Cisco Systems 520 series manual Access-list access-list-number deny permit, 0.255

Chapter 4 Configuring PPP over ATM with NAT

Configuration Example

	Command		Purpose
Step 10
	exit		Exits configuration mode for the ATM interface.
	Example:
	Router(config-if)# exit
	Router(config)#
Step 11
	access-list access-list-number{deny permit}		Defines a standard access list permitting
	source [source-wildcard]		addresses that need translation.
	Example:		Note	All other addresses are implicitly denied.
	Router(config)# access-list 1 permit
	192.168.1.0	0.0.0.255

Note If you want to use NAT with a virtual-template interface, you must configure a loopback interface. See Chapter 1, “Basic Router Configuration,” for information on configuring the loopback interface.

For complete information on NAT commands, see the Cisco IOS Release 12.3 documentation set. For more general information on NAT concepts, see Appendix B, “Concepts.”

Configuration Example

The following configuration example shows a portion of the configuration file for a client in the PPPoA scenario described in this chapter.

The VLAN interface has an IP address of 192.168.1.1 with a subnet mask of 255.255.255.0. NAT is configured for inside and outside.

Note Commands marked by “(default)” are generated automatically when you run the show running-configcommand.

!

interface Vlan1

ip address 192.168.1.1 255.255.255.0 ip nat inside

ip virtual-reassembly (default)

!

interface ATM0 no ip address ip nat outside

ip virtual-reassembly no atm ilmi-keepalive pvc 8/35

encapsulation aal5mux ppp dialer dialer pool-member 1

	!
	dsl operating-mode auto
	!
	interface Dialer0
	ip address negotiated
	Cisco Secure Router 520 Series Software Configuration Guide
OL-14210-01		4-9