Cisco pix 506E as router (Working!) - with speedtest link :)

Hi,

I had some issues setting this up, but I got it working in the end, so I thought I would post up the config required to get it up and running for others.

ip address outside pppoe setroute
vpdn group IDNET request dialout pppoe
vpdn group IDNET <IDNET USERNAME>
vpdn group IDNET ppp authentication pap
vpdn username <IDNET USERNAME> password <IDNET PASSWORD>

here is my speedtest link

http://www.speedtest.net/result/1224097242.png

Edited by Snake (Mon 28-Mar-11 11:34:25)

Hi Snake

If you want to run IPv6 too here are the relevant bits of CPE configuration for a Cisco IOS router (in this case an 877 with IOS 15.0(1)M5 ADVIPSERVICES):


ipv6 unicast-routing
ipv6 cef

ipv6 dhcp pool POOL1
import dns-server

interface Dialer0
description External
ipv6 address autoconfig default
ipv6 enable
ipv6 dhcp client pd PREFIX1

interface Vlan1
description Internal
ipv6 address PREFIX1 ::1/64
ipv6 enable
ipv6 nd other-config-flag
ipv6 nd advertisement-interval
ipv6 nd ra lifetime 300
ipv6 nd ra interval 10
ipv6 dhcp server POOL1


This configuration does this:
1. Autoconfigures the p-t-p IP prefix on the external interface (the :FEED: /64 one)
2. Acts as a DHCPv6 client on the external interface to request delegation of a prefix (this returns the /48 prefix and also details of IPv6 nameservers)
3. Assigns an address in the format 2A02:390:xxxx::1/64 to the internal interface (this is calculated from the delegated /48 prefix) and starts advertising this to internal clients using standard IPv6 router advertisements
4. Enables a DHCPv6 server on the internal network, purely to inform clients of the delegated IPv6 nameserver addresses

You'll notice none of the prefixes are statically configured anywhere in this config - so it's truly generic. it's also possible to statically configure the internal prefix(es) if desired.

Worth knowing for troubleshooting: When I configured this I also had an ipv6 access-list configured on the dialer interface, and this blocked the dhcpv6 prefix delegation packets!

IPV6 for home is a bit of an over kill however i'm glad I got it working.

Would be nice, if IDNet, had a techie forum, to cover none standard routers/firewalls.

If you've got any problems just drop an email to our Support address and we'll do our best to try to help.

Well I have an issue now, it seems I am getting kicked off my pix (im having to use the netgear router to stay online).

The pix connects then drops off? no idea what is going on.

NOTE: the authentication should be CHAP and not PAP