Cisco with Telekom Malaysia vDSL

Posted on 2013-01-16
Medium Priority
Last Modified: 2013-01-17
Good evening,
we are wokring on a project for a company with an office in Kuala Lumpur. The office currently has a VDSL circuit with Telekom Malaysia which has also provided them with a VDSL modem. I've been told that Telekom Malaysia is tagging the traffic and is using VLAN500 to do so. We have decided to use Cisco 2921 for our network, connect it to the VDSL modem and setup VLAN tagging for VLAN500 on the WAN interface of the Cisco but some of our consultants disagree that this will work.
My question is; has anyone ever dealt with configuring a Cisco device for a Malaysian ISP and if so, can what I am suggesting be done?
Our contact in Malaysia has specified that the router should have an Ethernet WAN interface, VLAN tagging capabilities on the WAN interface and be configured with a PPPoE MTU1492.
Thank you
Question by:EnQuestPLC
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2

Expert Comment

ID: 38781847
Can you put the vdsl modem on bridge mode ?

Author Comment

ID: 38781858
I believe it already is...

The current setup is the following:

The vDSL modem provided by Telekom Malaysia is connected to a Vyatta firewall which is performing PPPoE, NAT, firewall, etc.

All we need to do is take the Vyatta out of the network and replace it with a Cisco 2921. Plug the Ethernet port of the Cisco to the vDSL modem and set up the same services (plus a couple more) on the Cisco.

Expert Comment

ID: 38781865
If the Vyatta is currently performing PPPoE, NAT, firewall, then the Cisco should definitely work.
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!


Author Comment

ID: 38781880
I share your optimism and I agree completely. After all, I can't accept the fact that Cisco cannot do what Vyatta (or other cheaper hardware) are doing.

But, what puzzles me is the response from our local (Malaysian) consultant:

".....So if we subscribe to telco A, then the VDSL modem (or fiber BTU) that is provided by telco A is configured to tag into its own VLAN, and not VLANs of other telcos. For example, telco A uses VLAN 500 for data, VLAN 600 for voice and VLAN 700 for IPTV video. And telco B uses VLAN 800 for data, 900 for voice and etc etc.
Therefore it is because of this reason, the telcos don't allow us to meddle with the VDSL modem because this box contains the VLAN parameters that port us back to the rightful ISP.
Anything after the VDSL modem and VLAN untagging, you are free to dictate things your way. So it follows your choice router must either have VLAN untagging capabilities or you can use a standard 802.11q VLAN switch to untag the tunnels for your router. From the best of my knowledge, by itself alone Cisco IOS can do VLAN tagging and untagging at LAN level but not at WAN level....."

The above makes me think that we can indeed set it up but on another email he mentions that Cisco is not capable of performing "virtual VLAN untagging"..

Assisted Solution

Teeshirt earned 750 total points
ID: 38781898
The consultants are wrong!!

I have approximately same type of service at home, my telco provider delivers me internet on a separate vlan, voip traffic on a separate vlan, ip tv traffic on a separate vlan.

My telco provider provided me with a cheap ZTE modem which never worked as it should, I'm currently using a Cisco 1841 since 2 years... Works like a charm.

You don't even need to tag the vlans on the Cisco, just create a VLAN interface with the same name, for e.g VLAN 500 & allow it on a port & you're done :-)

Expert Comment

by:Sandeep Gupta
ID: 38782295
VLAN 500 is quite confusing  but as per your requirement following configs. will be required:

interface Ethernet
 description WAN link
 bandwidth 2048
 no ip address
 no ip redirects
 duplex auto
 speed auto
 pppoe-client dial-pool-number 1
 no cdp enable
 no shutdown
interface Dialer1
 description WAn link
 bandwidth 2048
! you can use ip address dhcp
 ip address negotiated
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip mtu 1492
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp chap hostname <<DSL username>>
 ppp chap password <<DSL password>>
 ppp pap sent-username <<DSL username>> password <<DSL password>>

Author Comment

ID: 38782308
Thank you for the config template guptasan26 !

Why is the VLAN500 confusing? Is there some peculiarity involved in it?

Accepted Solution

Sandeep Gupta earned 750 total points
ID: 38782380
I daily used to deal with different ISPs daily and few of them always confuses me about WAN settings...

You must be ready for this...

Generally PPPoE /w Ethernet I configures with above setting..if we take vlan 500 into account then your configs become lik this

on your router:

vlan 500
name WAN

int WAN
switchport mode access vlan 500
speed auto
duplex auto.

try with this as well.

Also sometimes I don't care what IPS gives..I reqest my technician onsite to connect his laptop to modem and tell me the IP he is getting, netmask and gateway.

Then I configure my router interface with that IP/mask and point my default route to gateway IP.

There are many ways..

If you want to know specific configs then let me know what yoour ISP is giving the info to set up your WAN

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello All, I have been training on Multicast for a while now and whenever I start the topic , I find out that my friends /  Colleagues mention that they do not know how to test Multicast Joins. As most of the multicast would be video traffic and …
Why do some people recommend buying business VoIP from an ISP? What are the benefits to my company? What are the costs?
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month14 days, 13 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question