Cisco Systems MC-607 manual L2TP Configuration Example, MC-658

Configuring Subscriber-End Broadband Access Router Features

Subscriber-End Broadband Access Router Configuration Examples

hostname Router

!

clock timezone - 0 6 ip subnet-zero

no ip domain-lookup

!

crypto isakmp policy 1 hash md5 authentication pre-share lifetime 5000

crypto isakmp key 1111 address 30.1.1.1 crypto isakmp identity hostname

!

crypto ipsec transform-set test-transform ah-md5-hmac esp-des esp-md5-hmac

!

crypto map test-ipsec local-address cable-modem0 crypto map test-ipsec 10 ipsec-isakmp

set peer 30.1.1.1

set transform-set test-transform match address 100

!

interface Ethernet0

ip address 24.1.0.1 255.255.0.0 no ip directed-broadcast

!

interface cable-modem0

ip address 10.1.0.25 255.255.0.0 no ip directed-broadcast

no keepalive

cable-modem downstream saved channel 213000000 30 no cable-modem compliant bridge

crypto map test-ipsec router rip

version 2 network 10.0.0.0 network 24.0.0.0

!

ip classless

no ip http server

!

access-list 100 permit ip host 10.1.0.25 30.1.1.0 0.0.0.255

!

line con 0 exec-timeout 0 0 transport input none

line vty 0 4 login

!

end

L2TP Configuration Example

Note Encryption/decryption is subject to export licensing controls. To support L2TP and firewalls, the Cisco uBR900 series must be configured in routing mode. Software images running at both the headend and the subscriber end must support the feature set.

Cisco IOS Multiservice Applications Configuration Guide

MC-658