User Tools

Site Tools


Sidebar

js#vista.png msort nsort

cisco:886va

Installing Cisco 886VA for Telekom

Configuring a Cisco 886VA for an ADSL2 connectin across a Telekom ISDN line with a static (feste) IP address.

install minicom and adjust to connect and restart minicom

Router> enable
Router(config)# configure terminal

Then use a config similar to below:

!
! No configuration change since last restart
version 15.2
service config
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime
service timestamps log datetime localtime
service password-encryption
!
hostname sner1
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$UTEG$Txxxxxxx002hCh.lSV/
enable password 7 xxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
no process cpu extended history
no process cpu autoprofile hog
memory-size iomem 10
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-1111852108
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1111852108
 revocation-check none
 rsakeypair TP-self-signed-1111852108
!
!
crypto pki certificate chain TP-self-signed-1111852108
 certificate self-signed 01

  	quit
no ip source-route
no ip gratuitous-arps
!
!
!
!
!
no ip bootp server
ip inspect name myfw tcp timeout 3600
ip inspect name myfw udp timeout 30
ip cef
no ipv6 cef
!
!
isdn switch-type basic-5ess
license udi pid CISCO886VA-K9 sn FCZ1623C1VX
!
!
username root password 7 xxxxxxxxxxxxxxxxxxxxxxxx
!
!
!
!
!
controller VDSL 0
!
ip ssh pubkey-chain
  username root
  quit
! 
!
!
!
!
!         
!
!
!
interface Ethernet0
 no ip address
 shutdown
!
interface BRI0
 no ip address
 encapsulation hdlc
 shutdown
 isdn switch-type basic-5ess
 isdn termination multidrop
 isdn point-to-point-setup
 no cdp enable
!
interface ATM0
 description Telekom ADSL
 no ip address
 no atm ilmi-keepalive
 pvc 1/32 
  pppoe-client dial-pool-number 1
 !
!
interface ATM0.1 point-to-point
!
interface FastEthernet0
 no ip address
 no cdp enable
!
interface FastEthernet1
 no ip address
 shutdown
 no cdp enable
!
interface FastEthernet2
 no ip address
 shutdown
 no cdp enable
!
interface FastEthernet3
 no ip address
 shutdown
 no cdp enable
!
interface Vlan1
 description Lokales LAN (Switchports FastEth 1-4)
 ip address 10.1.1.200 255.255.0.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip nat inside
 ip virtual-reassembly in
 ip tcp adjust-mss 1202
!
interface Dialer0
 description DSL Einwahl Interface
 ip address negotiated
 ip access-group 111 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip mtu 1492
 ip nat outside
 ip inspect myfw out
 ip virtual-reassembly in
 encapsulation ppp
 dialer pool 1
 dialer idle-timeout 600
 dialer-group 1
 no keepalive
 ppp authentication chap callin
 ppp chap hostname feste-ip5/xxxxxxxxxxxxx@t-online-com.de
 ppp chap password 7 xxxxxxxxxxxxxxx
 ppp ipcp dns request
 ppp ipcp mask request
 ppp ipcp route default
 no cdp enable
!
no ip forward-protocol nd
no ip http server
ip http secure-server
!
ip dns server
ip nat inside source list 103 interface Dialer0 overload
ip nat inside source static tcp 10.1.1.1 80 interface Dialer0 80
ip nat inside source static tcp 10.1.1.1 443 interface Dialer0 443
ip nat inside source static tcp 10.1.1.10 25 interface Dialer0 25
ip nat inside source static tcp 10.1.1.10 110 interface Dialer0 110
ip nat inside source static tcp 10.1.1.10 143 interface Dialer0 143
ip nat inside source static tcp 10.1.1.10 465 interface Dialer0 465
ip nat inside source static tcp 10.1.1.1 22 interface Dialer0 22
!
ip access-list extended myfw-acl
!
logging trap debugging
access-list 103 permit ip 10.1.0.0 0.0.255.255 any
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq domain any
access-list 111 permit tcp any any eq smtp
access-list 111 permit tcp any any eq pop3
access-list 111 permit tcp any any eq www
access-list 111 permit tcp any any eq 443
access-list 111 permit tcp any any eq 465
access-list 111 permit tcp any any eq 143
access-list 111 permit tcp any any eq 22
access-list 111 deny   ip any any log
access-list 111 permit esp any any
dialer-list 1 protocol ip permit
no cdp run
!
!
!
!
banner motd ^C

BDM/MOL sein Router !!!
Fingergrabbing and pressing the cnoeppkes from the routers is     
allowed for the experts only!! So all the "lefthanders" stay away
and do not disturb the brainstorming at work here. Ohterwise you
will be k/b'd. Also: please keep still and only watch the
blinking lights in astonishment.
^C
!
line con 0
 exec-timeout 0 0
line aux 0
line vty 0 4
 access-class 23 in
 privilege level 15
 password 7 xxxxxxxxxxxxxxxxxxxxxxxxxx
 login local
 transport input ssh
!
end
cisco/886va.txt · Last modified: 2020/02/24 11:16 (external edit)