【PPPoE】CentOS下搭建PPPOE服务器

1、检查是否安装 rp-pppoe 包

rpm -qa rp-pppoe

如果没有安装,则通过yum安装

yum install -y rp-pppoe

2、服务端

(1)设置支持IP转发

vi /etc/sysctl.conf
net.ipv4.ip_forward = 1  # 修改为1

(2)修改服务器配置

vi /etc/ppp/pppoe-server-options
# PPP options for the PPPoE server
# LIC: GPL
require-pap    # 认证方式为pap, 还可以配置为chap方式
login
lcp-echo-interval 10
lcp-echo-failure 2

(3)添加认证账户

添加系统账户

useradd test  # 添加系统用户test
passwd test   # 设置账户密码, 这里设置密码为 123

添加pppoe认证账户,认证账户必须为系统账户,这里使用刚添加的 test/123

# 若采用chap认证方式

vi /etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client        server  secret                  IP addresses
"test"          *       "123"                   *

# 若采用pap认证方式

vi /etc/ppp/pap-secrets
# Secrets for authentication using PAP
# client        server  secret                  IP addresses
"test"          *       "123"                   *

(4)修改配置文件 /etc/ppp/options

vi /etc/ppp/options
# local    # local for chap
auth       # auth for pap
lock       # lock for pap

(5)启动pppoe服务

pppoe-server -I eth1 -L 192.168.0.101 -R 192.168.0.200 -N 10
# -L 虚拟PPPoE接口
# -R 起始地址
# -N 地址个数

3、客户端

(1)与服务端一样,先安装 rp-pppoe 包

(2)使用root用户,执行 pppoe-setup

pppoe-setup
Welcome to the PPPoE client setup.  First, I will run some checks on
your system to make sure the PPPoE client is installed properly...


LOGIN NAME

Enter your Login Name (default root): test    # 输入拨号认证账户

INTERFACE

Enter the Ethernet interface connected to the PPPoE modem
For Solaris, this is likely to be something like /dev/hme0.
For Linux, it will be ethX, where 'X' is a number.
(default eth0):                               # 默认以 eth0 连接拨号

Do you want the link to come up on demand, or stay up continuously?
If you want it to come up on demand, enter the idle time in seconds
after which the link should be dropped.  If you want the link to
stay up permanently, enter 'no' (two letters, lower-case.)
NOTE: Demand-activated links do not interact well with dynamic IP
addresses.  You may have some problems with demand-activated links.
Enter the demand value (default no):

DNS

Please enter the IP address of your ISP's primary DNS server.
If your ISP claims that 'the server will provide dynamic DNS addresses',
enter 'server' (all lower-case) here.
If you just press enter, I will assume you know what you are
doing and not modify your DNS setup.
Enter the DNS information here:

PASSWORD

Please enter your Password:                   # 输入认证账户密码
Please re-enter your Password:

USERCTRL

Please enter 'yes' (three letters, lower-case.) if you want to allow
normal user to start or stop DSL connection (default yes):

FIREWALLING

Please choose the firewall rules to use.  Note that these rules are
very basic.  You are strongly encouraged to use a more sophisticated
firewall setup; however, these will provide basic security.  If you
are running any servers on your machine, you must choose 'NONE' and
set up firewalling yourself.  Otherwise, the firewall rules will deny
access to all standard servers like Web, e-mail, ftp, etc.  If you
are using SSH, the rules will block outgoing SSH connections which
allocate a privileged source port.

The firewall choices are:
0 - NONE: This script will not set any firewall rules.  You are responsible
          for ensuring the security of your machine.  You are STRONGLY
          recommended to use some kind of firewall rules.
1 - STANDALONE: Appropriate for a basic stand-alone web-surfing workstation
2 - MASQUERADE: Appropriate for a machine acting as an Internet gateway
                for a LAN
Choose a type of firewall (0-2): 0

Start this connection at boot time

Do you want to start this connection at boot time?
Please enter no or yes (default no):no

** Summary of what you entered **

Ethernet Interface: eth0
User name:          test
Activate-on-demand: No
DNS:                Do not adjust
Firewalling:        NONE
User Control:       yes
Accept these settings and adjust configuration files (y/n)?y

输入y之后,会提示 ifup ppp0 拨号

Congratulations, it should be all set up!

Type '/sbin/ifup ppp0' to bring up your xDSL link and '/sbin/ifdown ppp0'
to bring it down.
Type '/sbin/pppoe-status /etc/sysconfig/network-scripts/ifcfg-ppp0'
to see the link status.

拨号成功后,ppp0的ip为从服务端分配的地址。

原文地址:https://www.cnblogs.com/fwonfo/p/7819457.html