Shumpy
13/08/2009, 11h21
Coin²,
Ne sachant pas où poster cela, j'atterris ici...
Le problème: Faire fonctionner un routeur Cisco 877 en lieu et place d'une Livebox, en gros.
Le sample config récupéré sur le site Cisco que j'ai bidouillé tant bien que mal:
Current configuration : 4613 bytes
!
Version 12.4
No service pad
Service timestamps debug datetime msec
Service timestamps log datetime msec
No service password-encryption
!
Hostname SystemD
!
Boot-start-marker
Boot-end-marker
!
Logging buffered 51200 warnings
Enable secret 5 $1$7MDb$gX6EzTL382GG9YlE0mJj61
!
No aaa new-model
!
Resource policy
!
Ip cef
!
!
No ip dhcp use vrf connected
Ip dhcp excluded-address 10.10.10.1
Ip dhcp excluded-address 192.168.1.1
Ip dhcp excluded-address 192.168.1.0
Ip dhcp excluded-address 192.168.1.255
!
Ip dhcp pool dpool1
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.1
!
!
No ip domain lookup
Ip domain name yourdomain.com
Ip name-server 80.10.246.2
Ip name-server 80.10.246.129
!
!
Crypto pki trustpoint TP-self-signed-1809622774
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1809622774
revocation-check none
rsakeypair TP-self-signed-1809622774
!
!
Crypto pki certificate chain TP-self-signed-1809622774
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31383039 36323237 3734301E 170D3033 30313037 31393434
31375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 38303936
32323737 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D0EC 8A8024B1 8C6C3182 E11CFEB2 0AA13125 881172B1 D51BDEAF C6C8AAC6
696DFC0E 7CF49167 68677B21 5FE277A4 65B5137E BBE493E1 D26F996B 4B12A445
ABF535D1 707F4974 CC5A6970 402D70E7 C9DEACD4 701C1CFB FB7245AB 416D1CD9
9162B638 826B5373 298A7079 846BEA30 F00295D7 1D223F5C 225A4BF1 0ACFA83E
B3E70203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 14E1575F 51A0814D 449C7022 A8BBD76F 3F815FFD
64301D06 03551D0E 04160414 E1575F51 A0814D44 9C7022A8 BBD76F3F 815FFD64
300D0609 2A864886 F70D0101 04050003 818100CC C402C5E1 23A16ED5 31D3D3E3
F9F1AA43 B281D0D5 E26C5447 41A7D5D9 D120C3B4 498EB990 2EECCB49 2D462215
D5DAB2C2 6D8BA7C1 9DA11DAB 6CC61194 09E25F8D 783FEF0A D44CC85F 6F6D625B
2AAB5772 8D485E04 A1877217 3DBCD8F2 03581960 B62A16E0 F4C76881 71D65F91
3A2B5B5F 1C3509C3 BD3E2A36 8247AA5B 940FA5
quit
Username cisco privilege 15 secret 5 $1$W7Vl$IuyoZKA03lLD4mxdrSsjp1
!
!
!
!
!
!
Interface ATM0
ip address 80.14.128.214 255.0.0.0
ip nat outside
ip virtual-reassembly
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
!
Interface FastEthernet0
!
Interface FastEthernet1
!
Interface FastEthernet2
!
Interface FastEthernet3
!
Interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
Interface Dialer0
ip address negotiated
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap
!
!
!
Ip http server
Ip http access-class 23
Ip http authentication local
Ip http secure-server
Ip http timeout-policy idle 60 life 86400 requests 10000
Ip nat pool pool1 192.168.1.0 192.168.1.255 netmask 255.255.255.0
Ip nat inside source list acl1 pool pool1
!
Access-list 1 permit 0.0.0.0 255.255.255.0
Access-list 23 permit 10.10.10.0 0.0.0.7
Dialer-list 1 protocol ip permit
No cdp run
!
!
!
!
Control-plane
!
Banner login ^C
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
With the password "cisco". The default username and password have a privilege le
Vel of 15.
Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.
Username <myuser> privilege 15 secret 0 <mypassword>
No username cisco
Replace <myuser> and <mypassword> with the username and password you want to use
.
For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
Line con 0
login local
no modem enable
Line aux 0
Line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
Scheduler max-task-time 5000
!
Webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
EndJe devrais pouvoir la tester prochainement, mais sachant pertinemment que je suis une burne en cisco ...:|
Ma question est donc la suivante:
Quelles modifications/ajouts apporter à cette config pour arriver à en tirer une connexion PPPoA qui va bien comme sur une box ?
Merci d'avance ;)
Ne sachant pas où poster cela, j'atterris ici...
Le problème: Faire fonctionner un routeur Cisco 877 en lieu et place d'une Livebox, en gros.
Le sample config récupéré sur le site Cisco que j'ai bidouillé tant bien que mal:
Current configuration : 4613 bytes
!
Version 12.4
No service pad
Service timestamps debug datetime msec
Service timestamps log datetime msec
No service password-encryption
!
Hostname SystemD
!
Boot-start-marker
Boot-end-marker
!
Logging buffered 51200 warnings
Enable secret 5 $1$7MDb$gX6EzTL382GG9YlE0mJj61
!
No aaa new-model
!
Resource policy
!
Ip cef
!
!
No ip dhcp use vrf connected
Ip dhcp excluded-address 10.10.10.1
Ip dhcp excluded-address 192.168.1.1
Ip dhcp excluded-address 192.168.1.0
Ip dhcp excluded-address 192.168.1.255
!
Ip dhcp pool dpool1
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.1
!
!
No ip domain lookup
Ip domain name yourdomain.com
Ip name-server 80.10.246.2
Ip name-server 80.10.246.129
!
!
Crypto pki trustpoint TP-self-signed-1809622774
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1809622774
revocation-check none
rsakeypair TP-self-signed-1809622774
!
!
Crypto pki certificate chain TP-self-signed-1809622774
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31383039 36323237 3734301E 170D3033 30313037 31393434
31375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 38303936
32323737 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D0EC 8A8024B1 8C6C3182 E11CFEB2 0AA13125 881172B1 D51BDEAF C6C8AAC6
696DFC0E 7CF49167 68677B21 5FE277A4 65B5137E BBE493E1 D26F996B 4B12A445
ABF535D1 707F4974 CC5A6970 402D70E7 C9DEACD4 701C1CFB FB7245AB 416D1CD9
9162B638 826B5373 298A7079 846BEA30 F00295D7 1D223F5C 225A4BF1 0ACFA83E
B3E70203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 14E1575F 51A0814D 449C7022 A8BBD76F 3F815FFD
64301D06 03551D0E 04160414 E1575F51 A0814D44 9C7022A8 BBD76F3F 815FFD64
300D0609 2A864886 F70D0101 04050003 818100CC C402C5E1 23A16ED5 31D3D3E3
F9F1AA43 B281D0D5 E26C5447 41A7D5D9 D120C3B4 498EB990 2EECCB49 2D462215
D5DAB2C2 6D8BA7C1 9DA11DAB 6CC61194 09E25F8D 783FEF0A D44CC85F 6F6D625B
2AAB5772 8D485E04 A1877217 3DBCD8F2 03581960 B62A16E0 F4C76881 71D65F91
3A2B5B5F 1C3509C3 BD3E2A36 8247AA5B 940FA5
quit
Username cisco privilege 15 secret 5 $1$W7Vl$IuyoZKA03lLD4mxdrSsjp1
!
!
!
!
!
!
Interface ATM0
ip address 80.14.128.214 255.0.0.0
ip nat outside
ip virtual-reassembly
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
!
Interface FastEthernet0
!
Interface FastEthernet1
!
Interface FastEthernet2
!
Interface FastEthernet3
!
Interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
Interface Dialer0
ip address negotiated
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap
!
!
!
Ip http server
Ip http access-class 23
Ip http authentication local
Ip http secure-server
Ip http timeout-policy idle 60 life 86400 requests 10000
Ip nat pool pool1 192.168.1.0 192.168.1.255 netmask 255.255.255.0
Ip nat inside source list acl1 pool pool1
!
Access-list 1 permit 0.0.0.0 255.255.255.0
Access-list 23 permit 10.10.10.0 0.0.0.7
Dialer-list 1 protocol ip permit
No cdp run
!
!
!
!
Control-plane
!
Banner login ^C
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
With the password "cisco". The default username and password have a privilege le
Vel of 15.
Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.
Username <myuser> privilege 15 secret 0 <mypassword>
No username cisco
Replace <myuser> and <mypassword> with the username and password you want to use
.
For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
Line con 0
login local
no modem enable
Line aux 0
Line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
Scheduler max-task-time 5000
!
Webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
EndJe devrais pouvoir la tester prochainement, mais sachant pertinemment que je suis une burne en cisco ...:|
Ma question est donc la suivante:
Quelles modifications/ajouts apporter à cette config pour arriver à en tirer une connexion PPPoA qui va bien comme sur une box ?
Merci d'avance ;)