Cisco ADSL and MXSTREAM INFO

Using the Cisco (IOS) router with the MXStream ADSL lines.
(Your Cisco router must be equiped with a functional ADSL wic/interface to use the information below, the information was compiled from an other link on the dutch section on the cisco.com website. No configutation examples included for PPPOE!)

** READ THE COMPLETE DOCUMENT FIRST MAKE SURE YOU UNDERSTAND WHAT YOU ARE DOING!! **
(Parts of this setup could cause unwanted side effects for you and or the ISP and the customers of this ISP - I am not responsible in any way for Faults made during the implementation of the things mentioned in this DOCUMENT. I am not the author of the information in this document (see link above) so i do _NOT_ know if this setup will work. This information is ONLY intended as a helping hand while building your own configuration!)

- Sample configuration 1
- Cisco router with ADSL interface directly connected to the Mxstream/ADSL line.

!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname router
!
logging rate-limit console 10 except errors
enable secret <Secret_Password>
enable password <Enable_Password>
!
ip subnet-zero
no ip finger
!
! configure the inside server with fixed ip address 10.10.10.2 mask 255.255.255.0
! including the def-gw 10.10.10.1 and primary and secondary DNS from SP
! Consult service provider for DNS addresses.
!
ip dhcp excluded-address 10.10.10.1 10.10.10.2
!
!
! Beside the 'inside server' used for http server /ftp server, PIX-firewall etc
! Additional hosts can be directly attached with DHCP enabled.
!
ip dhcp pool CLIENT
import all
network 10.10.10.0 255.255.255.0
dns-server <primary dns> <secundary dns>
default-router 10.10.10.1
!
no ip dhcp-client network-discovery
call rsvp-sync
!
! 10.10.10.1/24 will be the default gateway
!
interface Ethernet0
ip address 10.10.10.1 255.255.255.0
ip nat inside
no ip mroute-cache
hold-queue 32 in
!
interface ATM0
no ip address
no ip mroute-cache
no atm ilmi-keepalive
pvc 8/48
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
interface Dialer0
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp pap sent-username <MyUsername> password <MyPassword>
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
! Configure a dynamic pool and a static entry
! Use the IP address assigned by the SP in the static nat entry.
! It is mandatory to recieve a fixed IP-adres from the SP.
!
ip nat inside source list 101 interface Dialer0 overload
ip nat inside source static 10.10.10.2 <IP ADRESS ASSIGNED BY SP !!!!>
access-list 101 permit ip 10.10.10.0 0.0.0.255 any
dialer-list 1 protocol ip permit
!
!
line con 0
exec-timeout 120 0
transport input none
stopbits 1
line vty 0 4
exec-timeout 0 0
password <VTY_Password>
login
length 0
!
end

- Sample configuration 2:
- Cisco router with ADSL interface directly connected to the Mxstream/ADSL line. Also included in this config is the "Statefull inspection firewall" (you need the Firewall featureset for this!)

!
version 12.2
no service pad
service password-encryption
!
hostname Cisco800
!
enable secret <SecretPassword>
enable password <EnablePassword>
!
ip inspect name FWall http
ip inspect name FWall cuseeme
ip inspect name FWall smtp
ip inspect name FWall tcp
ip inspect name FWall udp
ip inspect name FWall ftp
ip inspect name FWall h323
ip inspect name FWall netshow
ip inspect name FWall rcmd
ip inspect name FWall sqlnet
ip inspect name FWall streamworks
ip inspect name FWall tftp
ip inspect name FWall vdolive
ip inspect name FWall realaudio
ip inspect name FWall rtsp
ip subnet-zero
ip name-server <primary dns>
ip name-server <secondary dns>
!
ip dhcp excluded-address 10.1.1.254
!
ip dhcp pool 10.1.1.0/24
network 10.1.1.0 255.255.255.0
!
! domain-name e.g. xs4all.nl or planet.nl
domain-name <FQDN service provider>
default-router 10.1.1.254
dns-server <primary DNS> <secondary DNS>
netbios-node-type h-node
!
!
template adsl
!
interface Ethernet0
ip address 10.1.1.254 255.255.255.0
ip access-group 100 in
ip nat inside
ip inspect FWall in
no shutdown
!
interface ATM0
no shutdown
no ip address
load-interval 30
no atm ilmi-keepalive
pvc 8/48
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
bundle-enable
hold-queue 224 in
!
interface Dialer0
ip address negotiated
ip access-group 110 in
ip nat outside
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer-group 1
ppp pap sent-username <MyUsername> password <MyPassword>
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
access-list 100 permit udp any eq bootpc any eq bootps
access-list 100 permit ip 10.1.1.0 0.0.0.255 any
access-list 100 deny ip any any log
access-list 110 permit icmp any any echo-reply
access-list 110 deny ip any any log
dialer-list 1 protocol ip permit
!

- Sample configuration 2:
- Cisco router with ADSL interface directly connected to the Mxstream/ADSL line. Also included in this config is the extra IP access list. (for security reasons see the access-list 100 in this config)

!
version 12.2
no service pad
service password-encryption
!
hostname Cisco800
!
enable secret <SecretPassword>
enable password <EnablePassword>
!
!
ip subnet-zero
ip name-server 195.121.1.34
ip name-server 195.121.1.66
!
ip name-server <primary dns>
ip name-server <secondary dns>
!
ip dhcp pool 10.1.1.0/24
network 10.1.1.0 255.255.255.0
! domain-name e.g. xs4all.nl or planet.nl
domain-name <FQDN service provider>
default-router 10.1.1.254
dns-server 194.109.6.66 194.109.9.99
netbios-node-type h-node
!
!
template adsl
!
interface Ethernet0
ip address 10.1.1.254 255.255.255.0
ip access-group 100 in
ip nat inside
no shutdown
!
interface ATM0
no shutdown
no ip address
load-interval 30
no atm ilmi-keepalive
pvc 8/48
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
bundle-enable
hold-queue 224 in
!
interface Dialer0
ip address negotiated
ip access-group 110 in
ip nat outside
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
dialer-group 1
ppp pap sent-username <MyUsername> password <MyPassword>
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
access-list 100 permit udp any eq bootpc any eq bootps
access-list 100 permit ip 10.1.1.0 0.0.0.255 any
access-list 100 deny ip any any log
access-list 110 permit tcp any any gt 1023 established
access-list 110 permit udp any any gt 1023
access-list 110 permit icmp any any echo-reply
access-list 110 deny ip any any log
dialer-list 1 protocol ip permit
!