Technical data

IP, IPX, and AppleTalk Dial-Up Environments 5-15
Dial-In Configuration Examples
Dial-In Configuration Examples
The configuration examples in this section show comprehensive configurations that enable remote
clients to dial in to networks and access resources. The configurations in this section borrow
information from the previous chapters and present each component (such as modem configuration
and security) as a separate piece. Examples in this section include the following:
• IP Dial-In Example
• IPX Dial-in Example
• ARA Example
• Combined IP–PPP, IPX–PPP, and ARA Example
IP Dial-In Example
The following example configures an access server to enable a PC running a Windows 95 PPP
application to dial in to an IP network. It also enables the Windows 95 client to access AppleTalk
resources. The example starts with the modem configuration, then moves on to the security
configuration, then the protocol configuration. This example assumes that you are using a local
username database that is set up inside the access server for authentication.
Modem and Line Configuration
The following sample configures lines 1 through 16 on a Cisco 2511 access server for modem
control. It assumes you have a Telebit T3000 modem or one that can be automatically initialized
using the Telebit_3000 initialization string.
line 1 16
speed 115200
flowcontrol hardware
modem inout
modem autoconfigure Telebit_t3000
!
autoselect during-login
autoselect ppp
!
interface group-async 0
group-range 1 16
Security Configuration
The following sample configuration uses a local authentication database inside the access server. It
prevents unauthenticated login to all vty lines. It assumes dial-in users rely on autoselect and do not
log in to the EXEC on the access server, but have immediate access to the network when their
connection session begins. No security is configured on the console port, which is physically secure.
This configuration uses defaults in most cases, except that it uses CHAP authentication for PPP
instead of the default of PAP (because CHAP is more secure). It uses the username command to
populate the local authentication database. The password that appears has been automatically
encrypted automatically.
aaa new-model
aaa authentication login default local
aaa authentication ppp default local
enable secret 5 $1$h7dd$VTNs4.BAfQMUU0Lrvw6570
enable password cloudcity
!