question-reg dialer group command
hi, we would like to introduce u all to our problem. in cisco 3660 router when the dialer-group1 command is specified with out dialer-list 1 protocol ip permit, the host pc is able to ping to the bri 3/0 interface ip address ( 192.168.150.1). is it possible to apply an access list without the dialer-list 1 list access-list number using dialer -group command. we r mailing the config of cisco 3660 as a text doc. expecting ur reply rgds, beno& aby config of cisco 3660 Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname router3660 ! enable secret 5 $1$ssEP$ksNLGEYFao6w3vfoQxObG0 ! username test password 0 cisco ! ! ! ! ip subnet-zero ! isdn switch-type basic-net3 isdn voice-call-failure 0 isdn tei-negotiation first-call ! ! ! ! interface Loopback0 ip address 192.168.150.1 255.255.255.0 no ip directed-broadcast ! interface FastEthernet0/0 ip address 192.168.1.1 255.255.255.0 no ip directed-broadcast duplex auto speed auto ! interface Serial1/0 no ip address no ip directed-broadcast no ip mroute-cache shutdown ! interface Serial1/1 no ip address no ip directed-broadcast shutdown clockrate 2015232 ! interface Serial1/2 no ip address no ip directed-broadcast shutdown ! interface Serial1/3 no ip address no ip directed-broadcast shutdown ! interface BRI3/0 ip unnumbered Loopback0 no ip directed-broadcast encapsulation ppp dialer-group 9 isdn switch-type basic-net3 peer default ip address pool ciscolab no cdp enable ppp authentication pap interface BRI3/1 no ip address no ip directed-broadcast shutdown isdn switch-type basic-net3 ! interface BRI3/2 no ip address no ip directed-broadcast shutdown isdn switch-type basic-net3 ! interface BRI3/3 ip address 192.168.3.1 255.255.255.0 no ip directed-broadcast encapsulation ppp shutdown dialer map ip 192.168.3.100 name router2610 1996 dialer-group 1 isdn switch-type basic-net3 ppp authentication chap ! ip local pool ciscolab 192.168.150.5 cache-size 100 ip classless no ip http server ! ! voice-port 2/0/0 ! voice-port 2/0/1 ! voice-port 2/1/0 ! voice-port 2/1/1 ! ! line con 0 logging synchronous transport input none line 129 144 line aux 0 line vty 0 4 login ! end beno& aby __ Do You Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions of Products. http://shopping.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: question-reg dialer group command
Yes, The dialer-list command specifies interesting traffic. Traffic that matches this will reset the idle timer for the dialer interface. The default idle timeout is 120 seconds. In your example below, the dialer interface will come up and work if the config is good, etc and after 120 seconds it will disconnect because there isn't a dialer-list entry to define what traffic is interesting and reset the idle timer. The dialer-list is used only to define interesting traffic to bring up a interface and keep it from idling out. You can permit all ip traffic as interesting or restrict by using an access-list. This access-list doesn't block traffic from going across the dialer interface once the interface is up -- to do that use ip access-group on the interface. I hope this clears things up. If not ask away. Erick --- BENO JACOB <[EMAIL PROTECTED]> wrote: > hi, > >we would like to introduce u all to our problem. > in cisco 3660 router when the dialer-group1 command > is specified with out dialer-list 1 protocol ip > permit, the host pc is able to ping to the bri 3/0 > interface ip address ( 192.168.150.1). is it > possible > to apply an access list without the dialer-list 1 > list access-list number using dialer -group command. __ Do You Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions of Products. http://shopping.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
