Adsl modem

guys,
for a small company(15 users, 3 servers) i am looking for a cisco adsl modem router with vpn(10 accounts) and firewall.
Can someonbe advice one? Second, concerning the configuration of the adsl and networkingart. Where can i find the information of how to configure that adviced modem router for my isp and network? I never worked with cisco material but i would love to. Am doing discovery with packettracer now.
thanks in advance

What is your DSL bandwidth?

Similar Messages

How to set up TimeCapsule (4th) to create own private (wired) network behind Airport Express (5th) that is set up to join existing wifi-network of fritz adsl modem/router?

I work in an office building with free Wifi to connect to the Internet. I want to be able to use this internetconnection, but at the same time I want to shield of my own wired network.
I've made the following configuration:
- fritz adsl modem / router
- Airport Extreme (5th gen) set up to join existing wireless network (green light, works)
- Lan-cable from lan-port AE to wan-port TC (4th gen)
- Lan-cable from TC to Mac
- Lan-cable from TC to Printer
When I set my TC (network-settings) in bridge-mode everything works fine, but my Mac and Printer get an IP-address from the fritz modem / router and are visible to others.
I tried to set TC in NAT/DHCP-mode, but then I get the error message that I should set a static IP-adress for TC. When I set TC in DHCP-mode, it looses connection to the AE. I'm not sure what to do now. Does anyone know how to set up my TC and create my own private network and still be able to get on the internet?

Hajenius wrote:
Is there a better alternative? I'd rather not want to reset my TC every day.
You are using free internet.. so there is a price to pay.. that is convenience and non-ideal network setup.
The better alternative is to pay for your own connection. Then you are completely free of the possibility of others in the bullding seeing your connection. (as long as you secure the wireless).
But I think you are probably over worrying about public wifi.. if it is setup right.. ask the building admins.. it should be setup so each user cannot see another users connection. This is typical for most wifi setup and simply means you can see internet connection but nobody else on the connection. ie other wireless users.
Having a router with NAT makes it then more secure again and allows clients on your own network to interact with each other. But you can setup wireless to the free wifi for every client.. (depending on how many IP you are allowed).. and run a secondary network without internet access. This is easy for desktop etc where you have a wireless and a wired connection but less convenient for mobile devices.. unless you use a cloud connection and each client can link and share via that.
Have I made the explanation worse??
Think of it this way.. if you had 3 laptops.. all 3 could connect to the internet from the building wifi.. but they cannot talk to each other or share resources in local office. You can put resources out in the cloud, that can be shared.. but that adds traffic and most free services are not fast.
Now you can also plug all three into Time Capsule by ethernet.. and share local resources. Files, printers backup etc. This network is not connected to the internet at all. Each laptop has internet via free wifi and local connection.
For devices like iphones that have no ethernet or other method.. you could use local wireless and public wireless.. but in turns.. still the only advantage is less issues with double NAT.. if that causes problems.. then this is an alternative.

Is a Happy Marriage Possible? New Airport Extreme & ADSL Modem/Router

Is a Happy Marriage Possible? New Airport Extreme & ADSL Modem/Router
1. I’m writing from a rural town in Southern Nepal, very close to India. I’m planning to create a new WI-FI network at a small monastery here. Ideally, we will have two parallel wireless networks: the first network produced by an ADSL router/modem and a second network produced by another router in “repeater” mode.
2. Earlier, someone suggested that, when I post a question, I should provide as many details as possible about the situation here. Forgive me if there is “too much information”. I have to make a trip to the US to buy new networking equipment, so I very much want to get this right. Once I return here, I’ll be pretty much stuck with whatever I get in the US.
3. The future routers will live next to each other in an office and could be linked by a cable (if this is the best route to go). We do not wish to “expand” the network (in the sense of making a larger WI-FI network), but rather wish to simply have two networks, hence one ADSL router/modem and one router with the “repeater” function (out-of-the-box without any jerry rigging). Both WI-FI signals need to travel approximately 100 (largely unobstructed) feet.
4. If my dreams come true, the second router would be an Apple Airport Extreme (AX). An Apple router would be ideal because my experience with Apple routers is happy: they are easy to set up, reliable, and secure. Moreover, we use Apple computers and iOS devices here (and the new AX has the “ac” thing which will be preferable as we replace old machines with new ones).
5. Yet, from reading posts and having my prior questions answered on this website, it may be that with an ADSL modem/router, all the ease and happiness of the Apple ecosystem is lost: while Apple routers seem to connect with each other easily, problems appear to arise when users try to inter-marry our non-Apple products with Apples.
6. Our current, super-crappy 2wire 2701hg-t (ADSL modem/router) covers the 100-foot distance without a problem when it is working and there is Ethernet flowing to us. Frequently, our connection is very bad, and I may be unfairly judging the 2wire 2701hg-t. But, based on user reviews on the America Amazon.com, the 2wire 2701hg-t is pretty terrible: first it is simply old and second, among other problems, it seems to have a poor quality power supply unit. I do observe that it frequently seems to be recycling from scratch as if it had turned off and restarted. In any case, we are replacing it since it may be about 4 or 5 years old.
7. In previous posts on this forum, “LaPastenague” responded to some of my earlier questions about AX and ADSL. Among other things, he pointed out that (1) line-attenuation may be contributing to our poor connection and (2) we must choose a modem/router that is suitable for “long lines.” I’ve looked at our current modem/router statistics page; however, there are no statistics for line-attenuation or noise. (As you will see below, my strategy is to get the “better” modem/router that is suitable for long lines.)
8. Concerning our ADSL service, these are the facts I’ve gleaned from looking at the current router’s configuration pages:
Connection Type: PPPoE
Currently, the router is configured to use WPA-PSK security.
Connection Speed: Incoming: 1024 kbps & Outgoing: 509 kbps
(The following information may be unimportant at this time.)
Broadband Link Diagnostics:
DSL Synchronization: UP
G.DMT Signal: UP
PVC Connection: UP
PPPoE Service: UP
PPP Authentication: UP
IP Connection: UP
DNS Communication: UP
9. The ISP (Nepal Telecom) doesn’t supply a modem/router; however, they do have a list of (at times ancient) hardware and hardware vendors:
http://www.ntc.net.np/internet/adsl/adsl_vendersConf.php
10. Concerning what equipment is available here, what I have observed is that generally the ADSL modem/routers for sale locally, and in the far-away capital Kathmandu, and in nearby India are often also available in the United States, but they are the cheaper, older models. I will have to buy the new equipment in the US this year. At a different institution nearby, they are using the TP-Link modem/router td-w89016 which they purchased locally, I believe.
11. Based in part on LaPastenague’s earlier advice, I want to buy the TP-LINK TD-W8980 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router (2.4GHz 300Mbps+5Ghz 300Mbps, IPv6 Compatible). This appears to be the most popular ADSL device on Amazon now.
Will this modem/router work EASILY with the Airport Extreme in the manner I’ve described? That is, connecting the two with a cable and creating two WI-FI networks.
12. Also, is it generally correct that the best way to connect them is with an Ethernet cable: https://discussions.apple.com/message/23759755#23759755
13. In fact, does connecting them with a cable help alleviate some of the problems that can occur between the Apple device and the ADSL modem/router?
14. If this will work, what “mode” will the AX device be in (again, in order to have two separate networks with separate passwords)? I have heard of the “repeater”, “roaming” , and “bridge” modes.
15. Are there two levels of passwords which need to be considered? Of course, there is the network and network passwords which we create here and which will be different. But, does the Apple also have to have the ISP password like the principle ADSL modem/router?
16. To set this up, what information do I need from the ISP (e.g., passwords, IPs…)?
I think there are a lot of good reasons to use an AX router. Of course, if it is just going to be very cumbersome then, we would be loosing one of the best parts of using Apple products. So, whoever feels knowledgeable enough to reply to this post, please be sincere if you think it is better to avoid the Apple. Apple can rest assured that I will buy other things from them!
In that case, I’d likely buy a second TP-Link device to create a second network:
TL-Wa801NP [AP Mode Multi-SSID Mode AP Client Mode Repeater Mode (WDS / Universal) AP+ Bridge mode (point-to-point / point to Multi-point)].
Thank you in advance. Long live Apple!
Message was edited by: Jess1911

I am not sure if there are different interfaces but my 2wire does an excellent job with line info.
I get into this from browser.. using main IP.. in my case 10.0.0.138/MDC
In your case it should be whatever the IP of the 2wire is, followed by /mdc
Give it a try.
As you can see it shows vendor and loads of info about the line.
I rate it the best domestic modem for line info.
A good modem actually albeit a lousy router.
MDC is the diagnostics and Management Console.
3. The future routers will live next to each other in an office and could be linked by a cable (if this is the best route to go). We do not wish to “expand” the network (in the sense of making a larger WI-FI network), but rather wish to simply have two networks, hence one ADSL router/modem and one router with the “repeater” function (out-of-the-box without any jerry rigging). Both WI-FI signals need to travel approximately 100 (largely unobstructed) feet.
You are not repeating.. you are simply setting up two routers which are interconnected, so one is dependent on the other.. ie one is your adsl modem router and that will take the main router function. Your second router is really not working as a router, but as wireless access point (and switch if you plug things in).
That is perfectly fine. You are not roaming in this case since both routers are running different wireless names and networks.. but they are actually using same IP range.. all devices are on the one IP network with two different wireless access points.
4. If my dreams come true, the second router would be an Apple Airport Extreme (AX).
Apple router is fine for this. Easy to configure out of the box.
5. Yet, from reading posts and having my prior questions answered on this website, it may be that with an ADSL modem/router, all the ease and happiness of the Apple ecosystem is lost: while Apple routers seem to connect with each other easily, problems appear to arise when users try to inter-marry our non-Apple products with Apples.
The problem arises when you try and interconnect using wireless extend or repeater.. you are not using wireless to extend, you are using ethernet. Wired has no issues.
11. Based in part on LaPastenague’s earlier advice, I want to buy the TP-LINK TD-W8980 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router (2.4GHz 300Mbps+5Ghz 300Mbps, IPv6 Compatible). This appears to be the most popular ADSL device on Amazon now.
Will this modem/router work EASILY with the Airport Extreme in the manner I’ve described? That is, connecting the two with a cable and creating two WI-FI networks.
It is a good choice.. It should be fine considering how poor your line is.. this modem is proving to have a couple of bugs.. it does not handle torrents well but I would suggest your system is not being used for that purpose. It has some port forwarding issues. Again you are probably not going to overload it.
12. Also, is it generally correct that the best way to connect them is with an Ethernet cable: https://discussions.apple.com/message/23759755#23759755
Absolutely best.. only decent method.
14. If this will work, what “mode” will the AX device be in (again, in order to have two separate networks with separate passwords)? I have heard of the “repeater”, “roaming” , and “bridge” modes.
Bridge. Although if it gives issues there is another method, although rather complex to setup.. not something to worry about now.
15. Are there two levels of passwords which need to be considered? Of course, there is the network and network passwords which we create here and which will be different. But, does the Apple also have to have the ISP password like the principle ADSL modem/router?
Only the adsl modem has the ISP authentication.. it is the box that does the link. The TC just piggy backs.
The passwords on the TC are for its Admin, wireless and disk access.
16. To set this up, what information do I need from the ISP (e.g., passwords, IPs…)?
For ADSL you must have the PPPoE authentication username and password.
So, whoever feels knowledgeable enough to reply to this post, please be sincere if you think it is better to avoid the Apple.
hmmm.. I am biased because I see the issues not all the good stories..
The latest airport and Time Capsule seem to have a few pretty severe bugs.. if they happen to hit you, they are extremely hard to fix if you are in the middle of Nepal. And Apple service centre is a long long way away.
I cannot answer your question from the point of view of a person on the ground in remote area. If the economics of the purchase works for you, great. Go for it.
In terms of wireless coverage.. the Asus AC models or Netgear R7000 kill the Apple. Sorry but it is just fact.
See reviews here.
http://www.smallnetbuilder.com/lanwan/router-charts/bar/113-5-ghz-dn-c
That is average.. if you look at the apple router in the worst location by changing the filters, it comes out worse again.
I cannot post the URL to our local forum here.. (apple doesn't allow it). But in testing with apple clients the asus still beat Apple router soundly.
Pure wireless range is not the only consideration.. but in a mixed environment and since the wireless on the 8980N is not too bad.. then buy Apple router for apple client devices makes good sense.
Maybe the older Gen5.. or two of them.. would do a better job.. with a bit more tested and known hardware.
One thing you do need to check.
Routers from every other brand allow you to select country. Any country from anywhere in the world. Apple routers do not.
If you buy an airport in North America it is coded to North America and offers just a few countries.. USA, Canada I suppose.. what else is North America??
You cannot change it to Nepal.
To get the one for Nepal you must buy the model that covers, South Asia I guess.. I am not sure which it is.
See what the license information is for wifi in Nepal as it might be very different to US and therefore illegal for you to run it in Nepal.
If only the whole world would just bow to America.. we could all follow the FCC regs..
http://en.wikipedia.org/wiki/List_of_WLAN_channels
This only applies to the Apple.. the TP-Link etc allows you to choose Nepal or correct country regulations for wifi.
Buying modems has one tricky bit.. that the actual adsl ATM channel is different in different parts of the world. No modem is usually impossible to setup but some can be difficult if it is pre-configured for US.. this is easy to overcome generally as you can download a firmware for another locality, so you can have local settings.

Switching between office network & home adsl modem

Small problem. Is it possible for my iBook to automatically detect whether I'm connected to either my office network or my home USB adsl modem? At present, I have to manually go into System Preferences/Network and switch from one to the other and then perform a re-start. Obviously a real pain! There must be an easier way.

Hi there
I don't think that the iBook will able to switch automatically between the two networks depending on where you are. The easiest solution, in my opinion, is to set up two locations in your network preferences, one for home and one for office. Once the two locations are set up then all you need to do to switch between them is to go to the apple menu in the finder and you should see a 'Location' submenu where you can select either the home or office setups without having to go into system preferences. Hope this helps.
William
iBook G3 700MHz Mac OS X (10.4.3)

MacBook Pro's wireless connectivity with ZTE 531 ADSL modem using BSNL broadband

I have tried to connect macbook pro with BSNL broadband internet connection using ZTE 531 ADSL modem. The connection using both wireless mode and ethernet mode failed repeatedly. Using the same modem, I am able to connect to internet through my Sony Viao running Windows 8 and HP630 running ubuntu (both in wireless mode and ethernet mode). I have tried the 'assist me->diagnostics' option in Macbook's network diagnostics. The first 4 indicators are green, but the remaining 2 (ISP and server) remains yellow. Repeated attempts were made by restarting the modem.
Surprisingly, the Macbook works fine with a newly purchased Dlink N150 ADSL2 modem. I have used the same WIFI settings ( as in the ZTE modem) in Dlink modem also. What could be the reason for this ?

Hello jayan_a_r,
From what you are talking about, it seems like you have done some good troubleshooting to attempt to sort it out. Try using a different Network Location as sometimes that could be an issue when trying to access the internet. Also make sure that modem is using the recommended settings for the wireless access.
Using network locations (Mac OS X v10.6 and later)
http://support.apple.com/en-us/HT5289
iOS and OS X: Recommended settings for Wi-Fi routers and access points
http://support.apple.com/en-us/HT4199
Regards,
-Norm G.

My G5 iMac only goes to sleep when ADSL modem is switched-off

My iMac will only put istslf to sleep if I switch-off the ADSL modem. I had the same problem with my G4 eMac. If I switch the modem off, the computer will quite happily nod-off. If I leave the modem switched-on and I return several hours later my computer will still be running. Can anyone make any suggestions on how to overcome this?

Hi Mike,
Do you mean a D-Link 302G?
I know that many of the Optus supplied D-Link modems actually have "Optus -customised" firmware installed, which even D-Link refuse to provide support for. Was the modem part of an Optus "package" or was it purchased separately?
If it is an Optus one you have problems, because D-Link won't provide support for the Optus firmware versions of their product, and at present Optus won't provide support for them either if they are connected to a Mac.
I have a suspicion that the firmware may actually be related to the problem, given that the same issue seems to have occured with two different computers. Optus aren't exactly renowned for their Mac support these days, I'm afraid, though there are suggestions that this may improve in the near future - see http://forums.whirlpool.net.au/forum-replies.cfm?t=531367
It would be interesting to see if a different modem behaved better. With the revised firmware the regular D-Link info probably doesn't apply. No chance of borrowing a different one?
(For what its worth Netspace are an Australian ISP who generally seem to provide good Mac support - they started off as a Mac focussed service called "MacInsanity" , in fact . I've been using them myself for many years.)
Cheers
Rod

Airport Express & Netgear DG834G 54Mbps Wireless ADSL Modem Router

Could you offer any advice as to whether an Airport Express could be used as a range extender for an existing Netgear DG834G 54Mbps Wireless ADSL Modem Router setup as I really like the idea of Airtunes and sharing a USB printer. I gather that it is possible to use an Airport Express to extend the range of an Airport Extreme basestation setup but have not been successful in finding any info regarding the Netgear.
Any info gratefully received !
G5 Dual 2.3Ghz Mac OS X (10.4.6)

mac-junkie, Welcome to the discussion area!
No it can not be used as a range extender.
But you can still use it for music and printer support. See KB 302153, AirPort Express: How to join an existing wireless network in client mode.

AEBSn + Alcatel Speed Touch Home ADSL modem

I just bought one of the new Airport Express 802.11n base stations, and I can't get it to connect to the internet through an Alcatel Speed Touch Home ADSL modem. This modem works flawlessly with my Airport Express router (and with previous routers) using PPPoE.
I've configured the new AEBSn exactly in the same way, I can access it wirelessly, but it seems to hang during the PPPoE negotiation - it shows "Connected" for a few seconds, but I've never been able to even ping any addresses outside my network. I'm stumped - has anyone been able to get this combo working?
Thanks!
MacBook Pro, Mac Mini Mac OS X (10.4.9)

Do you have DHCP Enabled on your ADSL modem ? Does it act like a router also ? If Yes, what is the default IP Address of your ADSL Modem ?

Airport Express worked with previous ADSL modem, not working with new one

hello all.
maybe the majority of you people won't be able to help me, since i am in Brazil.
this is the story:
for the last 4 years i was a subscriber of the Speedy ADSL provider (in conjunction with the Terra content provider). the Sppedy service is part of the Telefonica telephone company and uses the regular telephone infrastructure to provide the ADSL signal thru telephone lines.
approximately 2 years ago i bought an Airport Express and set it up with the ADSL modem that Speedy provided to me. configuration was a breeze and it worked flawlessly since then.
as of last thursday (april 7th) i became a subscriber of the Ajato ADSL provider. the Ajato company is part of the TVA (cable tv) company and uses the TVA cable tv infrastructure to provide the ADSL signal.
the problem is: when i connect the Cisco DPC3000 ADSL modem to my Macbook via ethernet cable, i can surf the internet with Ajato with no problems. but when i connect the modem to my Airport Express (even though i have reset AE in order to clear the previous Speedy/Terra configuration), i get no internet in my home wireless network.
i know you guys don't have Ajato there, of course. but i suppose some of you might have faced similar problems in similar cable ADSL environments.
this said, any kind of help or hint is greatly appreciated.
Message was edited by: Amaury Vargas: typos

Amaury Vargas wrote:
when i connect the Cisco DPC3000 ADSL modem to my Macbook via ethernet cable, i can surf the internet with Ajato with no problems.
First that Cisco DPC3000 is a cable modem, not a ADSL modem. You probably don't need the DSL configuration that you had before.
when i connect the modem to my Airport Express (even though i have reset AE in order to clear the previous Speedy/Terra configuration), i get no internet in my home wireless network.
How did you "reset" the AE? How is it configured now? You probably need a setting of "Connect Using:" "Ethernet", rather than the "PPPoE" setting you may have had before.
If everything else looks good, it's common to have to reset a modem when switching what device is connected to it. Try powering down the modem for a few minutes. If it has a reset switch, press that.

Cisco 877W router and external ADSL modem

Cisco 877W router and external ADSL modem
In order to support ADSL2+ on a pre ADSL2+ router and in preparation for a later migration to BT infinity I am trying to configure the Router using an external adsl2+ modem appropriately.
The original configuration had 3 ports configured as one (internal lan) vlan and bridge group together with one wireless sub-interface, the remaining port configured a second vlan and bridge group with a second wireless sub- interface. The Dialer was a member of the second bridge group. This way the second wireless interface and associated bridge group provided a kind of DMZ for outbound access.
The configuration I am attempting is similar the lan ports remain the same, but port 0 as a member of the vlan and bridge group (now a pppoe client) associated with one of the wireless sub interfaces as per above. The ATM interface is downed. This nearly works except that if the wireless subinterface on this bridge group is configured the dialer no longer dials giving a 'no dialer string' error. If I do not configure that wireless sub interface all works well.
If anyone is interested to look I would appreciate any comments. I enclose a sanitised config in which you will note the 'commented out' wireless subnet interface (in red).
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
hostname xxxxxxxxxxxxxxxxxxxxx
boot-start-marker
boot-end-marker
logging buffered 4096 warnings
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxx
aaa new-model
aaa group server radius sdm-vpn-server-group-2
aaa group server radius rad_eap
server 192.168.253.1 auth-port 1812 acct-port 1813
server 192.168.253.1 auth-port 1645 acct-port 1646
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_2 group sdm-vpn-server-group-2
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa authorization ipmobile default group rad_pmip
aaa authorization network sdm_vpn_group_ml_2 local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
clock timezone PCTime 0
clock summer-time PCTime date Mar 30 2003 1:00 Oct 26 2003 2:00
crypto pki trustpoint TP-self-signed-2834265337
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2834265337
revocation-check none
rsakeypair TP-self-signed-2834265337
crypto pki certificate chain TP-self-signed-2834265337
certificate self-signed 01 nvram:IOS-Self-Sig#2F.cer
dot11 syslog
dot11 ssid GuestAP
   vlan 101
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 113B162712001F4A2D2B25
dot11 ssid LanAP
   vlan 100
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa
   mbssid guest-mode
no ip source-route
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.252.1 192.168.252.8
ip dhcp excluded-address 192.168.252.15 192.168.252.254
ip dhcp pool sdm-pool1
   import all
   network 192.168.252.0 255.255.255.0
   domain-name XXX.Local
   dns-server xxx.xxx.xxx.xxx
   default-router 192.168.252.254
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
no ip bootp server
no ip domain lookup
ip domain name XXX.Local
ip name-server xxx.xxx.xxx.xxx
ip name-server xxx.xxx.xxx.xxx
ip reflexive-list timeout 120
vpdn enable
vpdn-group 1
request-dialin
protocol pppoe
username administrator privilege 15 secret 5 £££££££££££££££££££££
class-map type inspect match-any IN_to_OUT_CLASS
match protocol tcp
match protocol udp
match protocol icmp
class-map type inspect match-any OUT_to_IN_CLASS
match protocol https
match protocol smtp extended
class-map type inspect match-any DMZ_to_IN_CLASS
match protocol http
match protocol https
match protocol smtp extended
policy-map type inspect DMZ_to_IN_POL
class type inspect DMZ_to_IN_CLASS
inspect
class class-default
drop log
policy-map type inspect IN_to_OUT_POL
class type inspect IN_to_OUT_CLASS
inspect
class class-default
drop log
policy-map type inspect OUT_to_IN_POL
class type inspect OUT_to_IN_CLASS
inspect
class class-default
drop log
zone security INSIDE
zone security OUTSIDE
zone security DMZ
zone-pair security OUT_TO_IN source OUTSIDE destination INSIDE
service-policy type inspect OUT_to_IN_POL
zone-pair security IN_TO_OUT source INSIDE destination OUTSIDE
service-policy type inspect IN_to_OUT_POL
zone-pair security DMZ_TO_OUT source DMZ destination OUTSIDE
service-policy type inspect IN_to_OUT_POL
zone-pair security DMZ_TO_IN source DMZ destination INSIDE
service-policy type inspect DMZ_to_IN_POL
bridge irb
interface Loopback0
no ip address
interface Null0
no ip unreachables
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
interface FastEthernet0
description Outside Interface (PPPoE)
interface FastEthernet1
description Inside Interface
switchport access vlan 10
interface FastEthernet2
description Inside Interface
switchport access vlan 10
spanning-tree portfast
interface FastEthernet3
description Inside Interface
switchport access vlan 10
spanning-tree portfast
interface Dot11Radio0
no ip address
no ip route-cache cef
no ip route-cache
encryption vlan 100 mode ciphers aes-ccm tkip
encryption vlan 101 mode ciphers aes-ccm tkip
ssid GuestAP
ssid LanAP
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2437
station-role root
interface Dot11Radio0.100
description LanAP
encapsulation dot1Q 100
no ip route-cache
no cdp enable
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 spanning-disabled
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
!interface Dot11Radio0.101
! description GuestAP
! encapsulation dot1Q 101
! no ip route-cache
! no cdp enable
! bridge-group 1
! bridge-group 1 subscriber-loop-control
! bridge-group 1 spanning-disabled
! bridge-group 1 block-unknown-source
! no bridge-group 1 source-learning
! no bridge-group 1 unicast-flooding
interface Vlan1
description $ES_LAN$
no ip address
ip virtual-reassembly
pppoe enable group global
pppoe-client dial-pool-number 1
bridge-group 1
interface Vlan10
no ip address
ip virtual-reassembly
bridge-group 10
interface Dialer1
description $FW_OUTSIDE$
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1452
ip nat outside
ip virtual-reassembly
zone-member security OUTSIDE
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname XXXXXXX
ppp chap password 7 xxxxxxxxxxxxxxxxxxx
ppp pap sent-username xxxxxxxxxxxxxxxxxx password 7 xxxxxxxxxxxxxxxxxxxxx
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
interface Dialer0
no ip address
interface BVI10
description Inside Interface
ip address 192.168.253.254 255.255.255.0
ip access-group 101 in
ip helper-address 192.168.253.1
ip nat inside
ip virtual-reassembly
zone-member security INSIDE
interface BVI1
description DMZ Interface
ip address 192.168.252.254 255.255.255.0
ip nat inside
ip virtual-reassembly
zone-member security DMZ
ip local pool SDM_POOL_1 192.168.20.9 192.168.20.14
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
ip http access-class 1
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list Inside_Clients_NAT interface Dialer1 overload
ip nat inside source static 192.168.253.10 xxx.xxx.xxx.xxx
ip access-list extended DMZ_to_IN_POL
remark SDM_ACL Category=128
permit ip any any
ip access-list extended Inside_Clients_NAT
remark SDM_ACL Category=2
permit ip 192.168.253.0 0.0.0.255 any
logging 192.168.253.10
access-list 1 remark Auto generated by SDM Management Access feature
access-list 1 remark SDM_ACL Category=1
access-list 1 permit 192.168.253.0 0.0.0.255
access-list 100 remark VTY Access-class list
access-list 100 remark SDM_ACL Category=1
access-list 100 permit ip 192.168.253.0 0.0.0.255 any
access-list 100 deny   ip any any
access-list 101 remark Auto generated by SDM Management Access feature
access-list 101 remark SDM_ACL Category=1
access-list 101 remark Auto generated by SDM for NTP (123) xxx.xxx.xxx.xxx
access-list 101 permit udp host xxx.xxx.xxx.xxx eq ntp host 192.168.253.254 eq ntp
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq telnet
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq 22
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq www
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq 443
access-list 101 permit tcp 192.168.253.0 0.0.0.255 host 192.168.253.254 eq cmd
access-list 101 deny   tcp any host 192.168.253.254 eq telnet
access-list 101 deny   tcp any host 192.168.253.254 eq 22
access-list 101 deny   tcp any host 192.168.253.254 eq www
access-list 101 deny   tcp any host 192.168.253.254 eq 443
access-list 101 deny   tcp any host 192.168.253.254 eq cmd
access-list 101 deny   udp any host 192.168.253.254 eq snmp
access-list 101 permit ip any any
access-list 199 permit ip any host 10.1.1.1
dialer-list 1 protocol ip permit
no cdp run
radius-server attribute 32 include-in-access-req format %h
radius-server host 192.168.253.1 auth-port 1812 acct-port 1813 key 7 XXXXXXXXXXXXXXXXXX
radius-server host 192.168.253.1 auth-port 1645 acct-port 1646 key 7 XXXXXXXXXXXXXXXXXX
radius-server vsa send accounting
control-plane
bridge 1 protocol ieee
bridge 1 route ip
bridge 10 protocol ieee
bridge 10 route ip
banner login C Border Router
line con 0
no modem enable
transport output telnet
line aux 0
transport output telnet
line vty 0 4
access-class 100 in
privilege level 15
length 0
transport input telnet ssh
scheduler max-task-time 5000
scheduler interval 500
ntp server xxx.xxx.xxx.xxx source Dialer0 prefer
ntp server xxx.xxx.xxx.xxx source Dialer0 prefer
sntp server xxx.xxx.xxx.xxx
end

Hi Jody,
Apologies delay in replying. I have done the following:
Made two of the FE ports vlan1,BVI1 (for LAN traffic)
Left one port as VLAN10 as the pppoe client conected to the externalmodem
Made the last port VLAN10 as well and gave it an IP addess as for a DMZ client.
I have DHCP configured to serve the DMZ addresses.
This all works for LAN clients and also works for a client attachedto that physical DMZ port.
When I added a dot11radio sub interface into VLAN 10 the wireless client did not get an IP lease. Everything else continued to work.
I had never thought about this before, but if a dot11radio interface is on the same vlan (but not being part ofa bridge group) why are DHCP broadcasts not propogating to all the vlan members as I would have expected. I recognise that this isa limit in my understanding.
If I then made VLAN10 a member of a new Bridge Group, I lost WAN connectivity as per original posting.
I cannot add another VLAN due to the 2 vlan limit in this image.
Finally regarding your comment about giving it what it wants, what exactly did you have in mind. The dialer already has a dial string parameters configured.
Think I am about to give upon this.
Regards,

What is the best ADSL modem to use with AEBS in the UK?

I'm currently using the Netgear DG834G with it's wireless functionality switched off, and my AEBS (gigabit) is set up as a bridge.
When I've tried to resolve various problems such as getting iChat AV working I've got the impression that I might have fewer problems if I let the AEBS do the routing, and simply had an ADSL modem connected to it (rather than a modem/router combo).
What do other people use in the UK, and what success do you have with Skype, iChat etc?
Is there a better way to configure my DG834G so it only acts as a modem? I don't have much technical knowledge in this area, though I have been through the Netgear control panel and sorted out fixed IP addresses.
In some respects, ie. internet browsing, streaming movie trailers on the Apple TV, OS X software updates, all perform perfectly. From that point of view, it seems that there cannot be too much wrong?
A couple of 'by the ways': I also have an Airport Express configured in bridge mode to use with my iPhone and 802.11g MacBook, so that I can keep the Airport Extreme (gigabit) set to work exclusively on 802.11n for maximum performance to the Apple TV. The Extreme and Express are using different frequencies.
I've just ordered the new Mac Pro, which has two Ethernet ports. Is there a way I can put these to good use, for example having a standard network separate from a gigabit network using jumbo frames? I'm sure this is too much to put in one thread, but in a way it's probably best to cover everything together!

I use the Linksys ADSL2MUE - which I managed to buy for £12.
I configured it in bridged mode - leaving the Apple Extreme do all the firewall and DHCP stuff.
It's not pretty but does the job.

ADSL Modem connection in the UK + Airport Express

I've searched throughout these discussion boards, and have found a lot of people with questions about ADSL modems inconjunction with the Airport Express. And have come to be quite confused about the best solution.
My network plan at this stage is for:
(Internet) -> ADSL Modem ->Airport Express -> iMac & Mac Mini (both wireless).
Most UK ISPs obviously offer bundles that include USB ADSL Modems, quite often now they include wireless functionality as well.
What i want to know is, what ADSL Modem can i buy, that will work with standard uk isps (haven't decided on one yet), and allow me to have the Airport Express distribute IP addresses, and provide AirTunes access?
Essentially, i want to use the Airport Express as much as possible, and for the ADSL modem to do no routing if possible, and to just provide the access to the internet.
What is the most plain / cheap adsl modem i can get for this task?
Thankyou for listening! and for any help you can give me!

Mischa,
Welcome to discussions.
I can only endorse the other posts regarding the use of an Ethernet DSL modem, rather than a USB one. If you're thinking of a new ISP, you could always ask them for a free Ethernet / Wireless DSL modem, if they try to fob you off with a USB one, insist on Ethernet. Some ISPs do have them, especially if explain you're wanting to connect more than one "family computer" to the internet.
I have the Netgear DG834G mentioned earlier. It's top dog. I also have an AE. Not what you'd want to hear, I put the Netgear above the AE. The DG834G also has wireless, so it's useful for operating in addition to the AE, I use an Ethernet cable between them and have the AE extend my wireless network.
A top link for help choosing what you want is:
http://www.broadbandbuyer.co.uk/
There's a network wizard on the left, answer the questions and it'll give you an idea of what is available and the UK prices. Or click on the type of modem you want to get there a lot quicker (ie. ADSL Modems and then ADSL Ethernet Modems). Buy from anywhere you like, this is just a guide.
I'm still a bit concerned that you want to leave the DHCP, NAT and firewall to the AE. Sure it's easy to do with Airport Admin Utility, but almost any ADSL Modem is configurable with a web browser. It's easy once you understand the concepts, which you will have to do to use it even with AE.

Can UGEN driver be used for my USB wireless adpter or USB ADSL modem???

I want to use the following equipment on solaris
I-connect WPC-11U IEEE802.11b Wireless USB 1.1 Adapter
http://www.i-connect.com.sg/downloads/downloads_usb.shtml
or
Prolink Hurricane 7000 ADSL modem
http://www.fida.com/download-dc.htm
to enable me to use the dialup ADSL connection to my ISP.
Would the following work??
http://blogs.sun.com/psum/entry/solaris_and_usb_communication_device
Any help would be much appreciated.
Message was edited by:
ngsteve

have you searched the forums? There are a bunch of threads on the ath9k module not working correctly with the latest kernel.
That's why it works in the live cd environment but stops working once you update and login to your actual installation.

Time Capsule via ADSL modem: settings

In italy there's not a cable ADSL, so we need an ADSL modem (adapter) in order to connect to the web. So now I've just purchased a new Time Capsule and I'm in order to set the connection. I would set the device this way:
1)Set bridge mode the modem to avoid it could generate NAT conflicts via DHCP(if I'm not wrong bridge mode excludes the DHCP function in the internal server of the modem)
2)Let time machine to manage the DHCP
Any hints?
Thanks

Hello kidclaude. Welcome to the Apple Discussions!
1)Set bridge mode the modem to avoid it could generate NAT conflicts via DHCP(if I'm not wrong bridge mode excludes the DHCP function in the internal server of the modem)
That is correct, reconfiguring the modem as a bridge should disable both NAT & DHCP.
2)Let time machine to manage the DHCP
By default, both NAT & DHCP are enabled on the Time Capsule (TC).

Lenovo G550 and Sagem Fast 800 ADSL modem - limits DL speed to approx. 500kbit/s

Hi,
I bought Lenovo G550 on Tuesday and since then I've got a strange issue with my Internet connection. Until Tuesday I was using Sagem Fast 800 ADSL modem from my ISP on Toshiba Satellite A100-712 notebook since June 2008 with 1Mbit connection and everything was fine - DL speed was 128KB/s (1Mbit/s) as it should, but now on Lenovo the max DL speed I get is ~500kbit/s (60KB/s) and I can't overcome it..
I've done the following so far:
* I have tried on preinstalled Windows Vista - max DL speed I get is ~500kbit/s
* I have installed Windows XP Professional SP3, Sagem drivers installed properly, no unknown devices in device manager - max DL speed I get is ~500kbit/s
* I have installed Windows 7 Professional, Sagem drivers installed properly, no unknown devices in device manager - max DL speed I get is ~500kbit/s
* I've checked download speed on "real" downloads and DSL testing portals (dsl.cz, speedtest.pl, speedtest2.com) - max DL speed I get is ~500kbit/s
* I have turned off energy saving on USB and ADSL modems on all 3 Windows OS mentioned, restarted the PC - max DL speed I get is ~500kbit/s
* I have plugged and checked the download speed on all 3 USB ports - max DL speed I get is ~500kbit/s
* I have installed cFosSpeed - max DL speed I get is ~500kbit/s
* I've called the ISP, they checked the connection (1Mbit shown up in their tests), checked if there are any problems with their infrastructure (nothing was wrong), finally reset my port and asked to check my DL speed - max DL speed I get is ~500kbit/s
* the ISP has sent an onsite technician, guy brought his own HP notebook and Sagem Fast 800 modem (just like mine) to check my connection - on his HP laptop both mine and his modems got 1Mbit/s DL speed, and when I tried both modems with my Lenovo G550, guess what -max DL speed I got was ~500kbit/s on both of them (so it's obvious that it's not modem, line or ISP's fault)
It seems that this issue is notebook related. I'm running out of ideas, the last thing I'm going to try today is to run Ubuntu LiveCD and check my DL speed then, but to be honest I don't expect it to change anything.
Could anyone possibly help me? It really sucks to pay for 1Mbit and have real download speed less than half of it.
Regards,
PW

Adsl modem

Similar Messages

Maybe you are looking for