navbar

Sample Configurations



CPA 75x IP router to CPA 75x IP router -PPP -CHAP -STATIC, Unnumbered

Main Site router

>set systemname HQSets the system name of the main router. This system name "HQ" will have to match the user profile in the remote site router for authentication purposes. The system name is sent to the far end router as the userid during ppp authentication.
HQ>set ppp secret client (prompts for chap password)Sets the chap secret that will be used to send the chap magic number to the remote router when the remote router challenges the main router.
Enter Password: happyPrompted to enter the password/secret. "happy" is entered as the chap secret.
ReEnter Password: happyPrompted to reenter the password/secret to ensure consistency.
HQ>set encapsulation pppSets the encapsulation for the user profile default template to ppp.
HQ>set ppp authentication incoming chapSets the ppp authentication for incoming calls to be forced to authenticate via chap.
HQ>cd lanChanges to the LAN profile.
HQ:LAN>set bridging offTurns bridging off in the LAN profile.
HQ:LAN>set ip routing onTurns ip routing on in the LAN profile.
HQ:LAN>set ip 198.52.110.254 Assigns the ip address to the LAN Profile in the network of the Ethernet segment to which the router is attached.
HQ:LAN>set subnet 255.255.255.0 Sets the ip netmask of the LAN profile.
HQ>set user remoteCreates the user profile "remote". Changes to the user profile "remote". This user profile name has to match the system name of the remote site router. The system name is received from the far end as the userid during ppp authentication.
HQ:remote>set bridging offTurns bridging off in the user profile "remote".
HQ:remote>set ip route destination 198.52.211.0/24 gateway 198.52.211.254Sets static ip route that sends any packets destined for the remote ethernet network to the ip address of the LAN profile on the remote site router.
HQ:remote>set ip propagate offTurns ip propagation of the user profile "remote"s ip address off, so that this interfaces ip network will not be ripped out the ethernet port of the main router.
HQ:remote>set ip 0.0.0.0Sets the ip address for ip unnumbered in the user profile "remote".
HQ:remote>set ip netmask 0.0.0.0 Sets the ip netmask to all zeros for ip unnumbered.
HQ:remote>set ip routing onTurns ip routing on in the user profile "remote".
HQ:remote>set ip framing noneSets the ip framing to ipcp. This is necessary because it is required to negotiate ipcp for routing ip using ppp.
HQ:remote>set timeout 120Sets the idle timeout parameter to 120 seconds. If there is no interesting traffic to be forwarded across the ISDN connection for 120 seconds then the call will be disconnected.
HQ:remote>set 1 number 14085224567
HQ:remote>set 2 number 14085224567Sets the phone numbers in the user profile "remote" that are used to dial out to the remote router. In this case, the remote router has the same phone number for both b channels, so the same number is set in link 1 and link 2. Link 2 is for bandwidth on demand. It will not automatically connect if link 1 isn't already connected. Link 2's number is NOT used for a secondary dial number, it is for bandwidth on demand only.
HQ:remote>set ppp secret host (prompts for chap password)Sets the chap secret that the main router is expecting the remote router's magic number to send when the main router challenges the remote router to authenticate.
Enter Password: docPrompted to enter password/secret. "doc" is enter as the chap secret.
ReEnter Password: docPrompted to reenter password/secret.
HQ:remote>set ppp authentication outgoing chap Sets the ppp authentication on outbound calls to chap. This setting will force bi-directional authentication via chap on the outgoing call basis. When the main router calls the remote router, the main router will force the remote router to authenticate with it via chap.



Remote Site router

>set systemname remoteSets the system name of the remote router. This system name "remote" will have to match the user profile in the main site router for authentication purposes. The system name is sent to the far end router as the userid in ppp authentication.
remote>set ppp secret client (prompts for chap password)Sets the chap secret that will be used to send the chap magic number to the main router when the main router challenges the remote router.
Enter Password: docPrompted to enter the password/secret. "doc" is entered as the chap secret.
ReEnter Password: docPrompted to reenter password/secret.
remote>set encapsulation pppSets the encapsulation for the user profile default template to ppp.
remote>set ppp authentication incoming chapSets the ppp authentication for incoming calls to be forced to authenticate via chap.
remote>cd lanChanges to the LAN profile.
remote:LAN>set bridging offTurns bridging off in the LAN profile.
remote:LAN>set ip routing on
remote:LAN>set ip 198.52.211.254Assigns the ip address to the LAN Profile in the network of the Ethernet segment to which the router is attached.
remote:LAN>set subnet 255.255.255.0Sets the ip netmask for the LAN profile.
remote>set user HQCreates the user profile "HQ". Changes to the user profile "HQ". This user profile name has to match the system name of the main site router. The system name is received from the far end as the userid during ppp authentication.
remote:HQ>set bridging offTurns bridging off in the user profile "HQ".
remote:HQ>set ip route destination 0.0.0.0/0 gateway 198.52.110.254Sets static ip route that sends any traffic destined for an unknown address to the ip address of the LAN profile of the main site router.
remote:HQ>set ip propagate offTurns ip propagation of the user profile "HQ"s ip address off, so that this interfaces ip network will not be ripped out the ethernet port of the remote router.
remote:HQ>set ip 0.0.0.0Sets the ip address for ip unnumbered in the user profile "HQ".
remote:HQ>set ip netmask 0.0.0.0Sets the ip netmask to all zeros for ip unnumbered.
remote:HQ>set ip routing on Turns ip routing on in the user profile "HQ".
remote:HQ>set ip framing noneSets the ip framing to ipcp. This is necessary because it is required to negotiate ipcp for routing ip using ppp.
remote:HQ>set timeout 120Sets the idle timeout parameter to 120 seconds. If there is no interesting traffic to be forwarded across the ISDN connection for 120 seconds then the call will be disconnected.
remote:HQ>set 1 number 14085221234
remote:HQ>set 2 number 14085221234Sets the phone numbers in the user profile "HQ" that are used to dial out to the main router. In this case, the main router has the same phone number for both b channels, so the same number is set in link 1 and link 2. Link 2 is for bandwidth on demand. It will not automatically connect if link 1 isn't already connected. Link 2's number is NOT used for a secondary dial number, it is for bandwidth on demand only.
remote:HQ>set ppp secret host (prompts for chap password)Sets the chap secret that will be used to send the chap magic number to the remote router when the remote router challenges the main router.
Enter Password: happyPrompted to enter the password/secret. "happy" is entered as the chap secret.
ReEnter Password: happyPrompted to reenter the password/secret to ensure consistency.
remote:HQ>set ppp authentication outgoing chapSets the ppp authentication on outbound calls to chap. This setting will force bi-directional authentication via chap on the outgoing call basis. When the remote router calls the main router, the remote router will force the main router to authenticate with it via chap.