C H A P T E R 10
Sample Configuration
This chapter collects the results of the Ethernet WAN interface, DHCP, VLAN, Easy VPN, and wireless
interface configurations made in previous chapters. This allows you to view what a basic configuration
provided by this guide looks like in a single sample, Example 10-1.
Note Commands marked by “(default)” are generated automatically when you run the show running-config
command.
Example 10-1 Sample Configuration
Router# show running-config
Building configuration...
Current configuration : 3781 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname retail
!
boot-start-marker
boot-end-marker
!
enable password cisco123
!
username jsomeone password 0 cg6#107X
aaa new-model
!
aaa group server radius rad_eap
server [Link] auth-port 1812 acct-port 1813
!
aaa authentication login eap_methods group rad_eap
aaa session-id common
ip subnet-zero
ip cef
!
vpdn enable
vpdn-group 1
request-dialin
protocol pppoe
!
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
OL-5332-01 10-1
Chapter 10 Sample Configuration
interface dialer 1
ip address negotiated
ppp authentication chap
dialer pool 1
dialer-group 1
!
dialer-list 1 protocol ip permit
ip nat inside source list 1 interface dialer 0 overload
ip classless (default)
ip route [Link] [Link] dialer 0
!
ip dhcp excluded-address [Link] [Link]
ip dhcp excluded-address [Link] [Link]
ip dhcp excluded-address [Link] [Link]
!
ip dhcp pool vlan1
network [Link] [Link]
default-router [Link]
!
ip dhcp pool vlan2
network [Link] [Link]
default-router [Link]
!
ip dhcp pool vlan3
network [Link] [Link]
default-router [Link]
!
ip ips po max-events 100
no ftp-server write-enable
!
bridge irb
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
switchport mode trunk
no ip address
!
interface FastEthernet4
ip address [Link] [Link]
no ip directed-broadcast (default)
speed auto
ip nat outside
ip access-group 103 in
no cdp enable
crypto ipsec client ezvpn ezvpnclient outside
crypto map static-map
!
crypto isakmp policy 1
encryption 3des
authentication pre-share
group 2
lifetime 480
!
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
10-2 OL-5332-01
Chapter 10 Sample Configuration
crypto isakmp client configuration group rtr-remote
key secret-password
dns [Link] [Link]
domain [Link]
pool dynpool
!
crypto ipsec transform-set vpn1 esp-3des esp-sha-hmac
!
crypto ipsec security-association lifetime seconds 86400
!
crypto dynamic-map dynmap 1
set transform-set vpn1
reverse-route
!
crypto map static-map 1 ipsec-isakmp dynamic dynmap
crypto map dynmap isakmp authorization list rtr-remote
crypto map dynmap client configuration address respond
crypto ipsec client ezvpn ezvpnclient
connect auto
group 2 key secret-password
mode client
peer [Link]
!
interface Dot11Radio0
no ip address
!
broadcast-key vlan 1 change 45
!
encryption vlan 1 mode ciphers tkip
!
ssid cisco
vlan 1
authentication open
authentication network-eap eap_methods
authentication key-management wpa optional
!
ssid ciscowep
vlan 2
authentication open
!
ssid ciscowpa
vlan 3
authentication open
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
rts threshold 2312
power local cck 50
power local ofdm 30
channel 2462
station-role root
!
interface Dot11Radio0.1
description Cisco Open
encapsulation dot1Q 1 native
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
OL-5332-01 10-3
Chapter 10 Sample Configuration
interface Dot11Radio0.2
encapsulation dot1Q 2
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 spanning-disabled
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
!
interface Dot11Radio0.3
encapsulation dot1Q 3
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 spanning-disabled
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
!
interface Vlan1
no ip address
no ip directed-broadcast (default)
ip nat inside
crypto ipsec client ezvpn ezvpnclient inside
ip inspect firewall in
no cdp enable
bridge-group 1
bridge-group 1 spanning-disabled
!
interface Vlan2
no ip address
bridge-group 2
bridge-group 2 spanning-disabled
!
interface Vlan3
no ip address
bridge-group 3
bridge-group 3 spanning-disabled
!
interface BVI1
ip address [Link] [Link]
!
interface BVI2
ip address [Link] [Link]
!
interface BVI3
ip address [Link] [Link]
!
ip classless
!
ip http server
no ip http secure-server
!
radius-server local
nas [Link] key 0 cisco123
group rad_eap
!
user jsomeone nthash 7 0529575803696F2C492143375828267C7A760E1113734624452725707C010B065B
user AMER\jsomeone nthash 7
0224550C29232E041C6A5D3C5633305D5D560C09027966167137233026580E0B0D
!
radius-server host [Link] auth-port 1812 acct-port 1813 key cisco123
!
control-plane
!
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
10-4 OL-5332-01
Chapter 10 Sample Configuration
bridge 1 route ip
bridge 2 route ip
bridge 3 route ip
!
ip inspect name firewall tcp
ip inspect name firewall udp
ip inspect name firewall rtsp
ip inspect name firewall h323
ip inspect name firewall netshow
ip inspect name firewall ftp
ip inspect name firewall sqlnet
!
access-list 103 permit udp host [Link] any eq isakmp
access-list 103 permit udp host [Link] eq isakmp any
access-list 103 permit esp host [Link] any
access-list 103 permit icmp any any
access-list 103 deny ip any any
access-list 105 permit ip [Link] [Link] [Link] [Link]
no cdp run
!
line con 0
password cisco123
no modem enable
transport preferred all
transport output all
line aux 0
transport preferred all
transport output all
line vty 0 4
password cisco123
transport preferred all
transport input all
transport output all
!
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
OL-5332-01 10-5
Chapter 10 Sample Configuration
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
10-6 OL-5332-01