7206 ATM sub interfaces private network????

tadamson · ‎03-05-2008

I have a 7206VXR [ver 12.3(6b)], that is used as a DSL concentrator at an ISP. Interfaces are defined as:

interface ATM2/0.420 point-to-point

pvc 0/919

encapsulation aal5mux ppp Virtual-Template2

!

interface ATM2/0.421 point-to-point

pvc 0/920

encapsulation aal5mux ppp Virtual-Template2

!

interface Virtual-Template2

description DSL 2nd Subnet

ip unnumbered Loopback2

load-interval 30

no peer default ip address

ppp authentication pap

The owners want to know if there is a way to configure the two ATM interfaces so that they act as a private network (VLAN?) for the customers, no public traffic. I'm thinking it can be done, I just don't know how. Suggestions, Pointers, Help....

Todd

paolo bevilacqua · ‎03-05-2008

Yes it can be done.

1st and easier method, configure acl for the dialer interface so that no outside traffic is allowed.

2nd more complete, suggested if these customers are using same addresses as somebody else, configure vrf-lite. this way you parition the router in multiple virtual router assgned to each interface.

hope this helps, please rate post if it does!

todd.adamson · ‎03-07-2008

After some hit and missing as a 1st time vrf-lite user, I was able to get it operational. That seems to be working. Thanks a bunch

Todd