T1 AND E1 REMOTE ACCESS CONCENTRATORS
94
6.2.3 R
EMOTE
-R
OUTER
C
ONFIGURATION FOR
NAT
This section describes configuring the remote router for the example NAT application shown earlier
in
Section 6.2
. This would include:
• Enabling IP routing on the router.
• Providing authentication information: Configure the router’s name (“Router2_nat”) and secret (“secreta”),
which must match the remote-device configuration in CSM.
• Disabling outbound authentication. (Leaving outbound authentication enabled creates a security gap:
Someone could “assume the identity” of the Concentrator by using information captured during
outbound authentication.)
• Defining a remote connection to the Concentrator.
The last item—defining a remote connection—consists of these separate tasks:
• Adding a remote connection: Provide the Concentrator’s name (Conc_LRA3) and password (LRA3_pw).
• Entering the Concentrator’s phone number. Be sure to enter any necessary prefixes, such as “9”
for external calls, or “1 + area code” for long-distance calls (9-1-555-5551234).
• Configuring a default route to the Concentrator (IP address 2.2.2.1, subnet mask 255.0.0.0).
