关键步骤
1、将Dialer接口的TCP-MSS值设置为1200
2、为拨号上网的接口配置默认路由,在接口的高级设置内选择配置缺省路由
这是配置文件,密码部分略去
[V200R005C20SPC200]#drop illegal-mac alarm#ipv6#dns resolvedns proxy enable#wlan ac-global carrier id other ac id 0#arp anti-attack entry-check fixed-mac enable#set transceiver-monitoring disable#dhcp enable#pki realm defaultenrollment self-signed#ssl policy default_policy type serverpki-realm default#acl name GigabitEthernet0/0/0 2998rule 5 permitacl name GigabitEthernet0/0/1 2999rule 5 permit#aaaauthentication-scheme defaultauthorization-scheme defaultaccounting-scheme defaultaccounting-scheme defalutdomain defaultdomain default_adminlocal-user admin password cipher **************local-user admin privilege level 15undo local-user admin service-typelocal-user huawei password irreversible-cipher **************local-user huawei privilege level 15#firewall zone Localpriority 16#interface Dialer0link-protocol pppppp chap user *******************ppp chap password cipher *******************ppp ipcp dns admit-anyppp ipcp dns requesttcp adjust-mss 1200ip address ppp-negotiatedialer user userdialer bundle 1dialer-group 1#interface Dialer1link-protocol pppppp chap user admin_damonppp chap password cipher *******************ppp pap local-user Huawei_doman password cipher *******************ppp ipcp dns admit-anyppp ipcp dns requestmtu 1466tcp adjust-mss 1200ip address ppp-negotiatedialer user arwebdialer user 1dialer-group 1#interface Dialer2link-protocol pppppp chap user *******************ppp chap password cipher *******************ppp pap local-user ******************* password cipher *******************ppp ipcp dns admit-anyppp ipcp dns requesttcp adjust-mss 1200ip address ppp-negotiatedialer user arwebdialer bundle 2dialer-group 2nat outbound 2998#interface Dialer3link-protocol ppp#interface Vlanif1description DHCP ip address 192.168.1.1 255.255.255.0ip address 172.16.31.1 255.255.224.0dhcp select interfacedhcp server dns-list 114.114.114.114 202.96.128.166#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Ethernet0/0/2#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6#interface Ethernet0/0/7#interface GigabitEthernet0/0/0pppoe-client dial-bundle-number 2#interface GigabitEthernet0/0/1pppoe-client dial-bundle-number 1pppoe-client dial-bundle-number 3shutdown#interface Cellular0/0/0#interface Cellular0/0/1#interface NULL0#dialer-ruledialer-rule 1 ip permitdialer-rule 2 ip permit#snmp-agent local-engineid 800007DB03049FCAB9882Csnmp-agent#http secure-server ssl-policy default_policyhttp server enablehttp secure-server enable#ip route-static 0.0.0.0 0.0.0.0 Dialer2#user-interface con 0authentication-mode aaauser-interface vty 0authentication-mode aaauser privilege level 15user-interface vty 1 4authentication-mode aaa#wlan acwlan ac source interface vlanif1#return