allow to only one IP address to use dialer

allow to only one IP address to use dialer

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
allow to only one IP address to use dialer Yannick DUCERF 11-30-2004
Posted by Yannick DUCERF on November 30, 2004, 10:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi all,

I wish to allow only one IP address of the site A, to dial up via a cisco
3640 a distant site (cisco 1600)B.
all the hosts of B can mount (via the 1600) the link between A and B..
Is it possible ?
with ACL's ?
routes ?
another command ?

TIA,
Yannick









Posted by Ivan Ostreš on November 30, 2004, 10:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options
yducerf@nospam.yahoo.fr says...
> Hi all,
>
> I wish to allow only one IP address of the site A, to dial up via a cisco
> 3640 a distant site (cisco 1600)B.
> all the hosts of B can mount (via the 1600) the link between A and B..
> Is it possible ?
> with ACL's ?
> routes ?
> another command ?
>
>

Try to allow just that one host in "interesting traffic" as a source.

--
-Ivan.

*** Use Rot13 to see my eMail address ***


Posted by Yannick DUCERF on November 30, 2004, 10:38 am
If you were  Registered and logged in, you could reply and use other advanced thread options
on the routeur A
!
interface Dialer0
ip address 192.9.241.254 255.255.255.0
encapsulation ppp
dialer in-band
dialer idle-timeout 60
dialer map ip 192.9.241.12 name Router_B number
dialer-group 1
ppp authentication chap
!

ip route 10.100.50.0 255.255.255.0 192.9.241.12

which commands to add to this configuration to allow only this host:
192.168.8.8 to mount the link between A and B?

10.100.50 --> subnetwork B
192.168.8 --> subnetwork A

TIA
yannick




MPG.1c16594e8a515fdb989785@news.individual.net...
> yducerf@nospam.yahoo.fr says...
> > Hi all,
> >
> > I wish to allow only one IP address of the site A, to dial up via a
cisco
> > 3640 a distant site (cisco 1600)B.
> > all the hosts of B can mount (via the 1600) the link between A and B..
> > Is it possible ?
> > with ACL's ?
> > routes ?
> > another command ?
> >
> >
>
> Try to allow just that one host in "interesting traffic" as a source.
>
> --
> -Ivan.
>
> *** Use Rot13 to see my eMail address ***




Posted by Ivan Ostreš on November 30, 2004, 10:53 am
If you were  Registered and logged in, you could reply and use other advanced thread options
yducerf@nospam.yahoo.fr says...
> on the routeur A
> !
> interface Dialer0
> ip address 192.9.241.254 255.255.255.0
> encapsulation ppp
> dialer in-band
> dialer idle-timeout 60
> dialer map ip 192.9.241.12 name Router_B number
> dialer-group 1
> ppp authentication chap
> !
>
> ip route 10.100.50.0 255.255.255.0 192.9.241.12
>
> which commands to add to this configuration to allow only this host:
> 192.168.8.8 to mount the link between A and B?
>
> 10.100.50 --> subnetwork B
> 192.168.8 --> subnetwork A
>

access-list 101 permit IP host 192.168.8.8 10.100.50.0 255.255.255.0

dialer-list 1 protocol ip list 101


Just a slight look to www.cisco.com and search for "interesting
traffic" would give you that info. Why people don't try to help
themeself before asking questions?


--
-Ivan.

*** Use Rot13 to see my eMail address ***


Posted by Yannick DUCERF on November 30, 2004, 11:48 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks, but others hosts of the subnetwork A couldn't access the subnetwork
B or are they just unauthorized to use the dialer ?
the access list is only active on the dialer0 ?
--
Thanks


MPG.1c1661827a2c21ec989786@news.individual.net...
> yducerf@nospam.yahoo.fr says...
> > on the routeur A
> > !
> > interface Dialer0
> > ip address 192.9.241.254 255.255.255.0
> > encapsulation ppp
> > dialer in-band
> > dialer idle-timeout 60
> > dialer map ip 192.9.241.12 name Router_B number
> > dialer-group 1
> > ppp authentication chap
> > !
> >
> > ip route 10.100.50.0 255.255.255.0 192.9.241.12
> >
> > which commands to add to this configuration to allow only this host:
> > 192.168.8.8 to mount the link between A and B?
> >
> > 10.100.50 --> subnetwork B
> > 192.168.8 --> subnetwork A
> >
>
> access-list 101 permit IP host 192.168.8.8 10.100.50.0 255.255.255.0
>
> dialer-list 1 protocol ip list 101
>
>
> Just a slight look to www.cisco.com and search for "interesting
> traffic" would give you that info. Why people don't try to help
> themeself before asking questions?
>
>
> --
> -Ivan.
>
> *** Use Rot13 to see my eMail address ***




Similar ThreadsPosted
WebVPN with Dialer IP Address September 11, 2006, 2:44 am
setting dialer enable-timeout with dialer profiles July 28, 2008, 2:55 am
bri and dialer November 15, 2004, 4:30 pm
Re: dialer map April 6, 2007, 10:18 am
bandwith Dialer 0 February 3, 2005, 8:20 pm
clear int dialer 0 February 6, 2005, 1:26 am
Dialer Interfaces January 27, 2005, 7:48 pm
Possible Dialer Watch bug? February 25, 2005, 2:47 am
ISDN Dialer July 28, 2006, 5:45 am
Looking for H.323 and VPN enabled dialer? September 1, 2006, 7:54 am

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map