cisco router configuration help

naster · Post by **naster** » Thu Mar 18, 2010 2:36 am

I need help , is anybody here have the sample configuration of Cisco router?
I have 78 computers and i would like those 78 computers to have the internet connection, how could i configure it on my cisco router? hope some one here can give me the sample configuration for this and i will apply it at my cisco router,

Bazza84 · Post by **Bazza84** » Thu Mar 18, 2010 5:07 am

You'll need to supply more information

What's your public (Internet) IP, and is it a static address?
What interface is it on?
You'll probably be using NAT/PAT, so what pivate addresses do you want for you LAN?
What interface do you have (Ethernet/Fast Ethernet)?

akbarri · Post by **akbarri** » Thu Mar 18, 2010 6:13 am

http://www.opennet.ru/soft/cisco-configuration.html
http://www.tele.pitt.edu/~telelab/labs/ ... .20.05.pdf

naster · Post by **naster** » Thu Mar 18, 2010 8:44 pm

@ Bazza84
thanks for your concern, I have the global ip of 119,.93.78.67 DNS of 58.69.254.71
2ndary dns 58.69.254.78 the I would like my IP to be obtain (dynamic) to all my 78 computers my interface is ethernet

cozy · Post by **cozy** » Wed Mar 31, 2010 2:51 am

EXCLUDE ROUTER'S INSIDE (LAN) INTERFACE FROM DHCP POOL:
ip dhcp excluded-address 192.168.2.1

SET DHCP ADDRESS RANGE, DEFAULT GATEWAY, AND IMPORT DNS AND OTHER INFO TAKEN FROM ISP BY IPCP:
ip dhcp pool HOME_LAN_POOL
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1

SET STATIC DNS SERVERS (NOT REALLY NEEDED IF YOU USE ppp ipcp dns request accept COMMAND on DIALER INTERFACE):
ip name-server 58.69.254.71
ip name-server 58.69.254.78

CREATE ACL FOR NAT/PAT:
access-list 100 permit ip 192.168.2.0 0.0.0.255 any

CREATE AND CONFIGURE DIALER INTERFACE:
interface Dialer0
ip address 119.93.78.67 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
no cdp enable
ppp ipcp dns request accept
ppp authentication chap pap callin
ppp chap hostname USERNAME@ISP
ppp chap password 0 PASSWORD
ppp pap sent-username USERNAME@ISP password 0 PASSWORD

SET DEFAULT ROUTE:
ip route 0.0.0.0 0.0.0.0 Dialer0

CONFIGURE LAN AND INTERNET (FOR PPPoE) PHYSICAL INTERFACES:
interface ATM0/0
description INTERNET
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
no atm ilmi-keepalive
no cdp enable
dsl operating-mode auto
pvc 8/35 > THE CORRECT VCI/VPI WILL BE PROVIDED BY YOUR ISP
pppoe-client dial-pool-number 1

interface FastEthernet0/0
description HOME_LAN
ip address 192.168.2.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
duplex auto
speed auto
no mop enabled

CONFIGURE PAT:
ip nat inside source list 100 interface Dialer0 overload

ATTENTION: This simple config contains no security settings. You should configure ACL on Ethernet and Dialer interfaces, statefull packet inspection with Cisco firewall (CBAC) for allowed protocols and also secure console, aux with username/password and configure ssh instead of telnet. You should also configure password-encryption service or better, enable AAA and disable unneeded services. An easy way to do most of all these things is to use auto-secure. Don't forget to save your running configuration to NVRAM when you're finished with copy run start or write command.