co Sample Configurations for Cisco 7200 Broadband Aggreg

Transcription

1 co Sample Configurations for Cisco 7200 Broadband Aggreg

2 Table of Contents Sample Configurations for Cisco 7200 Broadband Aggregation...1 Introduction...1 Configurations...1 PPPoA Session Termination: xdsl to RFC1483 Bridging: xdsl to Routed Bridge Encapsulation: xdsl to PPPoE: xdsl to L2TP: xdsl to 7200 Via L2TP...10 Related Information...13 i

3 Sample Configurations for Cisco 7200 Broadband Aggregation Introduction The purpose of this document is to provide a general understanding of DSL components and how they fit together in a basic DSL implementation. The sample configurations included show the most common DSL networks currently in use. These configurations may be used as a general reference for designing a broadband aggregation implementation, but they should not be viewed as a cookie cutter solution. Every customer and every requirement is different and there are many ways to accomplish the same design goals. While the configurations presented here are as complete as possible, only the essential lines are given. It is assumed that the user has a basic understanding of Cisco device configuration, so many of the basic command lines are omitted. Use these configurations only as a starting point in designing your own implementation. Configurations PPPoA Session Termination: xdsl to 7200 This example describes how to connect a Cisco 677, or other DSL Customer Premises Equipment (CPE), to a Cisco 7200 via Point to Point Protocol (PPP) over Asynchronous Transfer Mode (ATM). A Cisco Lightstream 1010 ATM switch is included in the configuration, but it's an optional component. The results would be the same if the DSLAM were directly connected to the Cisco In this example, the PPP session is established on the Cisco 677 and terminated on the Cisco After the session is terminated, traditional IP is used for passing traffic to the Network Service Provider (NSP) or to the Internet. The CPE is configured to perform Network Address Translation (NAT) / Port Address Translation (PAT), and to implement a Dynamic Host Configuration Protocol (DHCP) server to assign IP addresses to the Ethernet stations. PC Configuration for PPPoA Set IP addressing to automatically obtain an IP address. Set WINS to use DHCP for WINS resolution. Ensure that no default gateway is set.

4 It may be necessary to set a domain name because DHCP cannot pass this information. cbos>enable Password: Cisco CPE Configuration for PPPoA cbos# set nat enable NAT is now enabled You must use "write" then reboot for changes to take effect. cbos# set ppp wan0 0 login User name for wan0 0 has been set to testcpe. cbos# set ppp wan0 0 password Password for wan0 0 has been set to cisco. cbos# set ppp wan0 0 ipcp PPP wan0 0 IPCP Address set to cbos# set int wan0 0 close cbos# set int wan0 0 vpi 1 cbos# set int wan0 0 vci 32 cbos# set int wan0 0 open cbos# set int eth0 address eth0 ip address changed from to cbos# set int eth0 netmask eth0 netmask changed from to cbos# set dhcp server enable DHCP Server enabled cbos# set dhcp server pool 0 ip Pool 0 IP parameter is now cbos# set dhcp server pool 0 netmask Pool 0 netmask parameter is now cbos# set dhcp server pool 0 gateway Pool 0 gateway parameter is now cbos# set password exec Exec Password Change Successful cbos# set password enable Enable Password Change Successful cbos# write NVRAM written. Cisco DSLAM Configuration for PPPoA hostname 6260 Subtending Port Will set as shutdown interface atm0/2 shutdown slot 1 atuc 1 4dmt

5 dsl profile fast dmt codeword size downstream 16 upstream 16 dmt bitrate maximum interleaved downstream 8032 upstream 832 interface atm1/1 dsl profile fast atm pvc 1 32 interface atm0/ Cisco LS1010 Configuration for PPPoA interface ATM 0/1/2 ATM pvp 1 interface ATM 0/0/2 1 Cisco 7200 Configuration for PPPoA aaa new model AAA authentication ppp default local username password interface ATM 2/0.1 multipoint PVC 1/35 encapsulation aal5mux ppp Virtual Template 2 interface FastEthernet 4/0 ip address interface Virtual Template 2 ip unnumbered FastEthernet 4/0 peer default ip address pool <pool name> ppp authentication pap ip local pool <pool name> RFC1483 Bridging: xdsl to 7200 This example describes how to connect a Cisco 677, or other DSL CPE, to a Cisco 7200 via RFC1483 Bridged Encapsulation. A Cisco Lightstream 1010 ATM switch is included in this configuration, but it's an

6 optional component. The results would be the same if the DSLAM were directly connected to the Cisco In this example, the bridged session is established on the Cisco 677 and terminates on the Cisco After the session is bridged to the Cisco 7200, traditional IP is used for passing traffic to the NSP or to the Internet. A Dynamic Host Configuration Protocol (DHCP) server configured in the 7200 assigns an IP address to the client workstation. This configuration uses Integrated Routing and Bridging (IRB). To alleviate scalability and security concerns associated with IRB, Routed Bridged Encapsulation (RBE) should be considered. PC Configuration for RFC1483 Set IP addressing to automatically obtain an IP address. Set WINS to use DHCP for WINS resolution. Ensure that no default gateway is set. It may be necessary to set a domain name because DHCP cannot pass this information. Cisco 677 CPE Configuration for RFC1483 cbos# set bridging rfc1483 enabled You must use "write" then reboot for changes to take effect. cbos# set bridging management enable cbos# set int eth0 address This IP address is used only for management purposes. cbos# set int wan0 0 close cbos# set int wan0 0 vpi 1 cbos# set int wan0 0 vci 32 cbos# set int wan0 0 open cbos# write NVRAM written. cbos# reboot Cisco DSLAM Configuration for RFC1483 hostname 6260 Subtending Port Will set as shutdown interface atm0/2 shutdown slot 1 atuc 1 4dmt dsl profile fast dmt codeword size downstream 16 upstream 16 dmt bitrate maximum interleaved downstream 8032 upstream 832 interface atm1/1 dsl profile fast ATM PVC 1 32 interface atm0/1 1 35

7 Cisco LS1010 Configuration for RFC1483 interface ATM 0/1/2 ATM pvp 1 interface ATM 0/0/2 1 Cisco 7200 Configuration for RFC1483 ip dhcp excluded address ip dhcp pool 0 network default router dns server netbios name server bridge irb interface ATM 2/0 interface ATM 2/0.1 point to point PVC 1/35 encapsulation aal5snap bridge group 1 interface ATM 2/0.2 point to point PVC 1/36 encapsulation aal5snap bridge group 1 interface FastEthernet 4/0 ip address interface BVI 1 ip address bridge 1 protocol ieee bridge 1 route ip Routed Bridge Encapsulation: xdsl to 7200

8 RBE encapsulation is currently the configuration of choice for most new DSL installations. RBE addresses the security and scalability issues of bridging in the broadband subscriber environment. A Dynamic Host Configuration Protocol (DHCP) server configured in the 7200 assigns an IP address to the client workstation. Important: Dynamic Host Configuration Protocol (DHCP) cannot run on the router with unnumbered ATM except when Cisco IOS Software Release 12.1(2)T or later is used. PC Configuration for RBE Set IP addressing to automatically obtain an IP address. Set WINS to use DHCP for WINS resolution. Ensure that no default gateway is set. It may be necessary to set a domain name because DHCP cannot pass this information. Cisco CPE Configuration for RBE cbos# set bridging rfc1483 enabled You must use "write" then reboot for changes to take effect. cbos# set bridging management enable cbos# set int eth0 address This IP address is used only for management purposes. cbos# set int wan0 0 close cbos# set int wan0 0 vpi 1 cbos# set int wan0 0 vci 32 cbos# set int wan0 0 open cbos# write NVRAM written. cbos# reboot Cisco DSLAM Configuration for RBE hostname 6260 Subtending Port Will set as shutdown interface atm0/2 shutdown

9 slot 1 atuc 1 4dmt dsl profile fast dmt codeword size downstream 16 upstream 16 dmt bitrate maximum interleaved downstream 8032 upstream 832 interface atm1/1 dsl profile fast ATM PVC 1 32 interface atm0/ interface ATM 0/1/2 ATM pvp 1 interface ATM 0/0/2 1 Cisco LS1010 Configuration for RBE Cisco 7200 Configuration for RBE ip dhcp excluded address ip dhcp pool 0 network default router dns server netbios name server interface Loopback0 ip address interface ATM 2/0 interface ATM 2/0.1 point to point ip unnumbered Loopback0 ATM route bridged ip PVC 1/35 encapsulation aal5snap interface ATM 2/0.2 point to point ip unnumbered Loopback0 ATM route bridged ip PVC 1/36 encapsulation aal5snap interface FastEthernet 4/0 ip address

10 PPPoE: xdsl to 7200 PPPoE extends the PPP session from the router to the end client. PPP and authentication software is usually running on the client either within the operating system or in a standalone application. The CPE acts in bridging mode to bridge the PPP session over the DSL connection, but it cannot act as the DHCP server in this scenario. Configurations for the CPE, DSLAM, and ATM switch are the same as in RFC1483 bridging. The Cisco 7200 aggregation router can be configured for local authentication (as in this example) or using AAA RADIUS authentication. PC Configuration for PPPoE Set IP addressing to automatically obtain an IP address. Set WINS to use DHCP for WINS resolution. Ensure that no default gateway is set. It may be necessary to set a domain name because DHCP cannot pass this information. The end station must be able to establish a PPP connection to the router. This may require special client software for authentication and access. Cisco 677 CPE Configuration for PPPoE cbos# set bridging rfc1483 enabled You must use "write" then reboot for changes to take effect. cbos# set bridging management enable cbos# set int eth0 address This IP address is used only for management purposes. cbos# set int wan0 0 close cbos# set int wan0 0 vpi 1 cbos# set int wan0 0 vci 32 cbos# set int wan0 0 open cbos# write NVRAM written. cbos# reboot

11 Cisco DSLAM Configuration for PPPoE hostname 6260 Subtending Port Will set as shutdown interface atm0/2 shutdown slot 1 atuc 1 4dmt dsl profile fast dmt codeword size downstream 16 upstream 16 dmt bitrate maximum interleaved downstream 8032 upstream 832 interface atm1/1 dsl profile fast ATM PVC 1 32 interface atm0/ Cisco LS1010 Configuration for PPPoE interface ATM 0/1/2 ATM pvp 1 interface ATM 0/0/2 1 Cisco 7200 Configuration for PPPoE username <username> password <password> vpdn enable vpdn group 1 accept dialin protocol pppoe virtual template 1 pppoe limit per mac 100 pppoe limit per vc 100 ip cef interface atm2/0 interface ATM 2/0.1 point to point PVC 1/35 encapsulation aal5snap protocol pppoe interface ATM 2/0.2 point to point PVC 1/36 encapsulation aal5snap protocol pppoe interface Virtual Template1 ip unnumbered FastEthernet 4/0 peer default ip address pool <pool name>

12 ppp authentication pap interface FastEthernet 4/0 ip address ip local pool <pool name> L2TP: xdsl to 7200 Via L2TP L2TP provides a means to terminate the PPP connection from the end user at one location and transport the layer 2 data packets to another location. This offloads much of the IP functionality from the aggregation device, as well as allowing more centralized network designs. A Remote Dial In User Service (RADIUS) server is used for authentication, authorization, and accounting (AAA). The configurations for all devices except the Cisco 7200 are the same as the configurations for the RFC1483 example. PC Configuration for L2TP Set IP addressing to automatically obtain an IP address. Set WINS to use DHCP for WINS resolution. Ensure that no default gateway is set. It may be necessary to set a domain name because DHCP cannot pass this information. cbos>enable Password: Cisco 677 CPE Configuration for L2TP cbos# set Nat enable NAT is now enabled You must use "write" then reboot for changes to take effect. cbos# set ppp wan0 0 login User name for wan0 0 has been set to testcpe.

13 cbos# set ppp wan0 0 password Password for wan0 0 has been set to cisco. cbos# set ppp wan0 0 ipcp PPP wan0 0 IPCP Address set to cbos# set int wan0 0 close cbos# set int wan0 0 vpi 1 cbos# set int wan0 0 vci 32 cbos# set int wan0 0 open cbos# set int eth0 address eth0 ip address changed from to cbos# set int eth0 netmask eth0 netmask changed from to cbos# set dhcp server enable DHCP Server enabled cbos# set dhcp server pool 0 ip Pool 0 IP parameter is now cbos# set dhcp server pool 0 netmask Pool 0 netmask parameter is now cbos# set dhcp server pool 0 gateway Pool 0 gateway parameter is now cbos# set password exec Exec Password Change Successful cbos# set password enable Enable Password Change Successful cbos# write NVRAM written. Cisco DSLAM Configuration for L2TP hostname 6260 Subtending Port Will set as shutdown interface atm0/2 shutdown slot 1 atuc 1 4dmt dsl profile fast dmt codeword size downstream 16 upstream 16 dmt bitrate maximum interleaved downstream 8032 upstream 832 interface atm1/1 dsl profile fast ATM PVC 1 32 interface atm0/ interface ATM 0/1/2 ATM pvp 1 interface ATM 0/0/2 1 Cisco LS1010 Configuration for L2TP

14 Cisco 7200 LAC Configuration for L2TP AAA new model AAA authentication login default none AAA authentication ppp default local group radius AAA authorization network default local group radius none AAA accounting network default wait start group radius vpdn group 4 request dialin protocol l2tp domain cisco.com initiate to ip priority 1 local name cisco tunnel interface ATM 2/0 interface ATM 2/0.1 point to point PVC 1/35 encapsulation aal5mux ppp Virtual Template1 interface ATM 2/0.2 point to point PVC 1/36 encapsulation aal5mux ppp Virtual Template1 interface FastEthernet 4/0 ip address interface Virtual Template1 ip unnumbered FastEthernet4/0 ppp authentication pap radius server host auth port 1645 acct port 1646 radius server key cisco Cisco 7200 LNS Configuration for L2TP AAA new model AAA authentication login default none AAA authentication ppp default local group radius AAA authorization network default local group radius none AAA accounting network default wait start group radius vpdn group 1 accept dialin protocol any virtual template 1 terminate from hostname cisco tunnel local name tunnel gate

15 radius server host auth port 1645 acct port 1646 radius server key cisco Related Information Cisco DSL Technology Support Information Cisco DSL Product Support Information All contents are Copyright Cisco Systems, Inc. All rights reserved. Important notices and Privacy Statement.