Configuring a Cisco 877 Router for Be/O2 Broadband

This post is an amended version of this guide detailing how to set up a Cisco 877 router for BE Broadband or O2 Broadband in the UK. If you'd like to see the full config, just leave a comment and I'll send it over.

This article covers the following router models:

  • CISCO877-K9 (Wired)
  • CISCO877W-G-A-K9
  • CISCO877W-G-E-K9
  • CISCO877W-G-J-K9

Before we begin, it's important to point out that Be Broadband uses RFC1483 Bridge mode instead of PPPoA used my most UK ISPs. Additionally, they use PVC 0/101 instead of the standard 0/38.

Hardware Setup

Connect your PC with the router via a console attached to your router's console port and PC's serial port. Open a serial connection using Putty.

Configuration

Once logged in, you'll want to create a user so you can log in after copying your running-config to your startup-config at the end of this process.

username myusername privilege 15 secret 5 mypassword

Next, set up a local DHCP server (if required):

no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.24.0 192.168.24.10
ip dhcp excluded-address 192.168.24.250 192.168.24.254
!
ip dhcp pool lanpool
   network 192.168.24.0 255.255.255.0
   default-router 192.168.24.1
   lease 0 2
 

Next, enable Integrated Routing and Bridging (IRB) on your router.

Enter the following command in global configuration mode:

bridge irb

Create your bridge:

bridge 1 protocol ieee
bridge 1 route ip

and configure IP:

interface BVI1
description my local range
ip address 192.168.24.1 255.255.255.0 <-- Change as appropriate
ip nat inside
ip virtual-reassembly !

Link your local interfaces to the bridge:

interface Vlan1
no ip address
bridge-group 1
!

Configure DSL interface from global mode:

!
interface ATM0 mac-address [MAC of original BeBox/o2 Router]
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
no atm ilmi-keepalive
dsl operating-mode auto
no shut
!
interface ATM0.1 point-to-point
description Link to BE/O2 Broadband
ip address 87.194.X.X 255.255.252.0 <----- IP/Mask of Be/O2 Broadband
ip pim sparse-dense-mode
ip nat outside
ip virtual-reassembly
no snmp trap link-status
atm route-bridged ip
pvc 0/101
encapsulation aal5snap
oam-pvc manage
!

Configure routing and NAT:

create access-list
access-list 1 permit 192.168.24.0 0.0.0.255 <-- Change as above
ip nat inside source list 1 interface ATM0.1 overload
 

setup your default route:

ip route 0.0.0.0 0.0.0.0 87.194.220.1 <--- Change to details supplied by BE Broadband

To commit everything to your startup config, issue:

copy running-config startup-config

 

Debugging

If you have problems, you can debug the ATM interface by issuing the following command:

debug atm event
debug atm errors

These combined with the usual show interface commands will give CRC and header error counts which can be useful.
 

 

Thanks for the tips, Sebastian @ http://www.seba-online.net/

 

#1 Chris Bailes on 12.08.2009 at 6:12 PM

Hi Nick,

I have a similar setup to you and since 28 October 2009 I have been plagued by ATM interface drop outs and high numbers of errors.

Are you still with BE Broadband?

Would you be willing to share a little information about your configuration?

All best,

Chris Bailes.

#2 Nick Kewney on 12.16.2009 at 2:15 PM

Hi Chris,

I sent you an e-mail. Let me know if you still need help with this and I can send you my config.

Nick

#3 Mohammad on 2.08.2010 at 12:37 PM

Hi Chris,

I dont have static IP address from ISP (o2 broadband). So what would be the config under 'atm 0.1 point to point'?

#4 Mohammad on 2.08.2010 at 12:39 PM

Another question, why do i need to creat BVI interface?

Thanks

Mohammad

#5 Nick on 2.08.2010 at 3:27 PM

Hi Mohammad,

Try ip address dhcp <params>

You need to use BVI as Be/O2 use RFC1483 Bridge mode instead of PPPoA used my most UK ISPs :)

HTH

Nick

#6 Matt on 3.22.2010 at 10:16 PM

Hey there, I have a 1801 from cisco, but I keep running into trouble getting it to work with O2, basically tried a fair few different configs, but from within the SDM tester for the atm0.1 it keeps telling me I need a exit interface, now I think I have fixed that as it now goes onto the next step, but its not pinging anything online, any chance you could drop me a copy of your config through the mail?

Cheers

Matt

#7 Shaun on 5.05.2010 at 4:26 PM

Hey - I've followed your instructions and managed to get my 877w connected to Be.

My problem is that I am now no longer able to access SDM or CCP to configure more NAT rules or Wireless

Any ideas why?

Thanks

Shaun

#8 M Imran Aleem on 5.18.2010 at 4:59 PM

Hi Nick,

Thanks for your helpful article, it has helped me a lot to understand the configurations but i'm still have no luck with this router.

There are many problem i am facing:

1- SDM is not working with https but ok with http.

2- Assigned IP to vlan1 then SDM worked but after using your configurations i can't connect to router using SDH.

3- Computer connected to IP fastethernet ports can't get IP addresses, DHCP is configured.

Not sure what should i modify in my configuration. Can you please do me a favour and check this configuration:

---------------------------------------------------

*************************************

---------------------------------------------------

Current configuration : 4110 bytes

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname <xxxxxxx>

!

boot-start-marker

boot-end-marker

!

enable secret 5 <xxxxxxx>

enable password 7 <xxxxxxx>

!

no aaa new-model

ip cef

!

!

no ip dhcp use vrf connected

ip dhcp excluded-address 192.168.1.1

ip dhcp excluded-address 192.168.1.251 192.168.1.254

!

ip dhcp pool sdm-pool1

network 192.168.1.0 255.255.255.0

dns-server 87.194.255.154

default-router 192.168.1.1

!

!

ip domain name <xxxxxxx>

ip name-server 87.194.255.154

ip ssh version 2

!

multilink bundle-name authenticated

!

crypto pki trustpoint TP-self-signed-xxxxxxxxxx

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-xxxxxxxxx

revocation-check none

rsakeypair TP-self-signed-xxxxxxxxx

!

!

crypto pki certificate chain TP-self-signed-xxxxxxxxxxx

certificate self-signed 01

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx

quit

!

!

username <xxxxxxx> privilege 15 password 7 <xxxxxxx>

!

!

!

bridge irb

!

!

!

interface ATM0

description ATM LINK TO INTERNET

mac-address XXXX.XXXX.XXXX

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

no atm ilmi-keepalive

dsl operating-mode auto

!

interface ATM0.1 point-to-point

description WAN LINK TO INTERNET

ip address <BE/O2 STATIC IP> <O2/BE SUBNET MASK>

ip pim sparse-dense-mode

ip nat outside

ip virtual-reassembly

no snmp trap link-status

atm route-bridged ip

pvc 0/101

oam-pvc manage

encapsulation aal5snap

!

!

interface FastEthernet0

!

interface FastEthernet1

!

interface FastEthernet2

!

interface FastEthernet3

!

interface Dot11Radio0

no ip address

no dot11 exte

#9 Pdfok on 8.10.2010 at 4:25 PM

Hi, Nick! Many thanks for the guide. I'm not a pro yet but I hope I'll manage to do it.

#10 Lord on 8.23.2010 at 9:50 AM

Hello everyone,

I am new to cisco devices. I change DLink router with Cisco 877w and it can't connect to the internet

HELPPPPPPPPPPP PLSSSSSSSSSSSSSSSSSSSSS

internet seeting and my router settings.

help Plsssssssssssssssssssssssssss

SETTINGS FROM ISP:

* ISP name: O2 Broadband

* Multiplexing method: LLC-Based

* VPI: 0

* VCI: 101

* Username: n/a

* Password: n/a

* Static IP: 188.220.xxx.xxx

* Subnet Mask: 255.255.248.0

* Default Gateway: 188.220.40.1

* DNS servers: 87.194.255.154

87.194.255.155

* NAT: enable

SETTINGS FROM MY CISCO 877w:

LORD#sh run

Building configuration...

Current configuration : 5418 bytes

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname LORD

!

boot-start-marker

boot-end-marker

!

logging message-counter syslog

logging buffered 51200 warnings

enable secret 5 $1$.qEA$9SLgz7CczL0JRrLDDczWk0

!

no aaa new-model

!

crypto pki trustpoint TP-self-signed-45584425

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-45584425

revocation-check none

rsakeypair TP-self-signed-45584425

!

!

crypto pki certificate chain TP-self-signed-45584425

certificate self-signed 01

XXXXXXXXXXXXXXXXXXXX

XXXXXXXXXXXXXXXXXXXXXX

XXXXXXXXXXXXXXXXXXXXXXX

XXXXXXXXXXXXXXXXXXXXXXXX

XXXXXXXXXXXXXXXXXXXXXXXXX

XXXXXXXXXXXXXXXXXXXXXXXXXX

quit

dot11 syslog

ip source-route

!

!

ip dhcp excluded-address 10.10.10.1

!

ip dhcp pool sdm-pool

import all

network 10.10.10.0 255.255.255.0

default-router 10.10.10.1

lease 0 2

!

!

ip cef

no ip domain lookup

ip domain name yourdomain.com

ip inspect name SDM_LOW tcp router-traffic

ip ddns update method sdm_ddns1

interval maximum 2 0 0 0

interval minimum 1 0 0 0

!

no ipv6 cef

!

multilink bundle-name authenticated

!

!

!

username cisco privilege 15 secret 5 $1$bHrD$BjKNoLbDoS5Th1Ig1W/kc/

username lord

!

!

!

archive

log config

hidekeys

!

!

!

bridge irb

!

!

interface ATM0

description ADSL PORT

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

ip nat outside

ip virtual-reassembly

ip route-cache policy

no atm ilmi-keepalive

pvc 0/1

!

pvc 0/101

protocol ip 188.220.xxx.xxx broadcast

vbr-rt 160 160 1

oam-pvc manage

encapsulation aal5snap

protocol ppp dialer

dialer pool-member 1

!

!

interface ATM0.1 point-to-point

ip address 188.220.xxx.xxx 255.255.248.0

atm route-bridged ip

!

interface FastEthernet0

!

interface FastEthernet1

!

interface FastEthernet2

!

interface FastEthernet3

!

interface Dot11Radio0

no ip address

shutdown

speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0

54.0

station-role root

!

interface Vlan1

description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$

no ip address

ip nat inside

ip virtual-reassembly

ip tcp adjust-mss 1452

bridge-group 1

!

interface Dialer0

ip address negotiated

ip mtu 1492

encapsulation ppp

dialer pool 1

Leave a Comment