Settings\User>ipconfig /all
Windows 2000 IP Configuration
Ethernet adapter LAB:
Connection-specific DNS Suffix . : lab.com

Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Mobile
Connection
Physical Address. . . . . . . . . :00-11-25-AF-40-9B
Dhcp Enabled. . . . . . . . . . . :Yes
Autoconfiguration Enabled . . . . :Yes
IP Address. . . . . . . . . . . . :10.0.0.2
Subnet Mask . . . . . . . . . . . :255.0.0.0
Default Gateway . . . . . . . . . :10.0.0.1
DHCP Server . . . . . . . . . . . :10.0.0.1
DNS Servers . . . . . . . . . . . :192.168.1.1
192.168.1.2
Primary WINS Server . . . . . . . : 192.168.1.3
Lease Obtained. . . . . . . . . . : 6. April 2006 16:36:31
Lease Expires . . . . . . . . . . : 7. April 2006 0:36:31
 Verify how the IP address is assigned on the PC.

Verify DHCP Server
CPE#show ip dhcp binding

IP address Client-ID/ Lease expiration Type
Hardware address
10.0.0.2 0100.5056.4000.59 Jan 21 2006 12:50 AM Automatic
10.0.0.3 0100.5056.4000.60 Jan 21 2006 12:50 AM Automatic
 Verify the existing DHCP bindings on the router (DHCP server).

Verify PAT
CPE#show ip nat translations

Pro Inside global Inside local Outside local Outside global
icmp 192.168.1.202:512 10.0.0.2:512 192.168.123.100:512 192.168.123.100:512
 Verify how IP addresses are translated on the router.

PPPoE Sample Configuration
hostname CPE
!
ip dhcp pool MyPool
import all
network 10.0.0.0 255.0.0.0
default-router 10.0.0.1
!
interface Ethernet0/1
no ip address
pppoe enable
pppoe-client dial-pool-number 1
!
interface Ethernet0/0
ip address 10.0.0.1 255.0.0.0
ip nat inside
!
interface Dialer0
ip address negotiated
encapsulation ppp
dialer pool 1
ip mtu 1492
ip nat outside
ppp authentication pap callin
ppp pap sent-username cd84455589 password mysecret
!
ip nat inside source list 101 interface Dialer0 overload
access-list 101 permit ip 10.0.0.0 0.255.255.255 any
!
ip route 0.0.0.0 0.0.0.0 Dialer0

www.91lab.com

0103 Layer 2 WAN Circuit Technologies

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

0103 Layer 2 WAN Circuit Technologies

Uploaded by

Copyright:

Available Formats

CCIE

Routing and Switching v5.0

Instructor – JI ZHU CCIE#15101

© 2014 Cisco Systems, Inc. All rights reserved.