Cisco Router 800 Series Software Configuration Guide

							 
3-7
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 3      Configuring Advanced Networks
Connecting a Private IP Network to the Internet and a Corporate Network
Step 10c804(dhcp-config)# netbios-name-server 
10.1.1.2 10.1.1.3For configuring DHCP only. Set the NetBIOS 
servers.
Step 11c804(dhcp-config)# default-router 10.1.1.1For configuring DHCP only. Set the Ethernet 
0 IP address as the default gateway.
Step 12c804(dhcp-config)# exitFor configuring DHCP only. Exit to global 
configuration mode.
Step 13c804(config-if)# ip address 10.0.0.1 
255.255.255.0Enter the IP address and subnet mask.
Step 14c804(config-if)# ip nat inside
c804(config-if)# exitEnable Network Address Translation (NAT) 
on your LAN; then change to global 
configuration mode.
Step 15c804(config)# interface bri0Change to interface configuration mode for 
BRI0.
Step 16c804(config-if)# encapsulation pppEnable PPP.
Step 17c804(config-if)# isdn incoming-voice 
modemOptional. Specify that incoming voice calls 
are forwarded to the devices connected to the 
telephone ports.
Step 18c804(config-if)# ppp authentication pap 
chap callinEnable PAP or CHAP on incoming calls only.
Step 19c804(config-if)# ppp chap hostname c804
c804(config-if)# ppp chap password 
804passwordFor CHAP only. Define the router hostname 
and password to authenticate.
Step 20c804(config-if)# ppp multilinkEnable multilink PPP.
Step 21c804(config-if)# ip nat outside
c804(config-if)# exitConfigure a valid Internet address to which 
the inside network address will be translated, 
then change to global configuration mode.
Step 22c804(config)# interface dialer1 Create a dialer interface.
Step 23c804(config-if)# ip unnumbered ethernet0Specify that no specific IP addresses are 
assigned for Ethernet 0.
Step 24c804(config-if)# encapsulation pppEnable PPP.
Step 25c804(config-if)# dialer remote-name 
corp_routerSpecify the name of the corporate router. Command Purpose 
						

							 
Chapter 3      Configuring Advanced Networks
Connecting a Private IP Network to the Internet and a Corporate Network
3-8
Cisco 800 Series Software Configuration Guide
78-5372-06
Step 26c804(config-if)# dialer pool 1Assign a dialer pool.
Step 27c804(config-if)# dialer idle-timeout 300Specify the time in seconds that the line is idle 
before it is disconnected.
Step 28c804(config-if)# dialer string 7771111Set up the dialer string.
Step 29c804(config-if)# dialer hold-queue 10Specify the maximum number of packets to 
be held in the outgoing queue.
Step 30c804(config-if)# dialer load-threshold 150 
eitherDefine the load level that must be exceeded 
on the first ISDN B channel before the second 
B channel is brought up. The load-threshold 
variable is a number from 1 to 255 
representing a utilization percentage.
Enter outbound to calculate the load using 
outbound data only, inbound to use inbound 
data only, and either to set the maximum load 
as the larger of the two loads.
Step 31c804(config-if)# dialer-group 1Assign the interface to dialer access group 1.
Step 32c804(config-if)# ppp authentication chap 
pap callinConfigure CHAP and PAP to authenticate 
incoming calls.
Step 33c804(config-if)# ppp chap hostname c804
c804(config-if)# ppp chap password 
804passwordSpecify the CHAP host name and password.
Step 34c804(config-if)# ppp pap sent-username 
c804 password 804passwordSpecify the PAP username and password.
Step 35c804(config)# interface dialer2Create a second dialer interface.
Step 36c804(config-if)# ip address negotiatedSpecify that IP addresses are negotiated.
Step 37c804(config-if)# encapsulation pppEnable PPP.
Step 38c804(config-if)# dialer remote-name ispSpecify the name of the corporate router.
Step 39c804(config-if)# dialer pool 2Assign a dialer pool.
Step 40c804(config-if)# dialer idle-timeout 300Specify the time in seconds that the line is idle 
before it is disconnected.
Step 41c804(config-if)# dialer string 18001234567Set up the dialer string. Command Purpose 
						

							 
3-9
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 3      Configuring Advanced Networks
Connecting a Private IP Network to the Internet and a Corporate Network
Step 42c804(config-if)# dialer hold-queue 10Specify the maximum number of packets to 
be held in the outgoing queue.
Step 43c804(config-if)# dialer load-threshold 150 
eitherDefine the load level that must be exceeded 
on the first ISDN B channel before the second 
B channel is brought up. The load-threshold 
variable is a number from 1 to 255 
representing a utilization percentage.
Enter outbound to calculate the load using 
outbound data only, inbound to use inbound 
data only, and either to set the maximum load 
as the larger of the two loads.
Step 44c804(config-if)# dialer-group 1Assign the interface to dialer access group 1.
Step 45c804(config-if)# ppp authentication chap 
pap callinConfigure CHAP and PAP to authenticate 
incoming calls.
Step 46c804(config-if)# ppp chap hostname 
generic user 
c804(config-if)# password user passSpecify the CHAP username and password.
Step 47c804(config-if)# ppp pap sent-username 
generic_user password user passSpecify the PAP username and password.
Step 48c804(config-if)# ppp multilinkEnable multilink PPP.
Step 49c804(config-if)# exitChange to global configuration mode.
Step 50c804(config)# access-list 1 permit 10.0.0.1 
255.255.255.0
c804(config)# dialer-list 1 protocol ip 
permitSpecify an access list and a dialer list to 
control IP traffic.
Step 51c804(config)# ip route 10.1.0.0 255.255.0.0 
bri0Add a default route and interface.
Step 52c804(config)# dial-peer voice 1 pots
c804(config-dial-peer)# destination-pattern 
5551212
c804(config-dial-peer)# port 1Create a dial peer to determine how incoming 
calls are routed to the telephone port 1.
Step 53c804(config-dial-peer)# exitReturn to global configuration mode. Command Purpose 
						

							 
Chapter 3      Configuring Advanced Networks
Connecting a Private IP Network to the Internet and a Corporate Network
3-10
Cisco 800 Series Software Configuration Guide
78-5372-06
Configuring the Router at the Corporate Site
Starting from global configuration mode, follow these steps to configure the 
router that is connected to the Cisco 800 series router. This procedure assumes 
that this router is a Cisco router that supports Cisco IOS software, such as a 
Cisco 3600 router.
Step 54c804(config)# dial-peer voice 2 pots
c804(config-dial-peer)# destination-pattern 
5551313
c804(config-dial-peer)# port 2Create a second dial peer for the telephone 
port 2.
Step 55c804(config-dial-peer)# exitChange to global configuration mode.
Step 56c804(config)# ip nat inside source list 1 
interface bri0 overload
c804(config)# access-list 1 permit 10.0.0.0 
0.0.0.255Set global NAT commands. In this example, 
all inside network addresses assigned to 
interface BRI0 are configured for translation, 
and the access list that contains the inside 
network addresses is defined. Command Purpose
Command Purpose
Step 1router# configure terminalEnter global configuration mode.
Step 2router(config)# hostname 3600Specify a name for the router.
Step 33600(config)# enable secret secretSet an encrypted password to gain access to 
privileged EXEC mode commands.
Step 43600(config)# username c800 password 
c800 passSpecify the username and password of the 
Cisco 800 series router. 
Step 53600(config)# ip subnet-zeroSet router to recognize the zero subnet range 
as a valid range of addresses.
Step 63600(config)# no ip domain-lookupDisable router from translating unfamiliar 
words entered during a console session into 
IP addresses.  
						

							 
3-11
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 3      Configuring Advanced Networks
Connecting a Private IP Network to the Internet and a Corporate Network
Step 73600(config)# ip dhcp pool 
DHCPpoolLAN_1Optional. Configure your router as a DHCP 
server. This step specifies the DHCP relay 
pool name.
Step 83600(dhcp-config)# network 192.168.1.0 
255.255.255.0For configuring DHCP only. Set the DHCP 
pool of addresses.
Step 93600(dhcp-config)# dns-server 192.168.1.2For configuring DHCP only. Set the IP 
address of the DNS server.
Step 103600(dhcp-config)# netbios-name-server 
192.168.1.11 192.168.1.12For configuring DHCP only. Set the NetBIOS 
servers.
Step 113600(dhcp-config)# default-router 
192.168.1.1For configuring DHCP only. Set the Ethernet 
0 IP address as the default gateway.
Step 123600(dhcp-config)# exitFor configuring DHCP only. Exit to global 
configuration mode.
Step 133600(config)# ip local pool POOL1 
192.168.1.10 192.168.1.20Set a local pool of IP addresses to be used 
when Cisco 800 series router attempts to 
connect.
Step 143600(config)# interface e0Change to interface configuration mode for 
Ethernet 0.
Step 153600(config-if)# ip address 192.168.1.1 
255.255.255.0
3600(config-if)# exitSet IP address and subnet mask for the 
Ethernet interface, then return to global 
configuration mode.
Step 163600(config)# interface bri0
3600(config-if)# isdn switch-type basic-net3Change to interface configuration mode for 
BRI0 and specify the ISDN switch type.
Step 173600(config-if)# encapsulation pppEnable PPP.
Step 183600(config-if)# isdn spid1 0155533330101
3600(config-if)# isdn spid2 0155544440101North America only. Specify SPID numbers 
assigned to B channels by telephone service 
provider.
Step 193600(config-if)# peer default ip address 
pool POOL1Specify address from a particular IP address 
pool be returned to the connected router. Use 
pool name specified in ip local pool 
command. Command Purpose 
						

							 
Chapter 3      Configuring Advanced Networks
Connecting a Remote Network to Two Corporate Networks
3-12
Cisco 800 Series Software Configuration Guide
78-5372-06
Connecting a Remote Network to Two Corporate 
Networks
In the network example shown in Figure 3-2 and Ta b l e 3 - 2, the Cisco 800 series 
router and two other routers, such as Cisco 3600 routers, connect a remote 
network to two corporate networks. 
Figure 3-2 Connecting Remote Network to Two Corporate Networks Step 20
3600(config-if)# ppp authentication chap 
callin
or
3600(config-if)# ppp authentication pap 
callinEnable PAP or CHAP and specify 
authentication in incoming calls only.
Step 213600(config-if)# ppp multilinkEnable multilink PPP.
Step 223600(config-if)# no cdp enableDisable CDP.
Step 233600(config-if)# exit
3600(config)# ip classlessChange to global configuration mode, and set 
IP addresses to be treated as classless. Command Purpose
74933
3600
3600 800
1
2
3
4 
						

							 
3-13
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 3      Configuring Advanced Networks
Connecting a Remote Network to Two Corporate Networks
Features Used
This network uses the following features on the LAN:
IP routing (Cisco recommends for management purposes, such as Telnet)
DHCP server (optional)
When your router is acting as a DHCP server, workstations configured as DHCP 
clients are automatically assigned an IP address and subnet mask. 
This network uses the following features on the WAN:
IP routing
PPP
NAT overload
IPCP
CHAP or PAP over PPP
With NAT overload configured, your router can use one address for multiple 
hosts. With IPCP configured, your router can automatically negotiate its IP 
address from the router it is attempting to connect to.
You can use either CHAP or PAP as the PPP authentication protocol. Cisco 
recommends using CHAP because it is the more secure of the two protocols.
For the ISDN connection, you can use one of the following options:
DDR using snapshot routing (the ISDN line is activated only when needed)
Permanently leased ISDN line
For complete information on these options, including how to configure them, see 
the “Configuring the ISDN Line” section on page 3-19. Callout 
Number Description
1Site 1
2ISDN network
3Site 2
4Site 3 
						

							 
Chapter 3      Configuring Advanced Networks
Connecting a Remote Network to Two Corporate Networks
3-14
Cisco 800 Series Software Configuration Guide
78-5372-06
The IP routing protocol can use either RIP or EIGRP to learn routes dynamically. 
You can use either one of these options. You can also use triggered extensions to 
RIP to control when RIP sends routing updates. For information on how to 
configure these options, see the “Configuring Dynamic Routing” section on 
page 3-23.
Configuring the Cisco 800 Series Router
NoteBefore you begin to configure your router, review the “Before Configuring 
Advanced Networks or Features” section on page 3-2 .
Starting from global configuration mode, follow these steps to configure the 
Cisco 800 series router in the remote network to two corporate networks. For 
information on the commands used in this table, refer to the Cisco IOS 
documentation.
Command Purpose
Step 1router# configure terminalEnter global configuration mode.
Step 2router(config)# hostname c804Enter the router name.
Step 3c804(config)# enable secret 804passwordEnter the password.
Step 4c804(config)# pots country usOptional. If you have a Cisco 803 or 804 
router that are connected to telephones, fax 
machines, or modems, specify the country 
where your router is located. Specifying a 
country configures the country-specific 
default settings for each physical 
characteristic.
Step 5c804(config)# ip subnet-zeroSet the router to recognize the zero subnet 
range as a valid range of addresses.
Step 6c804(config)# ip dhcp pool 
DHCPpoolLAN_0Optional. Configure your router as a DHCP 
server. In this step, specify the DHCP relay 
pool name.
Step 7c804(dhcp-config)# network 192.168.1.0 
255.255.255.0Optional. Set the DHCP pool of addresses. 
						

							 
3-15
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 3      Configuring Advanced Networks
Connecting a Remote Network to Two Corporate Networks
Step 8c804(dhcp-config)# dns-server 172.29.20.41 
172.29.20.51For DHCP configuration only. Set the IP 
address of the DNS servers.
Step 9c804(dhcp-config)# netbios-name-server 
172.29.20.41 172.29.20.51For DHCP configuration only. Set the 
NetBIOS servers.
Step 10c804(dhcp-config)# default-router 
192.168.1.1For DHCP configuration only. Set the 
Ethernet 0 IP address as the default gateway.
Step 11c804(dhcp-config)# exitFor DHCP configuration only. Exit to global 
configuration mode.
Step 12c804(config)# interface ethernet0Change to the Ethernet interface 
configuration mode.
Step 13c804(config-if)# ip nat insideEnable NAT on the inside network.
Step 14c804(config-if)# ip address 192.168.2.2 
255.255.255.0
c804(config-if)# exitAssign the IP addresses for Ethernet 0; then 
change to global configuration mode.
Step 15c804(config)# interface dialer1Create a dialer interface.
Step 16c804(config-if)# encapsulation pppEnable PPP.
Step 17c804(config-if)# dialer remote-name corp1Specify the name of the corporate router.
Step 18c804(config-if)# dialer pool 1Assign a dialer pool.
Step 19c804(config-if)# dialer idle-timeout 300Specify the time, in seconds, that the line is 
idle before it is disconnected.
Step 20c804(config-if)# dialer string 7771111Set up the dialer string.
Step 21c804(config-if)# dialer hold-queue 10Specify the maximum number of packets to 
be held in the outgoing queue.
Step 22c804(config-if)# dialer-group 1Assign the interface to dialer access group 1.
Step 23c804(config-if)# ppp authentication chap 
pap callinConfigure CHAP and PAP to authenticate 
incoming calls.
Step 24c804(config-if)# ppp chap hostname c804Specify the CHAP host name.
Step 25c804(config-if)# ppp chap password 
804passwordSpecify the CHAP password.
Step 26c804(config-if)# ppp pap sent-username 
c804 password 804passwordSpecify the PAP username and password. Command Purpose 
						

							 
Chapter 3      Configuring Advanced Networks
Connecting a Remote Network to Two Corporate Networks
3-16
Cisco 800 Series Software Configuration Guide
78-5372-06
Step 27c804(config)# interface dialer2Create a second dialer interface.
Step 28c804(config-if)# ip address 192.168.3.1 
255.255.255.0Assign the IP addresses for Ethernet 0.
Step 29c804(config-if)# encapsulation pppEnable PPP.
Step 30c804(config-if)# dialer remote-name corp2Specify the name of the corporate router.
Step 31c804(config-if)# dialer pool 1Assign a dialer pool.
Step 32c804(config-if)# dialer idle-timeout 300Specify the time in seconds that the line is idle 
before it is disconnected.
Step 33c804(config-if)# dialer string 7772222Set up the dialer string.
Step 34c804(config-if)# dialer hold-queue 10Specify the maximum number of packets to 
be held in the outgoing queue.
Step 35c804(config-if)# dialer-group 2Assign the interface to a dialer access group.
Step 36c804(config-if)# ppp authentication chap 
pap callinConfigure CHAP and PAP to authenticate 
incoming calls.
Step 37c804(config-if)# ppp chap hostname c804Specify the CHAP host name.
Step 38c804(config-if)# ppp chap password 
804passwordSpecify the CHAP password.
Step 39c804(config-if)# ppp pap sent-username 
c804 password 804passwordConfigure PAP username and password.
Step 40c804(config-if)# exit
c804(config)#Change to global configuration mode.
Step 41c804(config)# dialer-list 1 protocol ip 
permit
c804(config) dialer-list 2 protocol ip permitSpecify dialer-list protocol permissions. 
Step 42c804(config)# interface bri0
c804(config-if)# isdn switch-type basic-niChange to the interface BRI0 configuration 
mode and set the ISDN switch type.
Step 43c804(config-if)# ip address 192.168.1.1. 
255.255.255.0Enter the IP address and subnet mask.
Step 44c804(config-if)# ip nat outsideConfigure a valid Internet address to which 
the inside network address will be translated. Command Purpose