The next challenge is to add a second DSL account onto the same SRX110 or in the case of the SRX300 just add a DSL connection. The SRX300 has no PIM slots so cannot get a DSL card added. The way Juniper implement this is to use a ‘pp’ interface which equates roughly to a Cisco Dialler interface. So one the pp interface is created and configured, we need to link it to a physical interface and plug in the Draytek modem. I don’t have any other modems to hand but I suspect any ADSL/VDSL modem would do.
Step 1: Assign our physical WAN port
I’m using fe-0/0/0 as its the default WAN port on the SRX110
root# set interfaces fe-0/0/0 unit 0 encapsulation ppp-over-ether
Step 2: Setup and configure the pp0 (Dialer) interface and chap options
root# set interfaces pp0 unit 0 ppp-options chap default-chap-secret your_password root# set interfaces pp0 unit 0 ppp-options chap local-name your_username root# set interfaces pp0 unit 0 ppp-options chap passive
Step 3: Set the PPOE options and link the physical interface
root# set interfaces pp0 unit 0 pppoe-options underlying-interface fe-0/0/0.0 root# set interfaces pp0 unit 0 pppoe-options idle-timeout 0 root# set interfaces pp0 unit 0 pppoe-options auto-reconnect 3 root# set interfaces pp0 unit 0 pppoe-options client
Step 4: Set up the layer3 info on the pp0
This is a dynamic IP address account so we just let the SRX negotiate.
root# set interfaces pp0 unit 0 family inet mtu 1492 root# set interfaces pp0 unit 0 family inet negotiate-address
Step 5: Routing
We need to add a default route to get internet traffic
root# set routing-options static route 0.0.0.0/0 next-hop pp0.0
Testing
As we are using an external modem, we can’t get much info about the DSL connection. The main tests are ppp related:
root> show ppp summary Interface Session type Session phase Session flags pp0.0 PPP Network root> show ppp statistics Session statistics from PPP process Total sessions: 1 Sessions in disabled phase : 0 Sessions in establish phase : 0 Sessions in authenticate phase: 0 Sessions in network phase : 1 Bundles in pending phase : 0
Lets get some pppoe data:
root> show pppoe interfaces pp0.0 Index 82 State: Session up, Session ID: 6, Service name: None, Session AC name: Vigor2000 PPPoE, Configured AC name: None, Remote MAC address: 00:1d:aa:8b:c2:e0, Session uptime: 17:06:31 ago, Auto-reconnect timeout: 3 seconds, Idle timeout: Never, Underlying interface: fe-0/0/0.0 Index 81
A last general and probably best show command is:
root> show interfaces pp0 brief Physical interface: pp0, Enabled, Physical link is Up Type: PPPoE, Link-level type: PPPoE, MTU: 1532, Speed: Unspecified Device flags : Present Running Interface flags: Point-To-Point SNMP-Traps Logical interface pp0.0 Flags: Point-To-Point SNMP-Traps 0x0 Encapsulation: PPPoE PPPoE: State: SessionUp, Session ID: 6, Session AC name: Vigor2000 PPPoE, Remote MAC address: 00:1d:aa:8b:c2:e0, Configured AC name: None, Service name: None, Auto-reconnect timeout: 3 seconds, Idle timeout: Never, Underlying interface: fe-0/0/0.0 (Index 81) Security: Zone: untrust Allowed host-inbound traffic : dhcp tftp inet my_dsl_address --> my_dsl_next_hop