Bridge DSL to Ethernet (877)

[James.Longman]

All,

I've got an 877 configured and working just fine as a NATing DSL router, but I'd now like to add an ASA beside it. I've got an extra IP from the ISP so what I'd like to do is bridge the DSL interface to one of the switch ports on the 877 and plug the ASA in there.

I've created a bridge group, put the ATM0.1 in it and then tried to put a switchport in it and get:

FastEthernet1 does not support bridging

So, I created an SVI and put that in the bridge-group and added Fa1 as an access member of that VLAN, but nothing seems to come out the interface to the ASA.

I'm pretty much out of ideas now. Anyone know what the right approach is?

Thanks!

[paolo bevilacqua]

Config?

[James.Longman]

Sure thing!

interface ATM0.1 point-to-point

  description Link to Internet

   ip ddns update hostname

   ip ddns update dyndns

   ip address

  ip access-group 101 in

   ip pim sparse-dense-mode

  ip nat outside

   ip inspect CBAC_FIREWALL out

  ip virtual-reassembly

   atm route-bridged ip

    pvc 0/101

     oam-pvc manage

  encapsulation aal5snap

!

bridge-group 2

end

!

interface Vlan50

  no ip address

  bridge-group 2

end

!

interface FastEthernet1

  description ASA Outside interface

   switchport access vlan 50

  spanning-tree portfast

end

!

bridge 2 protocol ieee

bridge 2 route ip

I swear it didn't last time, but that config took down my Internet connection until I removed "bridge-group 2" from the ATM interface.

I suspect I'm fundamently misunderstanding bridge groups.

[James.Longman]

No thoughts anyone?

[paolo bevilacqua]

interface ATM0.1 point-to-point

  no ip

  no atm route-bridged ip

  bridge-group 2

!

interface vlan2

  ip

[James.Longman]

Gah! Seems obvious in hindsight! I'll give it a go shortly!

Many thanks, I'll let you and anyone else who's interested know how I get on.