Manuals / Cisco Systems / Computer Equipment / Webcam

Cisco Systems 520 series manual ATM0

Models: 520 series

1 162

Download 162 pages 25.58 Kb

Page 56

Chapter 4 Configuring PPP over ATM with NAT

Configuration Example

ip mtu 1492 encapsulation ppp dialer pool 1 dialer-group 1

ppp authentication chap

!

ip classless (default)

!

ip nat pool pool1 192.168.1.0 192.168.2.0 netmask 0.0.0.255 ip nat inside source list 1 interface Dialer0 overload

!

access-list 1 permit 192.168.1.0 0.0.0.255 dialer-list 1 protocol ip permit

ip route 10.10.25.2 0.255.255.255 dialer 0

!

Verifying Your Configuration

Use the show ip nat statistics command in privileged EXEC mode to verify the PPPoA client with NAT configuration. You should see verification output similar to the following example:

Router# show ip nat statistics

Total active translations: 0 (0 static, 0 dynamic; 0 extended) Outside interfaces:

ATM0

Inside interfaces: Vlan1

Hits: 0 Misses: 0

CEF Translated packets: 0, CEF Punted packets: 0

Expired translations: 0 Dynamic mappings:

-- Inside Source

[Id: 1] access-list 1 interface Dialer0 refcount 0

Queued Packets: 0

	Cisco Secure Router 520 Series Software Configuration Guide
4-10	OL-14210-01

Image 56

Cisco Systems 520 series manual ATM0

Contents

Cisco Secure Router 520 Series Software Configuration Guide Americas HeadquartersPage N T E N T S IiiVerify the Configuration Additional Configuration Options Reference Information Rsvp ViiUsing the Tftp Download Command C-5 ViiiAudience PrefaceObjective Part 2 Configuring Your Router for Ethernet and DSL Access Part 3 Configuring Additional Features and TroubleshootingOrganization Part 1 Getting StartedConventions Appendix D, Common Port AssignmentsWarnung Wichtige Sicherheitshinweise Avvertenza Importanti Istruzioni Sulla SicurezzaAviso Instruções Importantes DE Segurança XiiGuarde Estas Instrucciones XiiiGEM Disse Anvisninger XivPage Cisco Regulatory Compliance and Safety Information Roadmap Cisco Secure Router 520 Series Hardware Installation GuideRelated Documentation XviObtaining Documentation and Submitting a Service Request XviiXviii Getting Started Page Basic Router Configuration Viewing the Default Configuration Information Needed for Customizing the Default ParametersRouter Interface Port Label Configuring Basic ParametersInterface Port Labels Configure Global Parameters Configure Fast Ethernet LAN InterfacesConfigure WAN Interfaces Command PurposeRouterconfig# interface fastethernet Routerconfig-if# ip address 255.255.255.0Interface type number No shutdownConfigure the Wireless Interface Configuring a Loopback InterfaceEnables the ATM 0 interface Exits configuration mode for the ATM interfaceExits configuration mode for the loopback Interface and returns to global configuration modeLoopback interface Router# show interface loopbackConfiguring Command-Line Access to the Router Password passwordLogin Exec-timeoutminutes secondsEnd Verifying Your Configuration Configuring Static RoutesConfiguration Example Configuring Dynamic Routes Configuring RIPCommand Task Router ripNo auto-summary Configuring Your Router for Ethernet and DSL Access Page For DSL-Based Network Deployments Sample Network DeploymentsFor Ethernet-Based Network Deployments Sample Network Deployments Configuring PPP over Ethernet with NAT PPPoE session between the client and a PPPoE serverConfiguration Tasks Command or Action PurposeVpdn enable PPPoEConfigure the Fast Ethernet WAN Interfaces Configures the PPPoE client and specifiesRequest-dialin Protocol l2tp pppoeConfigure the Dialer Interface Configure Network Address Translation Ppp authentication protocol1 protocol2Dialer pool number Dialer-group group-numberEnables dynamic translation of addresses on By the access list 1 to be translated to onePermitted by access list acl1 to be translated to one Enables the configuration changes just made toAccess-list access-list-number deny permit Routerconfig# access-list 1 permitIp nat inside outside Source source-wildcardConfiguration Example Router# show ip nat statisticsId 1 access-list 1 interface Dialer0 refcount Queued Packets OL-14210-01 Configuring PPP over ATM with NAT PPP over ATM with NATPPPoA Sets the PPP authentication method Authentication Protocol ChapUsing a dialer group controls access to Specifies that the IP address for the dialerCommand Reference, Volume 1 of 4 Routing Configure the ATM WAN Interface Configure DSL Signaling Protocol Configuring AdslAttribute Description Default Value Dsl lom integer Dsl enable-training-logPool1 Permitted by access list acl1 to be translated toOne of the addresses specified in the NAT pool Reference, Volume 1 of 4 Addressing 0.255 ATM0 Configuring a LAN with Dhcp and VLANs DhcpDotted-decimal domain name Configure DhcpVLANs Enters Dhcp pool configuration mode. The name Exits Dhcp configuration mode, and entersGlobal configuration mode Creates a Dhcp address pool on the routerVerify Your Dhcp Configuration Router# show ip dhcp importIp dhcp pool Server statisticsVlan vlan-id media type name vlan-name Configure VLANsVlan database Assign a Switch Port to a Vlan Verify Your Vlan ConfigurationExits interface mode and returns to privileged Exec modeRouter# show vlan-switch VlanSaid MTU Configuring a VPN Using Easy VPN and an IPsec Tunnel Remote Access VPN Using IPsec TunnelCisco Easy VPN Configure the IKE Policy Configure Group Policy Information Apply Mode Configuration to the Crypto Map Enable Policy Lookup Configure IPsec Transforms and ProtocolsConfigure the IPsec Crypto Method and Parameters Apply the Crypto Map to the Physical Interface Reverse-routeCrypto map map-name seq-num ipsec-isakmp Dynamic dynamic-map-name discoverCreate an Easy VPN Remote Configuration Crypto map map-nameVerifying Your Easy VPN Configuration Crypto ipsec client ezvpn name outside insideEzvpn ezvpnclient outside Router# show crypto ipsec client ezvpnCrypto ipsec client ezvpn ezvpnclient connect auto OL-14210-01 Site-to-Site VPN Using an IPsec Tunnel and GRE VPNs Configure a VPNGRE Tunnels Configure the IKE Policy Configure Group Policy Information Ip local pool default poolnameDomain name Low-ip-address high-ip-addressEnable Policy Lookup Configure IPsec Transforms and ProtocolsCreates a dynamic crypto map entry, and enters Configure the IPsec Crypto Method and ParametersSpecifies global lifetime values used when Apply the Crypto Map to the Physical Interface MapConfigure a GRE Tunnel 192.168.101.1Tunnel interface must be configured to Exits interface configuration mode, and returns toEnters ACL configuration mode for the named Access-list-name ACL that is used by the crypto mapSet transform-set set1 match address No cdp run OL-14210-01 Configuring a Simple Firewall Fast Ethernet LAN interface the inside interface for NAT Configure Access Lists Creates an access list which prevents InternetDetails about this command Creates an access list that allows network trafficConfigure Inspection Rules Apply Access Lists and Inspection Rules to InterfacesRouterconfig-if# ip access-group 103 Ip nat outside no cdp enable Configuring a Wireless LAN Connection 1shows a wireless network deploymentConfigure the Root Radio Station For clientsEquivalent Privacy WEP cannot use Bridges for more detailsCreates a Service Set ID SSID, the public Name of a wireless networkSets the permitted authentication methods for a User attempting access to the wireless LANConfigure Bridging on VLANs Bridge-group parameter Configure Radio Station SubinterfacesBridge-group number Disables the Cisco Discovery Protocol CDP On the wireless interfaceEnabled, the following commands are Automatically enabled, and cannot beNo bridge-group 2 unicast-flooding No ip address bridge-group Configuring Additional Features and Troubleshooting Page Additional Configuration Options 10-110-2 11-1 Configuring Security FeaturesAuthentication, Authorization, and Accounting Configuring AutoSecure Configuring Access ListsConfiguration Commands ACL TypeConfiguring a Cbac Firewall Access GroupsIp access-groupaccess-list-number access-list-nameinout Ip inspect name inspection-name protocol timeout seconds11-4 Configuring Cisco IOS Firewall IDSConfiguring VPNs Troubleshooting Getting StartedBefore Contacting Cisco or Your Reseller 12-1Adsl Troubleshooting ATM Troubleshooting CommandsPing atm interface Command 12-2Show interface Command 12-312-4 Shutdown commandOutput Cause Show atm interface Command Debug atm CommandsField Description 12-5Router# debug atm events Router# Router# debug atm errors ATM errors debugging is on Router#12-6 12-7 Example 12-6 Viewing ATM Interface Processor Events-FailureRouter# debug atm packet Router# 012348ATM0O Software Upgrade Methods12-8 Recovering a Lost Password Change the Configuration Register12-9 Router# show version12-10 Rommon 2 confregReset the Password and Save Your Changes Reset the Configuration Register ValueRouter# show startup-config Router# copy running-config startup-config12-12 Reference Information Page PC Operating System Software Configuring the Router from a PCCisco IOS Software Basic Skills Understanding Command Modes As interface atm Ctrl-ZRouter rip, from Enable Secret Passwords and Enable PasswordsGetting Help Entering Global Configuration Mode Using CommandsSaving Configuration Changes Abbreviating CommandsUndoing Commands Command-Line Error MessagesWhere to Go Next SummaryOL-14210-01 Concepts AdslNetwork Protocols Routing Protocol OptionsPPP Authentication Protocols PAPATM for DSL Network InterfacesEthernet Dialer Interface PVCEasy IP Phase PPP Fragmentation and Interleaving QoSIP Precedence Cbwfq Low Latency QueuingAccess Lists OL-14210-01 Configure terminal Enters global configuration mode Config-reg Resets the configuration registerROM Monitor Entering the ROM MonitorROM Monitor Commands ReloadCommand Description Command DescriptionsDisaster Recovery with Tftp Download Tftp Download Command Variables Variable CommandConfiguration Register Using the Tftp Download CommandTFTPTIMEOUT= time RetrytimesRommon 1 confreg Changing the Configuration Register ManuallyChanging the Configuration Register Using Prompts Xmodem -cyrxdestinationfilename Command DescriptionConsole Download Debug Commands Error ReportingExiting the ROM Monitor Appendix C ROM Monitor Exiting the ROM MonitorOL-14210-01 Common Port Assignments Port Keyword DescriptionFinger See ARP See AdslSee AAL See ATMSee CAR IN-2See Dhcp IN-3See LCP IN-4IN-5 IN-6 See RIPSee NAT IN-7 IN-8