I have recently configured an ISR 4321 to act as a PPPoE server.  I have moved the configuration wholesale over from my old 1941 router.  Clients now are able to authenticate and get a PPPoE address, but are unable to reach the gateway, or indeed, anywhere else.   It strikes me there is probably something missing, but I can't figure it out.   Here's the configuration I have:     bba-group pppoe global virtual-template 1 ! interface Loopback1 ip address 10.64.249.1 255.255.255.0 ! interface GigabitEthernet0/0/0.2009 description pppoe interface encapsulation dot1Q 2009 pppoe enable group global ! interface Virtual-Template1 description pppoe interface mtu 1492 ip unnumbered Loopback1 peer default ip address pool PPPnet keepalive 300 ppp authentication pap chap ppp ipcp dns 10.64.1.2 ! ip local pool PPPnet 10.64.249.101 10.64.249.199 !   ... View more

In our network we're settting up a large number of subinterfaces each with IPv4 & IPv6 DHCP, and with a distributed prefix pool for each IPv6 pool. I attempted to do this on a Cisco 1941/K9 running 15.1(4)M4 with the datak9 license enabled, and 200 IPv6 distributed prefix pools overloaded it to the point where it didn't route IPv6 at all. I need to get a more powerful router, but I'm not sure what Cisco has available that can handle this other than top-of-the-line core routers. Thanks for any suggestions ... View more

I've been experimenting with 6rd tunnels. Using a template I got from somewhere, I configured the following tunnel. interface Tunnel1001 no ip address no ip redirects ipv6 address 2001:1001:666F:726D::1/60 tunnel source GigabitEthernet0/1.1001 tunnel mode ipv6ip 6rd tunnel 6rd ipv4 prefix-len 22 tunnel 6rd prefix 2001:1001:666F:4000::/50 end This worked fine, and I was able to reach the ipv6 address of the tunnel endpoint from the far end. This was, however, just an experiment, with addresses more-or-less pulled out of thin air.  I've recently gotten an actual block of address, smaller than what I had, and have entered this instead: interface Tunnel1001 no ip address no ip redirects ipv6 address 2620:107:9044:11F1::1/64 tunnel source GigabitEthernet0/1.1001 tunnel mode ipv6ip 6rd tunnel 6rd ipv4 prefix-len 30 tunnel 6rd prefix 2620:107:9044:1180::/58 end I can't seem to reach the IPv6 address of the interface itself (or anything else), although the prefix delegation to the 6rd client is working. I've always been entirely mystified as to how the interface address in the previous (functional) config was derived, and why it had the mask it did. My gut instinct is that that's where the problem is, but I can't find anything to tell me if that's so.  If that is the issue, how do I need to set that address.  If not, what else am I doing wrong? Thanks for any help. ... View more

I have a (non-cisco) device which requires a separate vlan for every downstream port, and thus multiple vlans upstream.  I'd like to find a way to bridge these vlans either at the switch or router level, so as to connect them to a single logical interface (or subinterface) with a single IP address and associated DHCP range. Right now I've got a cisco 1941 router and a 3750G switch.  If I can't accomplish this on these, I can order other equipment, but I would like to know if this is possible, and if so, what I need to do. -Ben Brown ... View more

I have a 3750G switch (IOS 12.2).  I've got a server on a port off of this switch that sends out multicast traffic, but does not apply any QoS settings.  I'm trying to figure out how to add CoS or DSCP to all inbound traffic on the port (which is on a vlan operating at layer 2 only).  The documents I have found seem to assume that the inbound traffic already has some settings to trust. Thanks, -Ben Brown ... View more

I have recently gotten a cisco 1941 router running version 15.1(3)T, and am trying to configure the router as a PPPoE server for access via a vlan on one of the gigabit ethernet ports. I currently have a cisco 2620 router (version 11.3(2)XA4) with the following relevant configurations: vpdn enable vpdn multihop vpdn domain-delimiter @ suffix ! vpdn-group pppoe accept-dialin   protocol pppoe   virtual-template 1 ! interface Loopback1 description loopback for PPPoE ip address 163.176.94.193 255.255.255.192 ! interface FastEthernet0/0.301 description PPPoE interface encapsulation dot1Q 301 no ip route-cache no ip mroute-cache pppoe enable ! interface Virtual-Template1 description PPPoE interface mtu 1492 ip unnumbered Loopback1 ip mroute-cache peer default ip address pool PPPnet ppp authentication chap pap ppp ipcp dns 163.176.4.23 ! I am trying to duplicate this (all but IP addresses) on the new router, but there are some options that do not seem to exist in this particular software/hardware combination.  Specifically, vpdn-group pppoe accept-dialin   protocol pppoe does not accept "pppoe" as a protocol, only allowing l2tp.  I am hoping that someone can tell me what has changed, and what the proper configuration is. Thanks, Ben Brown ... View more

I've got a Cisco 7507 running 12.0(11)S3 and I'm having trouble getting it to serve a domain name. I've got a default domain name for the router, but the pppoe clients are not picking it up. Please let me know if there is a solution to this. Here's the relevant config: ! ip domain-name corp.netopia.com ip name-server 10.3.55.185 ! vpdn-group qapppoe accept-dialin protocol pppoe virtual-template 1 ! interface Virtual-Template1 description PPPoE interface mtu 1492 ip unnumbered Loopback1 ip mroute-cache peer default ip address pool 224net ppp authentication pap chap ppp ipcp dns 10.3.55.185 ! ip local pool 224net 10.3.224.2 10.3.224.200 ! ... View more

I've got a device which requires stacked vlans (q in q/second dot1q). I've got a cisco 7507 as my router, and a 3750G switch. I think I've figured out that I need to combine them at the router level, but I can't find any documentation about how to do this on the 7507. Is this possible, and what's the minimum IOS version I need (I'm running 12.1(5)T12 at the moment. Thanks for any help. Ben Brown ... View more

Due to the recent security alert from Windows I wish to make sure my systems are updated, but the cisco ACS appiance (cisco 1113) runs a specialized version of win2k with console access disabled. Is there any way get the windows critical security updates, and do I need to? ... View more