Cisco 877w Configuration

peanutnogginpeanutnoggin Posts: 1,096Member ■■■□□□□□□□
Hi TE,

I'm trying to configure my 877w for home usage. Right now I utilize an ADSL connection. Because of my location, I do not have access to the modem put in place by my ISP. They have however allowed me to run PPPoE passthrough (which works perfect from a PC). With the 877w, I'm trying to hook it up via the PPPoE passthrough and have it function properly. The built-in ports for the 877w are L2 ports so I have to bridge them in some way. My current setup is: Fiber box (which is converted to ethernet) ---> ISP's CTU (with a built-in 4-port switch) ---> Cisco 877w connected via any of the FastEthernet ports. I would like to know how should I bridge the FastEthernet port to either the dialer20 interface or the BVI20 interface (or both). I've posted my configs in hopes that someone can assist me. I've been modifying & erasing my config so much that I think I've now confused myself! icon_smile.gif
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log uptime
service password-encryption
!
hostname 877W
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 8192 notifications
enable secret 5 xxxxxxxxxxxxxxxxxxxx
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local
aaa authentication login CONSOLE none
aaa authentication login VTY local enable
aaa authentication login HTTP local none
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization ipmobile default group rad_pmip
aaa accounting network acct_methods start-stop group rad_acct
!
!
aaa session-id common
!
crypto pki trustpoint TP-self-signed-2734125745
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2734125745
 revocation-check none
 rsakeypair TP-self-signed-2734125745
!
!
crypto pki certificate chain TP-self-signed-2734125745
 certificate self-signed 01
  30820251 308201BA A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32373334 31323537 3435301E 170D3038 31303130 31343035
  34335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 37333431
  32353734 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100C9E4 05422A4F F545FF75 D4C6E54A AA22EB64 B43D7F9C F2201DB0 11E0C925
  75A76B8E 6EAED6B2 DA08F4BC 5E33CC9D 36AD3ACB C801E9A9 44A3439F 84373DC6
  68380E73 007772CD 222C5D1D 2670E1D1 23F00B2E 5BB7060F 964362C3 19E1AA60
  EE1E5A23 2C8CC60F 74337EFC 87BE61AA C3A0BF2F 32AC383B 8138E4C2 1F9DCB45
  6D7B0203 010001A3 79307730 0F060355 1D130101 FF040530 030101FF 30240603
  551D1104 1D301B82 19383737 572E5341 494E5453 46414E2E 44594E44 4E532E4F
  5247301F 0603551D 23041830 1680140F F6D62DA4 AA4E1780 C21B0C77 C5FDD17C
  62721A30 1D060355 1D0E0416 04140FF6 D62DA4AA 4E1780C2 1B0C77C5 FDD17C62
  721A300D 06092A86 4886F70D 01010405 00038181 00A172FE A4DA7CFD 8EA7E067
  BAEA5198 A1AE5727 72BDF587 44444B4F C5E1E3CD 9E62B7F8 791E29E2 F481D702
  DAEB5025 6F108354 35BB6634 5DE4E93C C7D835ED 91DEA464 39ECFDF0 EAB917C1
  A6C47BF0 0ED11106 B8208AF6 8E871C63 41E2058D 7A67CAC4 B69A1D61 F4CF60CA
  831A6EB5 ACCF2591 3B40E3E4 EAB9FAE0 994A73EA 07
        quit
dot11 syslog
ip source-route
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.10.1 192.168.10.10
ip dhcp excluded-address 192.168.20.1 192.168.20.10
!
ip dhcp pool CLIENTS
   import all
   network 192.168.20.0 255.255.255.0
   default-router 192.168.20.1
   dns-server 192.168.20.1
   lease 7
!
!
ip cef
no ip domain lookup
ip domain name MYDOMAIN.ORG
ip name-server 4.2.2.2
ip name-server 4.2.2.3
login block-for 180 attempts 3 within 60
login delay 5
login quiet-mode access-class 15
login on-failure log every 2
!
!
vpdn enable
!
vpdn-group 20
!
!
!
username dude privilege 15 secret 5 xxxxxxxxx
!
!
!
archive
 log config
  hidekeys
!
!
ip ssh time-out 30
ip ssh authentication-retries 2
ip ssh version 2
!
bridge irb
!
!
interface ATM0
 no ip address
 shutdown
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface FastEthernet0
 pppoe enable group global
 pppoe-client dial-pool-number 20
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
 no ip address
 speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
!
interface Vlan1
 no ip address
!
interface Vlan10
 ip address 192.168.10.1 255.255.255.0
!
interface Vlan20
 ip address 192.168.20.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface Dialer20
 ip address negotiated
 no ip unreachables
 ip mtu 1438
 ip nat outside
 no ip virtual-reassembly
 encapsulation ppp
 ip tcp adjust-mss 1405
 dialer pool 20
 dialer idle-timeout 0
 dialer-group 20
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname [email protected]
 ppp chap password 7 xxxxxxxxxxx
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer20
ip http server
ip http access-class 10
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 900 requests 5
!
!
!
access-list 10 remark \\INTERNAL CLIENTS//
access-list 10 permit 192.168.10.0 0.0.0.255
access-list 10 permit 192.168.20.0 0.0.0.255
access-list 10 deny   any
access-list 15 remark \\QUIET LOGIN//
access-list 15 permit 192.168.10.0 0.0.0.255
!
!
!
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
!
control-plane
!
bridge 20 protocol ieee
bridge 20 route ip
banner motd ^C
*********W A R N I N G*********W A R N I N G*********W A R N I N G**********

Unauthorized access will force me to unplug all of the INTERWEBS!!!!!

*********W A R N I N G*********W A R N I N G*********W A R N I N G**********
^C
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 login authentication CONSOLE
 no modem enable
line aux 0
line vty 0 4
 access-class 10 in
 exec-timeout 15 0
 privilege level 15
 logging synchronous
 login authentication VTY
 terminal-type monitor
 transport input telnet ssh
!
scheduler max-task-time 5000
end

One last side note... when I plug the router up to the CTU, interface Vlan1 comes up up. I would like inteface vlan20 to come up up. Again, any assistance with this configuration is greatly appreciated. Thanks in advanced.

V/r

~Peanut
We cannot have a superior democracy with an inferior education system!

-Mayor Cory Booker
Sign In or Register to comment.