Hallo neues Forum,
hat jemand von euch schon das T-Home IPTV über VDSL auf einem Cisco 1841 zum laufen bekommen?
hier mal der relevante teil meiner config:
version 12.4
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname router
!
boot-start-marker
boot system flash:c1841-adventerprisek9-mz.124-22.T.bin
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging count
logging message-counter syslog
logging buffered 65535
no logging rate-limit
logging console errors
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login vpngoup local
aaa authorization exec default local
aaa authorization network vpngroup local
aaa accounting update periodic 5
!
!
aaa session-id common
clock timezone GMT+1 1
clock summer-time GMT+1:00 recurring last Sun Mar 2:00 last Sun Oct 3:00
clock calendar-valid
errdisable recovery cause bpduguard
errdisable recovery interval 120
dot11 syslog
no ip source-route
!
!
ip nbar port-map custom-02 udp 3283 5900
ip nbar port-map custom-01 tcp 3283 5900
no ip dhcp use vrf connected
!
!
!
ip cef
no ip bootp server
ip name-server 217.237.150.51
ip name-server 217.237.148.22
ip name-server 194.77.8.1
ip name-server 194.231.55.240
ip multicast-routing
ip inspect max-incomplete high 1000
ip inspect max-incomplete low 1000
ip inspect one-minute high 1000
ip inspect one-minute low 1000
ip inspect tcp idle-time 1800
ip inspect name firewall icmp audit-trail off router-traffic timeout 300
ip inspect name firewall tcp audit-trail off router-traffic timeout 3600
ip inspect name firewall udp audit-trail off router-traffic timeout 15
ip inspect name firewall fragment maximum 256 timeout 10
ip igmp snooping vlan 1 mrouter learn cgmp
ip igmp snooping vlan 1 immediate-leave
ip igmp snooping vlan 2 mrouter learn cgmp
ip igmp snooping vlan 2 immediate-leave
no ipv6 cef
!
multilink bundle-name authenticated
!
password encryption aes
!
!
!
!
!
!
spanning-tree portfast bpduguard
spanning-tree uplinkfast
spanning-tree backbonefast
spanning-tree vlan 1 priority 8192
spanning-tree vlan 2 priority 8192
vtp mode client
vtp version 2
username hannebambel privilege 15 password 0 hubbahubba
username labbeduddel privilege 7 password 0 hebbeldepp
!
!
!
ip tcp ecn
ip tcp selective-ack
ip tcp timestamp
ip tcp window-size 511104
ip tcp synwait-time 10
ip ssh source-interface FastEthernet0/0
!
class-map match-any transitional
match protocol citrix
match protocol ssh
match protocol telnet
match protocol xwindows
class-map match-any bulk
match protocol ftp
match protocol irc
match protocol nntp
match protocol pop3
match protocol printer
match protocol secure-ftp
match protocol secure-irc
match protocol secure-nntp
match protocol secure-pop3
match protocol smtp
match protocol tftp
match protocol http
class-map match-any signalling
match protocol h323
match protocol rtcp
class-map match-any management
match protocol dhcp
match protocol dns
match protocol imap
match protocol kerberos
match protocol ldap
match protocol secure-imap
match protocol secure-ldap
match protocol snmp
match protocol socks
match protocol syslog
match protocol custom-01
match protocol custom-02
class-map match-any scave
match protocol fasttrack
match protocol gnutella
match protocol edonkey
match protocol bittorrent
match protocol kazaa2
match protocol winmx
class-map match-any video
match protocol rtp video
class-map match-any audio
match protocol rtp audio
class-map match-any streaming
match protocol rtsp
match protocol cuseeme
match protocol netshow
match protocol vdolive
class-map match-any routing
match protocol bgp
match protocol egp
match protocol eigrp
match protocol ospf
match protocol rip
match protocol rsvp
!
!
policy-map shaping
class management
set dscp cs2
priority percent 10
class transitional
set dscp af21
priority percent 10
class signalling
set dscp cs3
bandwidth remaining percent 10
class routing
set dscp cs6
priority percent 5
class audio
set dscp ef
priority percent 5
class video
set dscp cs5
priority percent 10
class bulk
set dscp cs4
priority percent 10
class scave
set dscp af22
bandwidth remaining percent 10
class streaming
set dscp cs1
bandwidth remaining percent 10
class class-default
fair-queue
random-detect
!
buffers small permanent 512
buffers small max-free 1024
buffers small min-free 128
buffers middle permanent 256
buffers middle max-free 512
buffers middle min-free 128
buffers big permanent 1024
buffers big max-free 2048
buffers big min-free 1024
buffers verybig permanent 64
buffers verybig max-free 256
buffers verybig min-free 32
buffers large permanent 32
buffers large max-free 64
buffers large min-free 16
buffers huge permanent 32
buffers huge max-free 64
buffers huge min-free 16
bridge irb
!
!
!
interface Null0
no ip unreachables
!
interface FastEthernet0/0
description switch uplink
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip flow egress
ip pim sparse-mode
ip virtual-reassembly max-reassemblies 512
ip cgmp
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/0.1
description default vlan 1
encapsulation dot1Q 1 native
ip address 192.168.1.1 255.255.255.0
ip access-group 103 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip flow egress
ip pim sparse-mode
ip nat inside
ip virtual-reassembly max-reassemblies 512
ip igmp version 3
ip cgmp proxy
!
interface FastEthernet0/0.2
description dmz vlan 2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip access-group 104 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip flow egress
ip pim sparse-mode
ip nat inside
ip virtual-reassembly max-reassemblies 512
ip igmp version 3
ip cgmp proxy
!
interface FastEthernet0/1
description modem uplink
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip flow egress
ip pim sparse-mode
ip virtual-reassembly max-reassemblies 512
ip cgmp
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1.7
description vdsl vlan
bandwidth 100000
encapsulation dot1Q 7
ip flow ingress
ip flow egress
ip virtual-reassembly
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface Dialer1
description t-online
mtu 1492
bandwidth 51384
bandwidth receive 10044
ip address negotiated
ip access-group 105 in
ip verify unicast reverse-path
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip flow ingress
ip flow egress
ip pim sparse-mode
ip nat outside
ip inspect firewall out
ip virtual-reassembly max-reassemblies 512
encapsulation ppp
ip tcp adjust-mss 1452
ip igmp version 3
ip igmp query-interval 15
ip igmp unidirectional-link
dialer pool 1
dialer idle-timeout 0
dialer persistent
dialer-group 1
snmp trap ip verify drop-rate
no cdp enable
ppp authentication pap callin
ppp pap sent-username keineahnung@t-online.de password 0 weissichnichtmehr
crypto map vpnmap
service-policy output shaping
!
ip forward-protocol spanning-tree
ip forward-protocol turbo-flood
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
ip pim rp-address 217.0.119.221
ip pim send-rp-announce Dialer1 scope 10
ip pim send-rp-discovery Dialer1 scope 10
ip nat inside source route-map natpool interface Dialer1 overload
!
logging history debugging
access-list 100 remark nat overload
access-list 100 deny ip 192.168.1.0 0.0.0.255 10.0.1.0 0.0.0.255
access-list 100 deny ip 192.168.2.0 0.0.0.255 10.0.1.0 0.0.0.255
access-list 100 permit ip any any
access-list 101 remark vpn split tunneling
access-list 101 permit ip 192.168.1.0 0.0.0.255 10.0.1.0 0.0.0.255
access-list 103 remark Vlan1 anti-spoofing
access-list 103 deny ip 192.168.2.0 0.0.0.255 any
access-list 103 deny ip 127.0.0.0 0.255.255.255 any
access-list 103 permit ip any any
access-list 104 remark Vlan2 ant-spoofing
access-list 104 deny ip 192.168.1.0 0.0.0.255 any
access-list 104 deny ip 127.0.0.0 0.255.255.255 any
access-list 104 permit ip any any
access-list 105 remark internet access
access-list 105 permit udp host 217.237.150.51 eq domain any
access-list 105 permit udp host 217.237.148.22 eq domain any
access-list 105 permit udp host 194.77.8.1 eq domain any
access-list 105 permit udp host 194.231.55.240 eq domain any
access-list 105 permit udp host 192.53.103.108 eq ntp any eq ntp
access-list 105 permit udp host 192.53.103.104 eq ntp any eq ntp
access-list 105 permit udp any any eq isakmp
access-list 105 permit udp any any eq non500-isakmp
access-list 105 permit gre any any
access-list 105 permit esp any any
access-list 105 permit igmp any any
access-list 105 permit eigrp any any
access-list 105 permit pim any any
access-list 105 permit tcp any any eq 9090
access-list 105 permit icmp any any unreachable
access-list 105 permit icmp any any echo-reply
access-list 105 permit icmp any any packet-too-big
access-list 105 permit icmp any any time-exceeded
access-list 105 permit icmp any any traceroute
access-list 105 permit icmp any any administratively-prohibited
access-list 105 permit icmp any any echo
access-list compiled
dialer-list 1 protocol ip permit
!
!
!
!
route-map natpool permit 1
match ip address 100
