Current configuration : 1638 bytes ! version 12.2 service timestamps debug uptime service timestamps log uptime service passWord-encryption ! hostname Router ! ! username adsl PRivilege 15 password 7 xxxxxxxxxxxxxxxxxx ip subnet-zero no ip dhcp conflict logging ip dhcp excluded-address 192.168.0.1 192.168.0.2 ip dhcp ping packets 3 ! ip dhcp pool xxxxxxxx network 192.168.0.0 255.255.255.0 default-router 192.168.0.1 dns-server 202.96.104.18 domain-name xxxxxxxxxxxxxxxxx lease 8 ! ip dhcp pool FTP host 192.168.0.252 255.255.255.0 hardware-address 0010.7500.8021 client-name ftp-server ! vpdn enable ! vpdn-group Adsl request-dialin protocol pppoe ! ! ! ! interface Ethernet0/0 no ip address no ip mroute-cache half-duplex pppoe enable pppoe-client dial-pool-number 100 ! interface Ethernet0/1 ip address 192.168.0.1 255.255.255.0 ip nat inside ip tcp adjust-mss 1450 这条很重要限制内网用户mtu为1450。这样163.net等网站才进的去 half-duplex ! interface Dialer10 ip address negotiated ip nat outside encapsulation ppp no ip mroute-cache load-interval 30 dialer pool 100 dialer-group 99 pulse-time 0 ppp authentication pap callin ppp pap sent-username xxxxxxxx password 7 xxxxxxxxxxxxxxxxxxxxx ! ip nat inside source list 188 interface Dialer10 overload ip nat inside source static tcp 192.168.0.252 21 interface Dialer10 21 ip nat inside source static tcp 192.168.0.188 20000 interface Dialer10 20000 ip classless ip route 0.0.0.0 0.0.0.0 Dialer10 ip http server ip pim bidir-enable ! logging 192.168.0.188 access-list 188 permit ip any any dialer-list 99 protocol ip permit ! line con 0 login local line aux 0 line vty 0 4 login local line vty 5 181 login local ! ! end