Cisco - Configuring the PPPoE Client on a Cisco Secure PIX Firewall

More documents

Recommendations

Info

<strong>Configuring</strong> <strong>the</strong> <strong>PPPoE</strong> <strong>Client</strong> on a <strong>Cisco</strong> SecurePIX FirewallDocument ID: 22855IntroductionPrerequisitesRequirementsComponents UsedConventionsConfigureNetwork DiagramConfigurationsVerifyTroubleshootTroubleshooting InformationTroubleshooting CommandsKnown Caveats in PIX OS Version 6.2 and 6.3Known Caveats in PIX OS Version 6.3NetPro Discussion Forums − Featured ConversationsRelated InformationIntroductionThis document describes how to configure <strong>the</strong> PPP over E<strong>the</strong>rnet (<strong>PPPoE</strong>) <strong>Client</strong> on <strong>the</strong> <strong>Cisco</strong> Secure PIXFirewall. This function was introduced with PIX OS version 6.2 and is targeted for <strong>the</strong> low−end PIX(501/506). Currently, it is only supported on <strong>the</strong> outside interface of <strong>the</strong> PIX. Once <strong>the</strong> configuration is also on<strong>the</strong> outside interface, all traffic will be encapsulated with <strong>PPPoE</strong>/PPP headers. The default au<strong>the</strong>nticationmechanism for <strong>PPPoE</strong> is Password Au<strong>the</strong>ntication Protocol (PAP). The user has <strong>the</strong> option to configureChallenge Handshake Au<strong>the</strong>ntication Protocol (CHAP) or MS−CHAP manually. Layer 2 Tunneling Protocol(L2TP) and Point−to−Point Tunneling Protocol (PPTP) are not supported with <strong>PPPoE</strong> in PIX OS version 6.2and 6.3.PrerequisitesRequirementsThere are no specific requirements for this document.Components UsedThe information in this document is based on <strong>the</strong>se software and hardware versions:• PIX 501 with PIX OS version 6.3(4)• <strong>Cisco</strong> 1721 router with <strong>Cisco</strong> IOS® Software Release 12.3(10) configured as a <strong>PPPoE</strong> serverThe information in this document was created from <strong>the</strong> devices in a specific lab environment. All of <strong>the</strong>devices used in this document started with a cleared (default) configuration. If your network is live, make surethat you understand <strong>the</strong> potential impact of any command.<strong>Cisco</strong> − <strong>Configuring</strong> <strong>the</strong> <strong>PPPoE</strong> <strong>Client</strong> on a <strong>Cisco</strong> Secure PIX Firewall
ConventionsFor more information on document conventions, refer to <strong>the</strong> <strong>Cisco</strong> Technical Tips Conventions.ConfigureIn this section, you are presented with <strong>the</strong> information to configure <strong>the</strong> features described in this document.Note: To find additional information on <strong>the</strong> commands used in this document, use <strong>the</strong> Command LookupTool ( registered customers only) .Network DiagramThis document uses <strong>the</strong> network setup shown in this diagram.ConfigurationsThis document uses <strong>the</strong>se configurations.• <strong>Cisco</strong> 1721 Router as <strong>PPPoE</strong> Server• PIX (501 or 506 ) as <strong>PPPoE</strong> <strong>Client</strong>In this lab test, a <strong>Cisco</strong> 1721 router was configured to act as a <strong>PPPoE</strong> server. You may not need this in yourhome/remote office since your ISP hosts <strong>the</strong> <strong>PPPoE</strong> server.<strong>Cisco</strong> 1721 Router as <strong>PPPoE</strong> Server!−−− Username matches that on <strong>the</strong> PIX.username cisco password cisco!−−− Enable virtual private dial−up network (VPDN).vpdn enable!!−−− Define <strong>the</strong> VPDN group to be used for <strong>PPPoE</strong>.vpdn−group pppoexaccept−dialinprotocol pppoevirtual−template 1!interface E<strong>the</strong>rnet0ip address 172.21.48.30 255.255.255.224<strong>Cisco</strong> − <strong>Configuring</strong> <strong>the</strong> <strong>PPPoE</strong> <strong>Client</strong> on a <strong>Cisco</strong> Secure PIX Firewall
Page 1: Cisco −
Page 7 and 8: This is the output
Page 9 and 10: padi timer expiredPPPoE</st
Page 11 and 12: 000000000000000000000000Rcvd Link C
Page 13 and 14: LCP Option: AUTHENTICATION_TYPES, l
Page 15: NetPro Discussion Forums − Featur

Cisco - Configuring the PPPoE Client on a Cisco Secure PIX Firewall

Create successful ePaper yourself

Delete template?

Save as template?