Configuration Guide
Page 4
Contents Configuring Enhanced IGRP 14 Configuration Example 15 Verifying Your Configuration 15 2 P A R T Configuring Your Router for Ethernet and DSL Access 2 C H A P T E R Sample Network Deployments 1 3 C H A P T E R Configuring ... LAN with DHCP and VLANs 1 Configure DHCP 2 Configuration Example 4 Verify Your DHCP Configuration 4 Configure VLANs 5 Assign a Switch Port to a VLAN 6 Verify Your VLAN Configuration 6 6 C H A P T E R Configuring a VPN Using Easy VPN and an IPSec Tunnel 1 Configure the IKE Policy 4 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration ...
Contents Configuring Enhanced IGRP 14 Configuration Example 15 Verifying Your Configuration 15 2 P A R T Configuring Your Router for Ethernet and DSL Access 2 C H A P T E R Sample Network Deployments 1 3 C H A P T E R Configuring ... LAN with DHCP and VLANs 1 Configure DHCP 2 Configuration Example 4 Verify Your DHCP Configuration 4 Configure VLANs 5 Assign a Switch Port to a VLAN 6 Verify Your VLAN Configuration 6 6 C H A P T E R Configuring a VPN Using Easy VPN and an IPSec Tunnel 1 Configure the IKE Policy 4 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration ...
Configuration Guide
Page 12
... over ATM with NAT"-Provides instructions on how to configure PPPoA with Network Address Translation (NAT) on your Cisco router. • Chapter 5, "Configuring a LAN with DHCP and VLANs"-Provides instructions on how to configure your Cisco router. • Chapter 9, "Configuring a Wireless LAN Connection"-Provides instructions on how to configure a VPN with the ADSL line and...
... over ATM with NAT"-Provides instructions on how to configure PPPoA with Network Address Translation (NAT) on your Cisco router. • Chapter 5, "Configuring a LAN with DHCP and VLANs"-Provides instructions on how to configure your Cisco router. • Chapter 9, "Configuring a Wireless LAN Connection"-Provides instructions on how to configure a VPN with the ADSL line and...
Configuration Guide
Page 20
... America) or Annex B (Europe). Order the appropriate line from your service provider. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-4 OL-5332-01 PPP password to access the router - PPP authentication type: Challenge Handshake Authentication Protocol (CHAP) or Password ... shaping parameters. - Information Needed for Configuration Chapter 1 Basic Router Configuration Information Needed for Configuration You need to determine the PPP-related configuration items. • If you may use DHCP to -Point Protocol (PPP) client name that the ADSL...
... America) or Annex B (Europe). Order the appropriate line from your service provider. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 1-4 OL-5332-01 PPP password to access the router - PPP authentication type: Challenge Handshake Authentication Protocol (CHAP) or Password ... shaping parameters. - Information Needed for Configuration Chapter 1 Basic Router Configuration Information Needed for Configuration You need to determine the PPP-related configuration items. • If you may use DHCP to -Point Protocol (PPP) client name that the ADSL...
Configuration Guide
Page 22
...mode for a Fast Ethernet WAN interface on the router model you have, configure the WAN interface(s) using one of the default VLAN and as such, they are not configured with DHCP and VLANs." Configure WAN Interfaces The Cisco 851 and Cisco 871 routers each have one ATM interface for the Fast ...Ethernet interface and returns to other VLANs if desired. Based on the router. Sets the IP address and subnet mask for ...
...mode for a Fast Ethernet WAN interface on the router model you have, configure the WAN interface(s) using one of the default VLAN and as such, they are not configured with DHCP and VLANs." Configure WAN Interfaces The Cisco 851 and Cisco 871 routers each have one ATM interface for the Fast ...Ethernet interface and returns to other VLANs if desired. Based on the router. Sets the IP address and subnet mask for ...
Configuration Guide
Page 35
... DSL-based networks. • Chapter 4, "Configuring PPP over the WAN interface with DHCP and VLANs" • Chapter 6, "Configuring a VPN Using Easy VPN and an IPSec Tunnel" OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 2-1 Each successive scenario builds on which you in the DSL-based scenarios. CH...
... DSL-based networks. • Chapter 4, "Configuring PPP over the WAN interface with DHCP and VLANs" • Chapter 6, "Configuring a VPN Using Easy VPN and an IPSec Tunnel" OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 2-1 Each successive scenario builds on which you in the DSL-based scenarios. CH...
Configuration Guide
Page 59
... each client. Figure 5-1 shows a typical deployment scenario with DHCP and VLANs The Cisco 870 series routers support clients on the Cisco Router 3 1 2 4 92339 1 Fast Ethernet LAN (with multiple networked devices) 2 Router and DHCP server-Cisco 870 series access router-connected to your Cisco 800 series router to act as a DHCP server, providing IP address assignment and other TCP/IP-oriented configuration information...
... each client. Figure 5-1 shows a typical deployment scenario with DHCP and VLANs The Cisco 870 series routers support clients on the Cisco Router 3 1 2 4 92339 1 Fast Ethernet LAN (with multiple networked devices) 2 Router and DHCP server-Cisco 870 series access router-connected to your Cisco 800 series router to act as a DHCP server, providing IP address assignment and other TCP/IP-oriented configuration information...
Configuration Guide
Page 60
... from the Network Registrar database. VLANs The Cisco 870 series access routers support four Fast Ethernet ports on which you have already configured basic router features as well as appropriate for your router for name and address resolution. Configure DHCP Chapter 5 Configuring a LAN with DHCP and VLANs When you configure a DHCP server, you have not performed these...
... from the Network Registrar database. VLANs The Cisco 870 series access routers support four Fast Ethernet ports on which you have already configured basic router features as well as appropriate for your router for name and address resolution. Configure DHCP Chapter 5 Configuring a LAN with DHCP and VLANs When you configure a DHCP server, you have not performed these...
Configuration Guide
Page 61
Step 6 import all Example: Router(config-dhcp)# import all Router(config-dhcp)# Imports DHCP option parameters into the DHCP portion of the router database. The name argument can be a string or an integer. Router(config-dhcp)# dns-server 192.168.35.2 Router(config-dhcp)# OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-3 Step 7 default-router address [address2...address8] Specifies...
Step 6 import all Example: Router(config-dhcp)# import all Router(config-dhcp)# Imports DHCP option parameters into the DHCP portion of the router database. The name argument can be a string or an integer. Router(config-dhcp)# dns-server 192.168.35.2 Router(config-dhcp)# OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-3 Step 7 default-router address [address2...address8] Specifies...
Configuration Guide
Page 62
...Router(config-dhcp)# domain-name cisco.com Router(config-dhcp)# Step 10 exit Example: Router(config-dhcp)# exit Router(config)# Exits DHCP configuration mode, and enters global configuration mode. ip dhcp pool dpool1 import all network 10.10.0.0 255.255.255.0 default-router 10.10.10.10 dns-server 192.168.35.2 domain-name cisco...10.0.254 Leased addresses 0 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-4 OL-5332-01 Router# show ip dhcp import Address Pool Name: dpool1 Router# show ip dhcp server statistics-Displays the DHCP server statistics, such as ...
...Router(config-dhcp)# domain-name cisco.com Router(config-dhcp)# Step 10 exit Example: Router(config-dhcp)# exit Router(config)# Exits DHCP configuration mode, and enters global configuration mode. ip dhcp pool dpool1 import all network 10.10.0.0 255.255.255.0 default-router 10.10.10.10 dns-server 192.168.35.2 domain-name cisco...10.0.254 Leased addresses 0 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-4 OL-5332-01 Router# show ip dhcp import Address Pool Name: dpool1 Router# show ip dhcp server statistics-Displays the DHCP server statistics, such as ...
Configuration Guide
Page 63
... Cisco 870 Series Access Routers Software Configuration Guide 5-5 Example: Router# config t Router(config)#vlan ? WORD ISL VLAN IDs 1-4094 accounting VLAN accounting configuration ifdescr VLAN subinterface ifDescr Step 2 Router(config)#vlan ISL VLAN ID Example: Router(config)#vlan 2 Router(config-vlan)# Step 3 exit Example: Router(config-vlan)#exit Router(config)# Adds VLANs, with DHCP and VLANs Configure VLANs Router# show ip dhcp...
... Cisco 870 Series Access Routers Software Configuration Guide 5-5 Example: Router# config t Router(config)#vlan ? WORD ISL VLAN IDs 1-4094 accounting VLAN accounting configuration ifdescr VLAN subinterface ifDescr Step 2 Router(config)#vlan ISL VLAN ID Example: Router(config)#vlan 2 Router(config-vlan)# Step 3 exit Example: Router(config-vlan)#exit Router(config)# Adds VLANs, with DHCP and VLANs Configure VLANs Router# show ip dhcp...
Configuration Guide
Page 64
... mode. Configure VLANs Chapter 5 Configuring a LAN with DHCP and VLANs Assign a Switch Port to a VLAN Perform these steps to assign a switch port to a VLAN, beginning in global configuration mode: Command Step 1 interface switch port id Example: Router(config)# interface FastEthernet 2 Router(config-if)# Purpose Specifies the switch port that you ...: 1002 Translational Bridged VLAN: 1003 VLAN ISL Id: 2 Name: VLAN0002 Media Type: Ethernet VLAN 802.10 Id: 100002 State: Operational MTU: 1500 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-6 OL-5332-01
... mode. Configure VLANs Chapter 5 Configuring a LAN with DHCP and VLANs Assign a Switch Port to a VLAN Perform these steps to assign a switch port to a VLAN, beginning in global configuration mode: Command Step 1 interface switch port id Example: Router(config)# interface FastEthernet 2 Router(config-if)# Purpose Specifies the switch port that you ...: 1002 Translational Bridged VLAN: 1003 VLAN ISL Id: 2 Name: VLAN0002 Media Type: Ethernet VLAN 802.10 Id: 100002 State: Operational MTU: 1500 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-6 OL-5332-01
Configuration Guide
Page 65
Chapter 5 Configuring a LAN with DHCP and VLANs Configure VLANs OL-5332-01 VLAN ISL Id: 3 Name: red-vlan Media Type: Ethernet VLAN 802.10 Id: 100003 State: Operational MTU: 1500 ... Name: trnet-default Media Type: Token Ring Net VLAN 802.10 Id: 101005 State: Operational MTU: 1500 Bridge Type: SRB Bridge Number: 1 STP Type: IBM Router# show vlan-switch VLAN Name Status Ports 1 default active Fa0, Fa1, Fa3 2 VLAN0002 active Fa2 1002 fddi-default active 1003 token-ring-default active 1004...
Chapter 5 Configuring a LAN with DHCP and VLANs Configure VLANs OL-5332-01 VLAN ISL Id: 3 Name: red-vlan Media Type: Ethernet VLAN 802.10 Id: 100003 State: Operational MTU: 1500 ... Name: trnet-default Media Type: Token Ring Net VLAN 802.10 Id: 101005 State: Operational MTU: 1500 Bridge Type: SRB Bridge Number: 1 STP Type: IBM Router# show vlan-switch VLAN Name Status Ports 1 default active Fa0, Fa1, Fa3 2 VLAN0002 active Fa2 1002 fddi-default active 1003 token-ring-default active 1004...
Configuration Guide
Page 66
srb 1 1002 1004 fdnet 101004 1500 - - 1 ibm - 0 0 1005 trnet 101005 1500 - - 1 ibm - 0 0 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-8 OL-5332-01 Configure VLANs Chapter 5 Configuring a LAN with DHCP and VLANs VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 1 enet 100001 1500 - - - - - 1002 1003 2 enet 100002 1500 - - - - - 0 0 1002 fddi 101002 1500 - - - - - 1 1003 1003 tr 101003 1500 1005 0 - -
srb 1 1002 1004 fdnet 101004 1500 - - 1 ibm - 0 0 1005 trnet 101005 1500 - - 1 ibm - 0 0 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 5-8 OL-5332-01 Configure VLANs Chapter 5 Configuring a LAN with DHCP and VLANs VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 1 enet 100001 1500 - - - - - 1002 1003 2 enet 100002 1500 - - - - - 0 0 1002 fddi 101002 1500 - - - - - 1 1003 1003 tr 101003 1500 1005 0 - -
Configuration Guide
Page 68
... 2 Internet 6 121782 1 1 Remote, networked users 2 VPN client-Cisco 870 series access router 3 Router-Providing the corporate office network access 4 VPN server-Easy VPN server; Easy VPN server-enabled devices allow remote routers to access resources at the central site. Client mode is the default ...at a VPN server, such as internal IP addresses, internal subnet masks, DHCP server addresses, WINS server addresses, and split-tunneling flags, to the central site. for example, a Cisco VPN 3000 concentrator with outside interface address 210.110.101.1 5 Corporate office...
... 2 Internet 6 121782 1 1 Remote, networked users 2 VPN client-Cisco 870 series access router 3 Router-Providing the corporate office network access 4 VPN server-Easy VPN server; Easy VPN server-enabled devices allow remote routers to access resources at the central site. Client mode is the default ...at a VPN server, such as internal IP addresses, internal subnet masks, DHCP server addresses, WINS server addresses, and split-tunneling flags, to the central site. for example, a Cisco VPN 3000 concentrator with outside interface address 210.110.101.1 5 Corporate office...
Configuration Guide
Page 69
... The procedures in the "Configuration Example" section on the Cisco 870 series router. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 6-3 Configuration Tasks Perform the following tasks to configure your router for this network scenario: • Configure the IKE Policy...requires both the client and the server. See the software configuration documentation as PPPoE or PPPoA with DHCP and VLANs" as appropriate for other router models. Note The examples shown in this chapter assume that you have not performed these configuration tasks...
... The procedures in the "Configuration Example" section on the Cisco 870 series router. OL-5332-01 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 6-3 Configuration Tasks Perform the following tasks to configure your router for this network scenario: • Configure the IKE Policy...requires both the client and the server. See the software configuration documentation as PPPoE or PPPoA with DHCP and VLANs" as appropriate for other router models. Note The examples shown in this chapter assume that you have not performed these configuration tasks...
Configuration Guide
Page 80
...access control lists (ACLs) are typically used to establish a VPN between the Cisco router and a remote device that controls access to a private network, such as internal IP addresses, internal subnet masks, DHCP server addresses, and Network Address Translation (NAT). Configure a VPN Chapter 7 ... must specify parameters, such as a corporate network. If you have not performed these configuration tasks is used, the Cisco router and the router that controls access to the corporate network can support dynamic IP routing protocols to exchange routing updates over an IPSec tunnel...
...access control lists (ACLs) are typically used to establish a VPN between the Cisco router and a remote device that controls access to a private network, such as internal IP addresses, internal subnet masks, DHCP server addresses, and Network Address Translation (NAT). Configure a VPN Chapter 7 ... must specify parameters, such as a corporate network. If you have not performed these configuration tasks is used, the Cisco router and the router that controls access to the corporate network can support dynamic IP routing protocols to exchange routing updates over an IPSec tunnel...
Configuration Guide
Page 92
... Ethernet or ATM WAN interface (the outside WAN interface (FE4) on the Cisco 851 or Cisco 871 and protects the Fast Ethernet LAN on FE0 by filtering and inspecting all traffic entering the router on page 8-5. You may have also configured DHCP, VLANs, and secure tunnels. Note that shows the results of these configurations...
... Ethernet or ATM WAN interface (the outside WAN interface (FE4) on the Cisco 851 or Cisco 871 and protects the Fast Ethernet LAN on FE0 by filtering and inspecting all traffic entering the router on page 8-5. You may have also configured DHCP, VLANs, and secure tunnels. Note that shows the results of these configurations...
Configuration Guide
Page 98
...key used for the radio interface. Configure the Root Radio Station Perform these configurations tasks, see Chapter 1, "Basic Router Configuration," Chapter 3, "Configuring PPP over Ethernet with NAT," and Chapter 4, "Configuring PPP over ATM with NAT. ... and configure the root radio station for your router. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-2 OL-5332-01 You may have already configured basic router features as well as PPPoE or PPPoA with NAT...WEP) cannot use the access point when you have also configured DHCP, VLANs, and secure tunnels.
...key used for the radio interface. Configure the Root Radio Station Perform these configurations tasks, see Chapter 1, "Basic Router Configuration," Chapter 3, "Configuring PPP over Ethernet with NAT," and Chapter 4, "Configuring PPP over ATM with NAT. ... and configure the root radio station for your router. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 9-2 OL-5332-01 You may have already configured basic router features as well as PPPoE or PPPoA with NAT...WEP) cannot use the access point when you have also configured DHCP, VLANs, and secure tunnels.
Configuration Guide
Page 105
... and Cisco 870 Series Access Routers Software Configuration Guide 10-1 vpdn enable vpdn-group 1 request-dialin protocol pppoe ! Current configuration : 3781 bytes ! Sample Configuration 10 C H A P T E R This chapter collects the results of the Ethernet WAN interface, DHCP, VLAN, Easy VPN, and wireless interface configurations made in a single sample, Example 10-1. version 12.3 no service pad service...
... and Cisco 870 Series Access Routers Software Configuration Guide 10-1 vpdn enable vpdn-group 1 request-dialin protocol pppoe ! Current configuration : 3781 bytes ! Sample Configuration 10 C H A P T E R This chapter collects the results of the Ethernet WAN interface, DHCP, VLAN, Easy VPN, and wireless interface configurations made in a single sample, Example 10-1. version 12.3 no service pad service...
Configuration Guide
Page 106
... 1 encryption 3des authentication pre-share group 2 lifetime 480 ! 10-2 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 ip dhcp pool vlan3 network 10.0.3.0 255.255.255.0 default-router 10.0.3.1 ! interface FastEthernet3 switchport mode trunk no cdp enable crypto ipsec...ip directed-broadcast (default) speed auto ip nat outside ip access-group 103 in no ip address ! ip dhcp pool vlan2 network 10.0.2.0 255.255.255.0 default-router 10.0.2.1 ! dialer-list 1 protocol ip permit ip nat inside source list 1 interface dialer 0 overload ip ...
... 1 encryption 3des authentication pre-share group 2 lifetime 480 ! 10-2 Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide OL-5332-01 ip dhcp pool vlan3 network 10.0.3.0 255.255.255.0 default-router 10.0.3.1 ! interface FastEthernet3 switchport mode trunk no cdp enable crypto ipsec...ip directed-broadcast (default) speed auto ip nat outside ip access-group 103 in no ip address ! ip dhcp pool vlan2 network 10.0.2.0 255.255.255.0 default-router 10.0.2.1 ! dialer-list 1 protocol ip permit ip nat inside source list 1 interface dialer 0 overload ip ...