aaa authentication login default local //login authentication aaa authentication enable default enable //enable authentication aaa authentication ppp default local ! username bdcom password 0 bdcom //login username and passwd ! enable password 0 admin level 15 //enable passwd ! ! ! interface Virtual-tunnel0 //ADSL PPPoE dial interface, WAN port mtu 1492 ip address negotiated no ip directed-broadcast no ip unreachable ppp chap hostname 123456 ppp chap password 0 123456 ppp pap sent-username 123456 password 0 123456 ip nat outside //nat outside ip nat mss 1400 ! interface FastEthernet0/0 //bind with PPPoE port, WAN port no ip address no ip directed-broadcast ! interface FastEthernet0/1 //LAN port ip address 192.168.2.1 255.255.255.0 no ip directed-broadcast no ip unreachable ip nat inside ! interface FastEthernet0/2 //LAN port ip address 192.168.3.1 255.255.255.0 no ip directed-broadcast no ip unreachable ip nat inside ! ! ! ip route default Virtual-tunnel0 ! ! ip access-list extended WAN permit ip 192.168.2.0 255.255.255.0 any permit ip 192.168.3.0 255.255.255.0 any ! ! ! vpdn enable ! vpdn-group poe0 request-dialin port Virtual-tunnel0 protocol pppoe pppoe bind FastEthernet0/0 ! ! ! ! ip nat inside source list WAN interface Virtual-tunnel0