Cisco ASA 5506-X (PPPOE)
Hi and welcome to this video which is part of the Cisco ASA 5506-X Configuration Basics series.
During this video I'll be showing you how to configure the ASA 5506-X firewall, connecting a single inside LAN subnet to the outside Internet router using PPPOE.
We start by ensuring we have a clean configuration, preventing Cisco's default or any previous configuration entries creating problems later on.
You can find a full copy of the configuration used below, including brief outline of the commands used.
PPPOA - Point to Point Protocol Over ATM
PPPOE - Point to Point Protocol Over Ethernet
SOHO - Small Office Home Office
------------------------------------------------------------------------------------------
! Full configuration used shown below.
!
wr erase
! deletes configuration
!
reload
! Proceed with reload, hit enter to confirm
!
enable
!
conf t
!
terminal width 350
! This is so you can see the full command (optional)
!
hostname northfirewall
! You can enter any hostname you like
!
vpdn group talktalk request dialout pppoe
vpdn group talktalk localname talktalk
vpdn group talktalk ppp authentication pap
vpdn username pppoe-username password pppoe-password
!Configure Virtual Private Dialup Network Group and settings
!
interface GigabitEthernet1/1
description out to internet
nameif talktalk
security-level 0
ip address pppoe setroute
pppoe client vpdn group talktalk
no shut
! This is my outside interface
!
interface GigabitEthernet1/2
description home network
nameif homenetwork
security-level 100
ip address 192.168.1.1 255.255.255.0
no shut
! This is my inside interface for my network
!
nat (homenetwork,talktalk) after-auto source dynamic any interface
! Enable NAT from the inside to the outside interface
!
dhcpd address 192.168.1.100-192.168.1.150 homenetwork
dhcpd dns 208.67.222.222 208.67.220.220 interface homenetwork
dhcpd enable homenetwork
! The Above is the DHCP pool for my home network
! 208.67.222.222 & 208.67.220.220 are public DNS servers
!
dns domain-lookup talktalk
! This enables DNS lookup via my outside interface
!
dns server-group DefaultDNS
name-server 208.67.222.222 208.67.220.220 talktalk
domain-name fivenines.org.uk
! This is to enable DNS lookup from the ASA firewall
!
policy-map global_policy
class inspection_default
inspect icmp
inspect icmp error
! Enables ping testing to outside hosts for testing, can be removed later if required
!
username cisco password P@55word01 privilege 15
! This configures a local administrator named cisco
!
enable password P@55word01
! This configures the enable password
!
end
wr mem
! This saves the configuration
------------------------------------------------------------------------------------------
! To Test Connectivity
ping 208.67.222.222
! Sends a ping to the external open DNS server
ping www.uboot.com
! Sends a ping to an external website to check dns
show ip address talktalk pppoe
! Use to check IP address obtained via DHCP from the service provider
show vpdn session pppoe state
! Use to show the VPDN Status
! You normally obtain your IP address from your home broadband provider via DHCP, though
! you can also configure the PPPOE/VPDN to use a static IP address if a static address
! has been requested and provided by your service provider as follows;
!
ip address talktalk 201.n.n.n 255.255.255.0 pppoe
!
------------------------------------------------------------------------------------------
That brings this presentation to an End...
If you enjoyed it, better still if you learnt from it then please subscribe and till the next time, by for now...