Configuring Subscriber-End Broadband Access Router Features
Subscriber-End Broadband Access Router Configuration Examples
MC-658
Cisco IOS Multiservice Applications Configuration Guide
hostname Router
!
clock timezone - 0 6
ip subnet-zero
no ip domain-lookup
!
crypto isakmp policy 1
hash md5
authentication pre-share
lifetime 5000
crypto isakmp key 1111 address 30.1.1.1
crypto isakmp identity hostname
!
crypto ipsec transform-set test-transform ah-md5-hmac esp-des esp-md5-hmac
!
crypto map test-ipsec local-address cable-modem0
crypto map test-ipsec 10 ipsec-isakmp
set peer 30.1.1.1
set transform-set test-transform
match address 100
!
interface Ethernet0
ip address 24.1.0.1 255.255.0.0
no ip directed-broadcast
!
interface cable-modem0
ip address 10.1.0.25 255.255.0.0
no ip directed-broadcast
no keepalive
cable-modem downstream saved channel 213000000 30
no cable-modem compliant bridge
crypto map test-ipsec
router rip
version 2
network 10.0.0.0
network 24.0.0.0
!
ip classless
no ip http server
!
access-list 100 permit ip host 10.1.0.25 30.1.1.0 0.0.0.255
!
line con 0
exec-timeout 0 0
transport input none
line vty 0 4
login
!
end
L2TP Configuration Example
Note Encryption/decryption is subject to export licensing controls. To support L2TP and
firewalls, the Cisco uBR900 series must be configured in routing mode. Software images
running at both the headend and the subscriber end must support the feature set.