Configuration Guide
Page 2
..., CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel,... to Increase Your Internet Quotient, TransPath, and VCO are service marks of Cisco Systems, Inc.; The Cisco implementation of TCP header compression is an adaptation of a program...other company. (0501R) Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide Copyright © 2005, Cisco Systems, Inc. THE SOFTWARE...
..., CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel,... to Increase Your Internet Quotient, TransPath, and VCO are service marks of Cisco Systems, Inc.; The Cisco implementation of TCP header compression is an adaptation of a program...other company. (0501R) Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide Copyright © 2005, Cisco Systems, Inc. THE SOFTWARE...
Configuration Guide
Page 6
..., and Accounting 1 Configuring AutoSecure 2 Configuring Access Lists 2 Access Groups 3 Guidelines for Creating Access Groups 3 Configuring a CBAC Firewall 3 Configuring Cisco IOS Firewall IDS 4 Configuring VPNs 4 Configuring Dial Backup and Remote Management 1 Dial Backup Feature Activation Methods 1 Backup Interfaces 2 Configuring Backup Interfaces 2... 17 Configure ISDN Settings 17 Configure the Aggregator and ISDN Peer Router 20 Troubleshooting 1 Getting Started 1 Before Contacting Cisco or Your Reseller 1 ADSL Troubleshooting 2 SHDSL Troubleshooting 2 ATM Troubleshooting Commands 2 ping atm interface...
..., and Accounting 1 Configuring AutoSecure 2 Configuring Access Lists 2 Access Groups 3 Guidelines for Creating Access Groups 3 Configuring a CBAC Firewall 3 Configuring Cisco IOS Firewall IDS 4 Configuring VPNs 4 Configuring Dial Backup and Remote Management 1 Dial Backup Feature Activation Methods 1 Backup Interfaces 2 Configuring Backup Interfaces 2... 17 Configure ISDN Settings 17 Configure the Aggregator and ISDN Peer Router 20 Troubleshooting 1 Getting Started 1 Before Contacting Cisco or Your Reseller 1 ADSL Troubleshooting 2 SHDSL Troubleshooting 2 ATM Troubleshooting Commands 2 ping atm interface...
Configuration Guide
Page 7
... Reset the Password and Save Your Changes 12 Reset the Configuration Register Value 12 Managing Your Router with SDM 13 Reference Information Cisco IOS Software Basic Skills 1 Configuring the Router from a PC 1 Understanding Command Modes 2 Getting Help 4 Enable Secret Passwords and Enable Passwords 5 Entering Global Configuration Mode 5 Using Commands 6 Abbreviating Commands 6 Undoing Commands 6 Command...
... Reset the Password and Save Your Changes 12 Reset the Configuration Register Value 12 Managing Your Router with SDM 13 Reference Information Cisco IOS Software Basic Skills 1 Configuring the Router from a PC 1 Understanding Command Modes 2 Getting Help 4 Enable Secret Passwords and Enable Passwords 5 Entering Global Configuration Mode 5 Using Commands 6 Abbreviating Commands 6 Undoing Commands 6 Command...
Configuration Guide
Page 12
... the ROM Monitor (ROMMON) utility. Part 4: Reference Information • Appendix A, "Cisco IOS Software Basic Skills"-Explains what you need to know about Cisco IOS software before you need to configure your Cisco router for Part 3. • Chapter 12, "Configuring Security Features"-Explains basic configuration of Cisco IOS security features, including firewall and VPN configuration. • Chapter 13, "Configuring...
... the ROM Monitor (ROMMON) utility. Part 4: Reference Information • Appendix A, "Cisco IOS Software Basic Skills"-Explains what you need to know about Cisco IOS software before you need to configure your Cisco router for Part 3. • Chapter 12, "Configuring Security Features"-Explains basic configuration of Cisco IOS security features, including firewall and VPN configuration. • Chapter 13, "Configuring...
Configuration Guide
Page 17
... also describes the default configuration on the equipment. CH A P T E R 1 Basic Router Configuration This chapter provides procedures for each router and their associated port labels on startup. For complete information on the commands used in Appendix A, "Cisco IOS Basic Skills." Features not supported by Cisco Router Router Cisco 851 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN Port...
... also describes the default configuration on the equipment. CH A P T E R 1 Basic Router Configuration This chapter provides procedures for each router and their associated port labels on startup. For complete information on the commands used in Appendix A, "Cisco IOS Basic Skills." Features not supported by Cisco Router Router Cisco 851 Interface Fast Ethernet LAN Fast Ethernet WAN Wireless LAN Port...
Configuration Guide
Page 21
... domain-lookup Example: Router(config)# no ip domain-lookup Router(config)# Purpose Enters global configuration mode, when using a remote terminal, use the following completion of these steps to the router. For complete information on the global parameter commands, see the Cisco IOS Release 12.3 documentation set. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access...
... domain-lookup Example: Router(config)# no ip domain-lookup Router(config)# Purpose Enters global configuration mode, when using a remote terminal, use the following completion of these steps to the router. For complete information on the global parameter commands, see the Cisco IOS Release 12.3 documentation set. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access...
Configuration Guide
Page 24
....255.255.0 Router(config-int)# Sets the IP address and subnet mask for the loopback interface. Configuration Example The loopback interface in this sample configuration is used to support Network Address Translation (NAT) on the loopback commands, see the Cisco IOS Release 12.3 documentation...100 255.255.255.0 (static IP address) ip nat outside ! Perform these steps to global configuration mode. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-8 OL-5332-01 The loopback interface points back to virtual-template1, which acts as a ...
....255.255.0 Router(config-int)# Sets the IP address and subnet mask for the loopback interface. Configuration Example The loopback interface in this sample configuration is used to support Network Address Translation (NAT) on the loopback commands, see the Cisco IOS Release 12.3 documentation...100 255.255.255.0 (static IP address) ip nat outside ! Perform these steps to global configuration mode. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-8 OL-5332-01 The loopback interface points back to virtual-template1, which acts as a ...
Configuration Guide
Page 26
.... Exits line configuration mode, and returns to the interval value. For complete information about the command line commands, see the Cisco IOS Release 12.3 documentation set. 1-10 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 This example shows a timeout of 0 0 specifies never to time out. Specifies a unique password...
.... Exits line configuration mode, and returns to the interval value. For complete information about the command line commands, see the Cisco IOS Release 12.3 documentation set. 1-10 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 This example shows a timeout of 0 0 specifies never to time out. Specifies a unique password...
Configuration Guide
Page 27
... are redistributed by a routing protocol. For complete information on static routing, see the Cisco IOS Release 12.3 documentation set , see the Cisco IOS IP Command Reference, Volume 2 of 4: Routing Protocols. Chapter 1 Basic Router Configuration Configuring Static Routes Configuration Example The following configuration shows the command-line access commands. For more general information on the static...
... are redistributed by a routing protocol. For complete information on static routing, see the Cisco IOS Release 12.3 documentation set , see the Cisco IOS IP Command Reference, Volume 2 of 4: Routing Protocols. Chapter 1 Basic Router Configuration Configuring Static Routes Configuration Example The following configuration shows the command-line access commands. For more general information on the static...
Configuration Guide
Page 29
...)# router rip Router(config-router)# Task Enters router configuration mode, and enables RIP on which RIP is to pass across classful network boundaries. Example: Router(config-router)# version 2 Router(config-router)# Step 3 network ip-address Example: Router(config-router)# network 192.168.1.1 Router(config-router)# network 10.10.7.1 Router(config-router)# Specifies a list of networks on the router. For complete information on RIP, see the Cisco IOS...
...)# router rip Router(config-router)# Task Enters router configuration mode, and enables RIP on which RIP is to pass across classful network boundaries. Example: Router(config-router)# version 2 Router(config-router)# Step 3 network ip-address Example: Router(config-router)# network 192.168.1.1 Router(config-router)# network 10.10.7.1 Router(config-router)# Specifies a list of networks on the router. For complete information on RIP, see the Cisco IOS...
Configuration Guide
Page 31
... Gateway of last resort is directly connected, Loopback0 D 3.0.0.0/8 [90/409600] via 2.2.2.1, 00:00:02, Ethernet0/0 OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-15 static, R - OSPF, IA - OSPF inter area N1 - OSPF external type 2 i - For ...: C - mobile, B - IS-IS summary, L1 - IS-IS level-1, L2 - Exits router configuration mode, and enters privileged EXEC mode. You should see verification output similar to see the Cisco IOS Release 12.3 documentation set 10.0.0.0/24 is subnetted, 1 subnets C 10.108.1.0 is not set ....
... Gateway of last resort is directly connected, Loopback0 D 3.0.0.0/8 [90/409600] via 2.2.2.1, 00:00:02, Ethernet0/0 OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-15 static, R - OSPF, IA - OSPF inter area N1 - OSPF external type 2 i - For ...: C - mobile, B - IS-IS summary, L1 - IS-IS level-1, L2 - Exits router configuration mode, and enters privileged EXEC mode. You should see verification output similar to see the Cisco IOS Release 12.3 documentation set 10.0.0.0/24 is subnetted, 1 subnets C 10.108.1.0 is not set ....
Configuration Guide
Page 41
... access to a specific destination subnetwork. For details about this command and additional parameters that can be set , see the Cisco IOS Security Command Reference. Step 7 dialer-group group-number Example: Router(config-if)# dialer-group 1 Router(config-if)# Assigns the dialer interface to Challenge Handshake Authentication Protocol (CHAP). Chapter 3 Configuring PPP over Ethernet with...
... access to a specific destination subnetwork. For details about this command and additional parameters that can be set , see the Cisco IOS Security Command Reference. Step 7 dialer-group group-number Example: Router(config-if)# dialer-group 1 Router(config-if)# Assigns the dialer interface to Challenge Handshake Authentication Protocol (CHAP). Chapter 3 Configuring PPP over Ethernet with...
Configuration Guide
Page 42
... can be set , as well as information about enabling static translation, see the Cisco IOS IP Command Reference, Volume 1 of 4: Addressing and Services. For details about this command and additional parameters that can be the inside interface for NAT. Example: Router(config)# ip nat pool pool1 192.168.1.0 192.168.2.0 netmask 255.255.252...
... can be set , as well as information about enabling static translation, see the Cisco IOS IP Command Reference, Volume 1 of 4: Addressing and Services. For details about this command and additional parameters that can be the inside interface for NAT. Example: Router(config)# ip nat pool pool1 192.168.1.0 192.168.2.0 netmask 255.255.252...
Configuration Guide
Page 43
...outside interface for information on configuring a loopback interface. See Chapter 1, "Basic Router Configuration," for NAT. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 3-7 Note If you must configure a loopback interface. Enables...NAT Configure Network Address Translation Step 5 Command no shutdown Example: Router(config-if)# no shutdown Router(config-if)# Identifies the specified WAN interface as information about enabling static translation, see the Cisco IOS IP Command Reference, Volume 1 of 4: Addressing and Services.
...outside interface for information on configuring a loopback interface. See Chapter 1, "Basic Router Configuration," for NAT. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 3-7 Note If you must configure a loopback interface. Enables...NAT Configure Network Address Translation Step 5 Command no shutdown Example: Router(config-if)# no shutdown Router(config-if)# Identifies the specified WAN interface as information about enabling static translation, see the Cisco IOS IP Command Reference, Volume 1 of 4: Addressing and Services.
Configuration Guide
Page 44
... is configured for the PPPoE scenario described in this chapter. vpdn enable vpdn-group 1 request-dialin protocol pppoe ! Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 3-8 OL-5332-01 The VLAN interface has an IP address of 192.168.1.1 with NAT For ...complete information on NAT concepts, see the Cisco IOS Release 12.3 documentation set. interface vlan 1 ip address 192.168.1.1 255.255.255.0 ...
... is configured for the PPPoE scenario described in this chapter. vpdn enable vpdn-group 1 request-dialin protocol pppoe ! Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 3-8 OL-5332-01 The VLAN interface has an IP address of 192.168.1.1 with NAT For ...complete information on NAT concepts, see the Cisco IOS Release 12.3 documentation set. interface vlan 1 ip address 192.168.1.1 255.255.255.0 ...
Configuration Guide
Page 49
... interface, but each session must use a separate dialer interface and a separate dialer pool. Step 2 ip address negotiated Example: Router(config-if)# ip address negotiated Router(config-if)# Specifies that can be set, see the Cisco IOS Security Command Reference. The example applies the Challenge Handshake Authentication Protocol (CHAP). The default minimum is obtained through...
... interface, but each session must use a separate dialer interface and a separate dialer pool. Step 2 ip address negotiated Example: Router(config-if)# ip address negotiated Router(config-if)# Specifies that can be set, see the Cisco IOS Security Command Reference. The example applies the Challenge Handshake Authentication Protocol (CHAP). The default minimum is obtained through...
Configuration Guide
Page 50
... this command and additional parameters that can be set , see the Cisco IOS IP Command Reference, Volume 1 of 4: Routing Protocols. Step 10 ip route prefix mask {interface-type interface-number} Example: Router(config)# ip route 10.10.25.2 0.255.255.255 dialer 0 Router(config)# Sets the IP route for the default gateway for any...
... this command and additional parameters that can be set , see the Cisco IOS IP Command Reference, Volume 1 of 4: Routing Protocols. Step 10 ip route prefix mask {interface-type interface-number} Example: Router(config)# ip route 10.10.25.2 0.255.255.255 dialer 0 Router(config)# Sets the IP route for the default gateway for any...
Configuration Guide
Page 51
... and additional parameters that can be set , see the Cisco IOS Wide-Area Networking Command Reference. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 4-5 When a PVC is defined, AAL5SNAP encapsulation is 0, the other cannot be set , see the Cisco IOS Wide-Area Networking Command Reference. Enters ATM virtual circuit configuration...
... and additional parameters that can be set , see the Cisco IOS Wide-Area Networking Command Reference. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 4-5 When a PVC is defined, AAL5SNAP encapsulation is 0, the other cannot be set , see the Cisco IOS Wide-Area Networking Command Reference. Enters ATM virtual circuit configuration...
Configuration Guide
Page 53
... the ATM interface configuration mode) • dsl lom integer • dsl enable-training-log See the Cisco IOS Wide-Area Networking Command Reference for the DSL controller. Step 1 Command controller dsl port Example: Router(config)# controller dsl 0 Router(config-controller)# Purpose Enters the configuration mode for details of the DSL controller and enters controller...
... the ATM interface configuration mode) • dsl lom integer • dsl enable-training-log See the Cisco IOS Wide-Area Networking Command Reference for the DSL controller. Step 1 Command controller dsl port Example: Router(config)# controller dsl 0 Router(config-controller)# Purpose Enters the configuration mode for details of the DSL controller and enters controller...
Configuration Guide
Page 55
...Services. The first example shows the addresses permitted by the access list 1 to be set, as well as information about enabling static translation, see the Cisco IOS IP Command Reference, Volume 1 of the addresses specified in the dialer interface 0. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers... Software Configuration Guide 4-9 Example: Router(config)# ip nat pool pool1 192...
...Services. The first example shows the addresses permitted by the access list 1 to be set, as well as information about enabling static translation, see the Cisco IOS IP Command Reference, Volume 1 of the addresses specified in the dialer interface 0. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers... Software Configuration Guide 4-9 Example: Router(config)# ip nat pool pool1 192...