03-02-2006 07:18 AM - edited 03-03-2019 11:55 AM
Hi,
We have the problem that our Cisco 876 Router with IOS 12.3(8) does not develop the DSL connection to our provider (Telekom in Germany). We are using the SDM. This Tool gives the message: Re-configure the ATM sub interface with the right VPI/VCI values. We used 1 and 32.
Here is our config:
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname c
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 debugging
logging console critical
enable secret 5 ***
!
username admin privilege 15 secret 5 ***
no aaa new-model
ip subnet-zero
no ip source-route
ip cef
!
ip inspect name DEFAULT100 ftp
ip inspect name DEFAULT100 icmp
ip inspect name DEFAULT100 tcp
ip inspect name DEFAULT100 udp
ip tcp synwait-time 10
no ip bootp server
ip domain name DOM
ip name-server 217.237.151.97
ip name-server 194.25.0.69
ip ssh time-out 60
ip ssh authentication-retries 2
no ftp-server write-enable
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description $ES_WAN$$FW_OUTSIDE$
pvc 1/32
oam-pvc manage
pppoe-client dial-pool-number 1
!
interface FastEthernet0
no ip address
no cdp enable
!
interface Vlan1
description ETH
ip address 192.168.0.250 255.255.255.0
ip access-group 100 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
interface Dialer0
description DIA
ip address dhcp
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1452
ip inspect DEFAULT100 out
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname ***
ppp chap password 7 ***
ppp pap sent-username *** password 7 ***
!
ip classless
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark SDM_ACL Category=1
access-list 101 permit udp host 194.25.0.69 eq domain any
access-list 101 permit udp host 217.237.151.97 eq domain any
access-list 101 permit udp any eq bootps any eq bootpc
access-list 101 deny ip 192.168.0.0 0.0.0.255 any
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip any any
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
line con 0
login local
no modem enable
transport preferred all
transport output telnet
line aux 0
login local
transport preferred all
03-02-2006 08:38 AM
Hello Ludwig,
1 and 32 look ok, although I think these are the values for PPPoE (while you are running PPPoA). You might want to try 0/35, 8/35, or 8/48. Also, try and change the ´dsl operating-mode´ to ´ansi-dmt´ instead of auto, and check if that makes a difference.
Regards,
Nethelper
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: