Hello Everyone.
I have a Cisco 867VAE-K9 VDSL router with what looks like a good VDSD configuration for NZ.
The PPPoe connections establishes ok but I can only access some NZ sites, no International sites.
The connection stops altogether after about five minutes.
Here's the config.
Mike
!
! Last configuration change at 15:23:26 NZDT Wed Nov 12 2014 by sww
version 15.3
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname Vensa-867
!
boot-start-marker
boot-end-marker
!
!
enable secret
!
no aaa new-model
wan mode dsl
clock timezone NZST 12 0
clock summer-time NZDT recurring 1 Sun Oct 2:00 3 Sun Mar 3:00
!
!
!
ip inspect name adslfw ftp
ip inspect name adslfw http java-list 50 timeout 45
ip inspect name adslfw smtp
ip inspect name adslfw realaudio
ip inspect name adslfw h323
ip inspect name adslfw tcp
ip inspect name adslfw udp
ip domain name Vensa.local
ip host e 192.168.0.254
ip name-server 122.56.237.1
ip name-server 210.55.111.1
ip name-server 8.8.8.8
ip cef
no ipv6 cef
!
!
!
username v
username s
!
!
controller VDSL 0
!
!
!
interface Loopback0
ip address 10.10.10.1 255.255.255.255
ip nat inside
ip virtual-reassembly in
!
interface ATM0
no ip address
no ip route-cache
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
ip mtu 1492
!
interface Ethernet0.10
encapsulation dot1Q 10
pppoe-client dial-pool-number 10
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface GigabitEthernet0
no ip address
!
interface GigabitEthernet1
no ip address
shutdown
duplex auto
speed auto
!
interface Vlan1
ip address 192.168.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
no autostate
!
interface Dialer10
ip address negotiated
ip access-group cbac-in in
ip inspect adslfw out
ip nat outside
no ip virtual-reassembly in
encapsulation ppp
no ip route-cache
dialer pool 10
dialer-group 1
ppp pap sent-username user@xtrabb.co.nz password 7 0216054818
no cdp enable
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source static tcp 10.10.10.1 22 interface Dialer10 22
ip nat inside source static tcp 10.10.10.1 23 interface Dialer10 23
ip nat inside source static tcp 192.168.0.2 3389 interface Dialer10 3389
ip nat inside source static tcp 192.168.0.2 987 interface Dialer10 987
ip nat inside source static tcp 192.168.0.173 30300 interface Dialer10 30300
ip nat inside source static tcp 192.168.0.157 443 interface Dialer10 20000
ip nat inside source route-map nonat4vpn interface Dialer10 overload
ip route 0.0.0.0 0.0.0.0 Dialer10
!
ip access-list extended cbac-in
permit icmp any any echo-reply
permit icmp any 192.168.0.0 0.0.0.255 unreachable
permit icmp any 192.168.0.0 0.0.0.255 administratively-prohibited
permit icmp any 192.168.0.0 0.0.0.255 packet-too-big
permit icmp any 192.168.0.0 0.0.0.255 echo
permit icmp any 192.168.0.0 0.0.0.255 traceroute
permit icmp any 192.168.0.0 0.0.0.255 time-exceeded
permit tcp any any eq telnet
permit tcp any any eq 22
permit tcp any any eq 987
permit tcp any any eq 443
permit tcp any any eq 3389
permit tcp any any eq 30300
permit tcp any any eq 20000
permit icmp any any echo
permit udp any any eq isakmp
permit esp any any
permit icmp any host 10.10.10.1 echo
permit udp any any
deny ip host 255.255.255.255 any
deny ip any any
ip access-list extended natlist
deny ip host 255.255.255.255 any
permit ip 192.168.0.0 0.0.0.255 any
ip access-list extended outin-mgmt
permit ip host 122.58.183.156 any
permit ip host 203.97.206.134 any
permit ip 202.36.45.0 0.0.0.255 any
permit ip 192.168.0.0 0.0.0.255 any
!
dialer-list 1 protocol ip permit
!
route-map nonat4vpn permit 10
match ip address natlist
!
access-list 50 permit any
banner login ^CC
##########
##########^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class outin-mgmt in
login local
transport input all
!
scheduler allocate 60000 1000
ntp server 203.152.100.32 prefer
!
end
