Hi there,
i need help to configure a new 500mb connection with IPOE .
Situation:
KPN ISP with lighting edge 310. The KPN doc says they need two interfaces: GigabitEthernet0/0/0 for the WAN (KPN side) and GigabitEthernet0/0/1 for the customer side.
Cable from lightning edge -> GigabitEthernet0/0/0
GigabitEthernet0/0/1 -> Palo Alto 820
I tried to get it working with the config they(The ISP) reccomend but this resulted in the router boot looping en showing some kernel errors. as soon as I disconnected the GigabitEthernet0/0/1 this stopped.
I used the config below, any tips?
version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform hardware throughput crypto 50000
!
hostname NL-HQ-RO01
!
boot-start-marker
boot-end-marker
!
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication enable default enable
aaa authorization exec default local
!
aaa session-id common
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
!
ip name-server 194.xx.xx.18 194.xx.xx.34
no ip domain lookup
!
login on-success log
!
!
subscriber templating
multilink bundle-name authenticated
!
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
redundancy
mode none
!
!
vlan internal allocation policy ascending
!
!
policy-map custom-shaper-500000kbps
class class-default
shape average 480000000
!
!
interface GigabitEthernet0/0/0
description WAN-KPN-500Mbit
ip address 145.xx.xx.38 255.255.255.252
no ip redirects
negotiation auto
no cdp enable
service-policy output custom-shaper-500000kbps
!
interface GigabitEthernet0/0/1
description WAN-TO-FIREWALL
ip address 92.xx.xx.185 255.255.255.248
no ip redirects
ip verify unicast reverse-path
negotiation auto
no cdp enable
!
interface GigabitEthernet0/1/0
!
interface GigabitEthernet0/1/1
!
interface GigabitEthernet0/1/2
!
interface GigabitEthernet0/1/3
!
interface GigabitEthernet0/1/4
!
interface GigabitEthernet0/1/5
!
interface GigabitEthernet0/1/6
!
interface GigabitEthernet0/1/7
!
interface Vlan1
ip address 10.0.2.4 255.255.255.0
no ip redirects
no ip proxy-arp
!
no ip http server
no ip http secure-server
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 145.xx.xx.37
ip ssh version 2
!
!
ip access-list standard 23
10 permit 217.xx.xx.xx
20 remark Axxxxxxx
20 permit 84.xx.xx.0 0.0.0.255
30 permit 37.xx.xx.0 0.0.0.255
40 permit 172.xx.xx.0 0.0.0.255
50 permit 212.xx.xx.0 0.0.0.255
60 remark TTY security
60 permit 192.168.0.0 0.0.255.255
70 permit 172.16.0.0 0.0.255.255
80 permit 10.0.0.0 0.255.255.255
90 permit 92.xx.xx.xx 0.0.0.7
!
