firewall
rule 10 permit dhcpv4 from private.dhcp to private.dhcp
rule 20 permit any from private to private
rule 30 permit any from private to public
rule 40 permit dns from public.wan.ppp0 to public.wan
protect
radius-server local
server enable
nas 127.0.0.1 key awplus-local-radius-server
user 00-00-00-00-00-0a password 00-00-00-00-00-0a
user 00-00-00-00-00-0b password 00-00-00-00-00-0b
user 00-00-00-00-00-0c password 00-00-00-00-00-0c
user userA password passwdA
user userB password passwdB
user userC password passwdC
!
no spanning-tree rstp enable
!
interface eth1
encapsulation ppp 0
!
interface ppp0
ppp ipcp dns request
keepalive
ip address negotiated
ppp username user@isp
ppp password isppasswd
ip tcp adjust-mss pmtu
!
interface vlan1
ip address 192.168.10.1/24
!
zone private
network dhcp
ip subnet 0.0.0.0/0 interface vlan1
network lan
ip subnet 192.168.10.0/24
!
zone public
network wan
ip subnet 0.0.0.0/0 interface ppp0
host ppp0
ip address dynamic interface ppp0
!
application dhcpv4
protocol udp
dport 67 to 68
!
firewall
rule 10 permit dhcpv4 from private.dhcp to private.dhcp
rule 20 permit any from private to private
rule 30 permit any from private to public
rule 40 permit dns from public.wan.ppp0 to public.wan
protect
!
nat
rule 10 masq any from private to public
enable
!
ip dhcp pool pool10
network 192.168.10.0 255.255.255.0
range 192.168.10.100 192.168.10.131
default-router 192.168.10.1
dns-server 192.168.10.1
lease 0 2 0
!
service dhcp-server
!
radius-server host 127.0.0.1 key awplus-local-radius-server
!
aaa authentication dot1x default group radius
aaa authentication auth-mac default group radius
!
radius-server local
server enable
nas 127.0.0.1 key awplus-local-radius-server
user 00-00-00-00-00-0a password 00-00-00-00-00-0a
user 00-00-00-00-00-0b password 00-00-00-00-00-0b
user 00-00-00-00-00-0c password 00-00-00-00-00-0c
user userA password passwdA
user userB password passwdB
user userC password passwdC
!
interface port1.0.1-1.0.4
auth-mac enable
dot1x port-control auto
auth host-mode multi-supplicant
auth two-step enable
!
ip dns forwarding
!
ip route 0.0.0.0/0 ppp0
!
end