Configuration Guide
Page 4
Contents Configuring Enhanced IGRP 14 Configuration Example 15 Verifying Your Configuration 15 2 P A R T Configuring Your Router for Ethernet and DSL Access 2 C H A P T E R Sample Network Deployments 1 3 C H A P T E R Configuring ...Configuring a LAN with DHCP and VLANs 1 Configure DHCP 2 Configuration Example 4 Verify Your DHCP Configuration 4 Configure VLANs 5 Assign a Switch Port to a VLAN 6 Verify Your VLAN Configuration 6 6 C H A P T E R Configuring a VPN Using Easy VPN and an IPSec Tunnel 1 Configure the IKE Policy 4 Cisco 850 Series and Cisco 870 Series Access Routers Software ...
Contents Configuring Enhanced IGRP 14 Configuration Example 15 Verifying Your Configuration 15 2 P A R T Configuring Your Router for Ethernet and DSL Access 2 C H A P T E R Sample Network Deployments 1 3 C H A P T E R Configuring ...Configuring a LAN with DHCP and VLANs 1 Configure DHCP 2 Configuration Example 4 Verify Your DHCP Configuration 4 Configure VLANs 5 Assign a Switch Port to a VLAN 6 Verify Your VLAN Configuration 6 6 C H A P T E R Configuring a VPN Using Easy VPN and an IPSec Tunnel 1 Configure the IKE Policy 4 Cisco 850 Series and Cisco 870 Series Access Routers Software ...
Configuration Guide
Page 12
... PPP over ATM with NAT"-Provides instructions on how to configure PPPoA with Network Address Translation (NAT) on your Cisco router. • Chapter 5, "Configuring a LAN with DHCP and VLANs"-Provides instructions on how to configure your Cisco router with multiple VLANs and to have it . • Appendix B, "Concepts"-Provides general concept explanations of features. • Appendix...
... PPP over ATM with NAT"-Provides instructions on how to configure PPPoA with Network Address Translation (NAT) on your Cisco router. • Chapter 5, "Configuring a LAN with DHCP and VLANs"-Provides instructions on how to configure your Cisco router with multiple VLANs and to have it . • Appendix B, "Concepts"-Provides general concept explanations of features. • Appendix...
Configuration Guide
Page 22
... from administratively down to other VLANs if desired. Configuring Basic Parameters Chapter 1 Basic Router Configuration Configure Fast Ethernet LAN Interfaces The Fast Ethernet LAN interfaces on your router are not configured with DHCP and VLANs." Configure WAN Interfaces The Cisco 851 and Cisco 871 routers each have one Fast Ethernet interface for WAN connection. Perform these steps to...
... from administratively down to other VLANs if desired. Configuring Basic Parameters Chapter 1 Basic Router Configuration Configure Fast Ethernet LAN Interfaces The Fast Ethernet LAN interfaces on your router are not configured with DHCP and VLANs." Configure WAN Interfaces The Cisco 851 and Cisco 871 routers each have one Fast Ethernet interface for WAN connection. Perform these steps to...
Configuration Guide
Page 35
...in configuring your Cisco username and password. For Ethernet-Based Network Deployments Use the following configuration examples to assist you in configuring your router for Ethernet-based networks. • Chapter 3, "Configuring PPP over Ethernet with NAT" • Chapter 5, "Configuring a LAN with DHCP and VLANs" ... feature. Each scenario is used in the Ethernet-based scenarios and the Cisco 857, Cisco 876, Cisco 877, and Cisco 878 router models can add or substitute features that a specific feature is compatible with DHCP and VLANs" • Chapter 6, "Configuring a VPN Using Easy VPN...
...in configuring your Cisco username and password. For Ethernet-Based Network Deployments Use the following configuration examples to assist you in configuring your router for Ethernet-based networks. • Chapter 3, "Configuring PPP over Ethernet with NAT" • Chapter 5, "Configuring a LAN with DHCP and VLANs" ... feature. Each scenario is used in the Ethernet-based scenarios and the Cisco 857, Cisco 876, Cisco 877, and Cisco 878 router models can add or substitute features that a specific feature is compatible with DHCP and VLANs" • Chapter 6, "Configuring a VPN Using Easy VPN...
Configuration Guide
Page 59
... is described in RFC 2131, uses a client/server model for nodes on both physical LANs and virtual LANs (VLANs). Figure 5-1 Physical and Virtual LANs with DHCP Configured on the Cisco Router 3 1 2 4 92339 1 Fast Ethernet LAN (with DHCP and VLANs The Cisco 870 series routers support clients on these networks. As an administrator, you from having to manually assign an IP...
... is described in RFC 2131, uses a client/server model for nodes on both physical LANs and virtual LANs (VLANs). Figure 5-1 Physical and Virtual LANs with DHCP Configured on the Cisco Router 3 1 2 4 92339 1 Fast Ethernet LAN (with DHCP and VLANs The Cisco 870 series routers support clients on these networks. As an administrator, you from having to manually assign an IP...
Configuration Guide
Page 60
... logical groups of users, regardless of the user's physical location or LAN connection. Router(config)# ip name-server 192.168.11.12 Router(config)# Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-2 OL-5332-01 VLANs enable networks to use for DHCP operation, beginning in this chapter assume you have not performed these...
... logical groups of users, regardless of the user's physical location or LAN connection. Router(config)# ip name-server 192.168.11.12 Router(config)# Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-2 OL-5332-01 VLANs enable networks to use for DHCP operation, beginning in this chapter assume you have not performed these...
Configuration Guide
Page 61
...-dhcp)# import all Router(config-dhcp)# Imports DHCP option parameters into the DHCP portion of the router database. Router(config-dhcp)# dns-server 192.168.35.2 Router(config-dhcp)# OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-3 In this example, we are excluding the router address. Step 4 ip dhcp pool name Example: Router(config)# ip dhcp pool dpool1 Router(config-dhcp)# Creates a DHCP...
...-dhcp)# import all Router(config-dhcp)# Imports DHCP option parameters into the DHCP portion of the router database. Router(config-dhcp)# dns-server 192.168.35.2 Router(config-dhcp)# OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-3 In this example, we are excluding the router address. Step 4 ip dhcp pool name Example: Router(config)# ip dhcp pool dpool1 Router(config-dhcp)# Creates a DHCP...
Configuration Guide
Page 62
... cisco.com Router(config-dhcp)# Step 10 exit Example: Router(config-dhcp)# exit Router(config)# Exits DHCP configuration mode, and enters global configuration mode. ip domain name smallbiz.com ip name-server 192.168.11.12 Verify Your DHCP Configuration Use the following configuration example shows a portion of address pools, bindings, and so forth. Configure DHCP Chapter 5 Configuring a LAN with DHCP...
... cisco.com Router(config-dhcp)# Step 10 exit Example: Router(config-dhcp)# exit Router(config)# Exits DHCP configuration mode, and enters global configuration mode. ip domain name smallbiz.com ip name-server 192.168.11.12 Verify Your DHCP Configuration Use the following configuration example shows a portion of address pools, bindings, and so forth. Configure DHCP Chapter 5 Configuring a LAN with DHCP...
Configuration Guide
Page 63
... set, see the Cisco IOS Switching Services Command Reference. WORD ISL VLAN IDs 1-4094 accounting VLAN accounting configuration ifdescr VLAN subinterface ifDescr Step 2 Router(config)#vlan ISL VLAN ID Example: Router(config)#vlan 2 Router(config-vlan)# Step 3 exit Example: Router(config-vlan)#exit Router(config)# Adds VLANs, with DHCP and VLANs Configure VLANs Router# show ip dhcp server statistics Memory...
... set, see the Cisco IOS Switching Services Command Reference. WORD ISL VLAN IDs 1-4094 accounting VLAN accounting configuration ifdescr VLAN subinterface ifDescr Step 2 Router(config)#vlan ISL VLAN ID Example: Router(config)#vlan 2 Router(config-vlan)# Step 3 exit Example: Router(config-vlan)#exit Router(config)# Adds VLANs, with DHCP and VLANs Configure VLANs Router# show ip dhcp server statistics Memory...
Configuration Guide
Page 64
...Chapter 5 Configuring a LAN with DHCP and VLANs Assign a Switch Port to a VLAN Perform these steps to assign a switch port to a VLAN, beginning in global configuration mode: Command Step 1 interface switch port id Example: Router(config)# interface FastEthernet 2 Router(config-if)# Purpose Specifies... Media Type: Ethernet VLAN 802.10 Id: 100002 State: Operational MTU: 1500 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-6 OL-5332-01 Router# vlan database Router(vlan)# show -Entered from privileged EXEC mode. Verify Your VLAN Configuration Use the...
...Chapter 5 Configuring a LAN with DHCP and VLANs Assign a Switch Port to a VLAN Perform these steps to assign a switch port to a VLAN, beginning in global configuration mode: Command Step 1 interface switch port id Example: Router(config)# interface FastEthernet 2 Router(config-if)# Purpose Specifies... Media Type: Ethernet VLAN 802.10 Id: 100002 State: Operational MTU: 1500 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-6 OL-5332-01 Router# vlan database Router(vlan)# show -Entered from privileged EXEC mode. Verify Your VLAN Configuration Use the...
Configuration Guide
Page 65
Chapter 5 Configuring a LAN with DHCP and VLANs Configure VLANs OL-5332-01 VLAN ISL Id: 3 Name: red-vlan Media Type: Ethernet VLAN 802.10 Id: 100003 State: Operational MTU: 1500 ... Name: trnet-default Media Type: Token Ring Net VLAN 802.10 Id: 101005 State: Operational MTU: 1500 Bridge Type: SRB Bridge Number: 1 STP Type: IBM Router# show vlan-switch VLAN Name Status Ports 1 default active Fa0, Fa1, Fa3 2 VLAN0002 active Fa2 1002 fddi-default active 1003 token-ring-default active 1004...
Chapter 5 Configuring a LAN with DHCP and VLANs Configure VLANs OL-5332-01 VLAN ISL Id: 3 Name: red-vlan Media Type: Ethernet VLAN 802.10 Id: 100003 State: Operational MTU: 1500 ... Name: trnet-default Media Type: Token Ring Net VLAN 802.10 Id: 101005 State: Operational MTU: 1500 Bridge Type: SRB Bridge Number: 1 STP Type: IBM Router# show vlan-switch VLAN Name Status Ports 1 default active Fa0, Fa1, Fa3 2 VLAN0002 active Fa2 1002 fddi-default active 1003 token-ring-default active 1004...
Configuration Guide
Page 66
Configure VLANs Chapter 5 Configuring a LAN with DHCP and VLANs VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 1 enet 100001 1500 - - - - - 1002 1003 2 enet 100002 1500 - - - - - 0 0 1002 fddi 101002 1500 - - - - - 1 1003 1003 tr 101003 1500 1005 0 - - srb 1 1002 1004 fdnet 101004 1500 - - 1 ibm - 0 0 1005 trnet 101005 1500 - - 1 ibm - 0 0 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-8 OL-5332-01
Configure VLANs Chapter 5 Configuring a LAN with DHCP and VLANs VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 1 enet 100001 1500 - - - - - 1002 1003 2 enet 100002 1500 - - - - - 0 0 1002 fddi 101002 1500 - - - - - 1 1003 1003 tr 101003 1500 1005 0 - - srb 1 1002 1004 fdnet 101004 1500 - - 1 ibm - 0 0 1005 trnet 101005 1500 - - 1 ibm - 0 0 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-8 OL-5332-01
Configuration Guide
Page 69
..."Configuration Example" section on the Cisco 870 series router. See the software configuration documentation as PPPoE or PPPoA with DHCP and VLANs" as appropriate for other router models. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 6-3 If you ...Remote Configuration An example showing the results of these configurations tasks, see Chapter 1, "Basic Router Configuration," Chapter 3, "Configuring PPP over Ethernet with NAT," Chapter 4, "Configuring PPP over ATM with NAT," and Chapter 5, "Configuring a LAN with NAT, DCHP and VLANs.
..."Configuration Example" section on the Cisco 870 series router. See the software configuration documentation as PPPoE or PPPoA with DHCP and VLANs" as appropriate for other router models. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 6-3 If you ...Remote Configuration An example showing the results of these configurations tasks, see Chapter 1, "Basic Router Configuration," Chapter 3, "Configuring PPP over Ethernet with NAT," Chapter 4, "Configuring PPP over ATM with NAT," and Chapter 5, "Configuring a LAN with NAT, DCHP and VLANs.
Configuration Guide
Page 80
... to the permitted source and destination of the router. If you have not performed these configuration tasks is used , the Cisco router and the router that controls access to a private network, such as internal IP addresses, internal subnet masks, DHCP server addresses, and Network Address Translation (NAT...Intermediate System-to configure a VPN over ATM with NAT," and Chapter 5, "Configuring a LAN with DHCP and VLANs," as PPPoE or PPPoA with GRE, the access list for example, on your Cisco router and at the remote user, or on both endpoints; You must be configured on your...
... to the permitted source and destination of the router. If you have not performed these configuration tasks is used , the Cisco router and the router that controls access to a private network, such as internal IP addresses, internal subnet masks, DHCP server addresses, and Network Address Translation (NAT...Intermediate System-to configure a VPN over ATM with NAT," and Chapter 5, "Configuring a LAN with DHCP and VLANs," as PPPoE or PPPoA with GRE, the access list for example, on your Cisco router and at the remote user, or on both endpoints; You must be configured on your...
Configuration Guide
Page 92
...Router Configuration," Chapter 3, "Configuring PPP over Ethernet with NAT," and Chapter 4, "Configuring PPP over ATM with NAT," as PPPoE or PPPoA with NAT. Cisco 850 Series and Cisco 870 Series Access Routers...LAN interface (the inside interface for NAT) 3 PPPoE or PPPoA client and firewall implementation-Cisco 851/871 or Cisco 857/876/877/878 series access router...Cisco 851 or Cisco 871 and protects the Fast Ethernet LAN on FE0 by filtering and inspecting all traffic entering the router on page 8-5. If you have already configured basic router... for your router. Configuration Tasks...
...Router Configuration," Chapter 3, "Configuring PPP over Ethernet with NAT," and Chapter 4, "Configuring PPP over ATM with NAT," as PPPoE or PPPoA with NAT. Cisco 850 Series and Cisco 870 Series Access Routers...LAN interface (the inside interface for NAT) 3 PPPoE or PPPoA client and firewall implementation-Cisco 851/871 or Cisco 857/876/877/878 series access router...Cisco 851 or Cisco 871 and protects the Fast Ethernet LAN on FE0 by filtering and inspecting all traffic entering the router on page 8-5. If you have already configured basic router... for your router. Configuration Tasks...
Configuration Guide
Page 98
...key used for clients. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-2 OL-5332-01 You may have already configured basic router features as well as ...have also configured DHCP, VLANs, and secure tunnels. Note This command is provided in global configuration mode: Step 1 Command interface name number Example: Router(config)# interface dot11radio 0 Router(config-if)#... (such as appropriate for more details. See the Cisco IOS Commands for Access Points and Bridges for your wireless LAN, beginning in the "Configuration Example" section on page...
...key used for clients. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-2 OL-5332-01 You may have already configured basic router features as well as ...have also configured DHCP, VLANs, and secure tunnels. Note This command is provided in global configuration mode: Step 1 Command interface name number Example: Router(config)# interface dot11radio 0 Router(config-if)#... (such as appropriate for more details. See the Cisco IOS Commands for Access Points and Bridges for your wireless LAN, beginning in the "Configuration Example" section on page...
Configuration Guide
Page 172
...single registered IP address. NAT is a client-server protocol that require external access, saving time and money. DHCP is configured on the remote LAN are invisible to the Internet. A static address translation establishes a one-to-one mapping between the inside ...Phase 1) feature combines NAT and PPP/IPCP. DHCP allocates network addresses from the ISP router. With PPP/IPCP, Cisco routers automatically negotiate a globally unique (registered) IP address for overlapping networks and translate as appropriate. DHCP configures the router to forward UDP broadcasts, including IP address ...
...single registered IP address. NAT is a client-server protocol that require external access, saving time and money. DHCP is configured on the remote LAN are invisible to the Internet. A static address translation establishes a one-to-one mapping between the inside ...Phase 1) feature combines NAT and PPP/IPCP. DHCP allocates network addresses from the ISP router. With PPP/IPCP, Cisco routers automatically negotiate a globally unique (registered) IP address for overlapping networks and translate as appropriate. DHCP configures the router to forward UDP broadcasts, including IP address ...
Configuration Guide
Page 190
... command variables listing 4 TFTP download 4 committed access rate See CAR configuration changes making 5 saving 12, 7 configuration examples command-line access 11 DHCP server 4 dynamic routes 14 EIGRP 15 PPPoA with NAT 11 PPPoE with NAT 8 simple firewall 5 static route 12 VPN with IPSec and GRE ...9 VPN with IPSec tunnel 11 wireless LAN 7 configuration prerequisites 4 configuration register changing 10 to 11 changing from ROM monitor 6 value, resetting 12 configuring ATM WAN interface 7 IN-2 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01
... command variables listing 4 TFTP download 4 committed access rate See CAR configuration changes making 5 saving 12, 7 configuration examples command-line access 11 DHCP server 4 dynamic routes 14 EIGRP 15 PPPoA with NAT 11 PPPoE with NAT 8 simple firewall 5 static route 12 VPN with IPSec and GRE ...9 VPN with IPSec tunnel 11 wireless LAN 7 configuration prerequisites 4 configuration register changing 10 to 11 changing from ROM monitor 6 value, resetting 12 configuring ATM WAN interface 7 IN-2 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01
Configuration Guide
Page 191
...15 Fast Ethernet LAN interfaces 6 Fast Ethernet WAN interface 6 firewall 1 to 5 global parameters 5 GRE tunnel 8 group policy 5, 4 IKE policy 4, 3 inspection rules for firewalls 3 IP EIGRP 14 to 15 IPSec tunnel 1 loopback interface 8 to 9 NAT 9 PPPoE with NAT 1, 2 RIP 13 router from PC 1... 6 dialer watch 4, 7 dir device command 3 disaster recovery 3 to 6 DSL signaling protocol 6 Dynamic Host Configuration Protocol See DHCP dynamic routes configuration example 14 configuring 12, 14 E Easy IP OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide IN-3
...15 Fast Ethernet LAN interfaces 6 Fast Ethernet WAN interface 6 firewall 1 to 5 global parameters 5 GRE tunnel 8 group policy 5, 4 IKE policy 4, 3 inspection rules for firewalls 3 IP EIGRP 14 to 15 IPSec tunnel 1 loopback interface 8 to 9 NAT 9 PPPoE with NAT 1, 2 RIP 13 router from PC 1... 6 dialer watch 4, 7 dir device command 3 disaster recovery 3 to 6 DSL signaling protocol 6 Dynamic Host Configuration Protocol See DHCP dynamic routes configuration example 14 configuring 12, 14 E Easy IP OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide IN-3
Configuration Guide
Page 193
...11, 9 configuring 1 crypto method 8, 6 transforms and protocols 7, 5 ISDN configuring the BRI 17 configuring the peer router 20 S/T port for dial backup 16 ISDN interface, configuring 17 ISDN peer router, configuring 20 K k command 9 L LAN with DHCP and VLANs, configuring 1 to 8 LCP 4 LFQ 10 line configuration mode 4 Link Control Protocol See LCP LLC 6... 2 network scenarios See configuration examples nonvolatile RAM See NVRAM note, described 13 NVRAM, saving changes to 7 O overloading, defined 8 OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide IN-5
...11, 9 configuring 1 crypto method 8, 6 transforms and protocols 7, 5 ISDN configuring the BRI 17 configuring the peer router 20 S/T port for dial backup 16 ISDN interface, configuring 17 ISDN peer router, configuring 20 K k command 9 L LAN with DHCP and VLANs, configuring 1 to 8 LCP 4 LFQ 10 line configuration mode 4 Link Control Protocol See LCP LLC 6... 2 network scenarios See configuration examples nonvolatile RAM See NVRAM note, described 13 NVRAM, saving changes to 7 O overloading, defined 8 OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide IN-5