Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 166)

4-14

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 4 Using PIX Firewall in SOHO Networks

Using the PIX Firewall PPPoE Client

Step 3 Associate the username assigned by your ISP to the VPDN group by entering the following command:

vpdn group group_name localname username

Replace group_name with the VPDN group name and username with the username assigned by your ISP.

Step 4 Create a username and password pair for the PPPoE connection by entering the following command:

vpdn username username password pass [store-local]

Replace username with the username and pass with the password assigned by your ISP.

Note The store-local option stores the username and password in a special location of NVRAM on the

PIX

Firewall. If an Auto Update Server sends a clear config command to the PIX Firewall and the

connection is then interrupted, the PIX

Firewall can read the username and password from NVRAM and

re-authenticate to the Access Concentrator.

Enabling PPPoE on the PIX Firewall

Note You must complete the configuration using the vpdn command, described in “Configuring the PPPoE

Client Username and Password,” before enabling PPPoE.

The PPPoE client functionality is turned off by default. To enable the PPPoE client, enter the following

command.

ip address ifName pppoe [setroute]

Reenter this command to clear and restart the PPPoE session. The current session will be shut down and a

new one will be restarted.

For example:

ip address outside pppoe

The PPPoE client is only supported on the outside interface of the PIX Firewall. PPPoE is not supported

in conjunction with DHCP because with PPPoE the IP address is assigned by PPP. The setroute option

causes a default route to be created if no default route exists. The default router will be the address of

the access concentrator. The maximum transmission unit (MTU) size is automatically set to 1492 bytes,

which is the correct value to allow PPPoE transmission within an Ethernet frame.

Using PPPoE with a Fixed IP Address

You can also enable PPPoE by manually entering the IP address, using the command in the following

format:

ip address ifname ipaddress mask pppoe

This command causes the PIX Firewall to use the specified address instead of negotiating with the

PPPoE server to assign an address dynamically. To use this command, replace ifname with the name of

the outside interface of the PIX

Firewall connected to the PPPoE server. Replace ipaddress and mask

with the IP address and subnet mask assigned to your PIX

Firewall.

1 2 ... 161 162 163 164 165 166 167 168 169 170 171 ... 465 466

Brak uwag

Cisco PIX 525 Dokumentacja Strona 166