Configurazione cisco 877 + ip fisso telecom
Inviato: mer 24 ott , 2007 8:55 am
Salve a tutti,
colgo l'occazione per ringraziare tutti coloro che rendono questo forum un punto di riferimento fondamentale penso un pò per tutti.
Vi posto una configurazione di un cisco 877 che dovrebbe funzionare con una vecchia ADSL SMART Telecom, ma che non vuole saperne di farmi uscire all'esterno. Posso dirvi che l'allineamento dovrebbe avvenire correttamente in quanto il led cd rimane fisso.
Vi ringrazio anticipatamenteCurrent configuration : 5748 bytes
!
version 12.4
service nagle
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname Cisco857
!
boot-start-marker
boot-end-marker
!
logging exception 100000
logging count
logging userinfo
logging queue-limit 10000
logging buffered 150000 notifications
logging console critical
enable secret 5 $1$Z3Qv$PpPOwC7SftNc6jmJ6b9TF/
!
no aaa new-model
!
resource policy
!
clock timezone MET 1
clock summer-time MEDT recurring last Sun Mar 2:00 last Sun Oct 3:00
ip subnet-zero
no ip source-route
no ip gratuitous-arps
ip icmp rate-limit unreachable 1000
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool1
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
!
!
ip inspect log drop-pkt
ip inspect max-incomplete low 300
ip inspect max-incomplete high 400
ip inspect one-minute low 300
ip inspect hashtable-size 2048
ip inspect tcp synwait-time 20
ip inspect tcp max-incomplete host 300 block-time 60
ip inspect name IDS tcp
ip inspect name IDS udp
ip inspect name IDS ftp
ip tcp selective-ack
ip tcp window-size 2144
ip tcp synwait-time 10
no ip bootp server
ip domain name cisco.com
ip name-server 151.99.125.2
ip name-server 151.99.125.3
ip name-server 151.99.125.1
ip name-server 208.67.222.222
login block-for 1 attempts 3 within 30
login on-failure
login on-success
!
!
crypto pki trustpoint TP-self-signed-1070015463
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1070015463
revocation-check none
rsakeypair TP-self-signed-1070015463
!
!
crypto pki certificate chain TP-self-signed-1070015463
certificate self-signed 01
30820251 308201BA A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31303730 30313534 3633301E 170D3032 30333031 30303035
31365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 30373030
31353436 3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A07A 3E4BEF9F 2E812EA7 8740F14D 9BA5AFC1 E64ECEE3 F47FF174 A41BC394
9518880B D026D3D8 EA12F1E3 D5C5B9E9 A80012DB B7AF7AA9 EFE50750 C649D09B
4875B33F D165E6C7 9488C03B E877D702 9D3E4FC3 FDDAF449 968F77C9 2B03F380
E4D9914D 1B4CAD1E 0F2D717E 00FD4FFB E318408C D3C01F74 30180443 E8810DDA
F1D30203 010001A3 79307730 0F060355 1D130101 FF040530 030101FF 30240603
551D1104 1D301B82 19436973 636F3837 372E696E 74657262 7573696E 6573732E
6974301F 0603551D 23041830 16801429 FD4D3757 2F6F237A 41E5E2A0 50672000
32483830 1D060355 1D0E0416 041429FD 4D37572F 6F237A41 E5E2A050 67200032
4838300D 06092A86 4886F70D 01010405 00038181 0087D7BB 1FFEF260 D7766918
41D8CF3E 39E2676B 001BCE26 ADF198AF E85FCE06 7B7A9702 2C56DBE1 D47F8282
C1682215 D95B1692 ADD6CDDE 392A214E 1BB11907 FDBCE3FC 778EFC55 693A8117
91C777F0 EC559074 16851E5D 6F02E20D 42DB0B18 43569035 422A7CEC 0C8EE5D4
4DF4AA85 C62D13A8 DA46E903 91A51E33 D2D146C5 CD
quit
username demaservice privilege 15 secret 5 $1$hOqK$H5z25G.bqwlStPl5i.pGn0
username admin password 7 06575D72181B5F
archive
log config
hidekeys
!
!
!
!
!
interface Null0
no ip unreachables
!
interface Loopback0
description INTERFACCIA VIRTUALE END-POINT VPN
no ip address
!
interface ATM0
mtu 1500
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description INTERFACCIA PER ACCESSO AD INTERNET
ip address XX.XX.XX.XX 255.255.255.252
ip access-group 131 in
ip verify unicast reverse-path
no ip redirects
no ip unreachables
no ip proxy-arp
ip accounting access-violations
ip inspect IDS out
ip nat outside
ip virtual-reassembly
no ip mroute-cache
no snmp trap link-status
pvc 8/35
protocol ip XX.XX.XX.XX broadcast
encapsulation aal5snap
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description CONNESSIONE LAN ***
ip address 10.10.10.1 255.255.255.0
ip accounting output-packets
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
no ip mroute-cache
hold-queue 100 out
!
ip classless
ip route 0.0.0.0 0.0.0.0 ATM0.1
!
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
banner motd ^CC
****************************************************************
----------------------------------------------------------------
* *** ROUTER PERIMETRALE ---- *** *
----------------------------------------------------------------
* WARNING: System is RESTRICTED to authorized personnel ONLY! *
* Unauthorized use of this system will be logged and *
* prosecuted to the fullest extent of the law. *
* *
* If you are NOT authorized to use this system, LOG OFF NOW! *
* *
****************************************************************
^C
!
line con 0
exec-timeout 120 0
login local
no modem enable
transport output ssh
stopbits 1
line aux 0
login local
transport output ssh
stopbits 1
line vty 0 4
exec-timeout 0 0
privilege level 15
login local
transport input telnet ssh
transport output telnet ssh
!
scheduler max-task-time 5000
scheduler interval 500
end
colgo l'occazione per ringraziare tutti coloro che rendono questo forum un punto di riferimento fondamentale penso un pò per tutti.
Vi posto una configurazione di un cisco 877 che dovrebbe funzionare con una vecchia ADSL SMART Telecom, ma che non vuole saperne di farmi uscire all'esterno. Posso dirvi che l'allineamento dovrebbe avvenire correttamente in quanto il led cd rimane fisso.
Vi ringrazio anticipatamenteCurrent configuration : 5748 bytes
!
version 12.4
service nagle
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname Cisco857
!
boot-start-marker
boot-end-marker
!
logging exception 100000
logging count
logging userinfo
logging queue-limit 10000
logging buffered 150000 notifications
logging console critical
enable secret 5 $1$Z3Qv$PpPOwC7SftNc6jmJ6b9TF/
!
no aaa new-model
!
resource policy
!
clock timezone MET 1
clock summer-time MEDT recurring last Sun Mar 2:00 last Sun Oct 3:00
ip subnet-zero
no ip source-route
no ip gratuitous-arps
ip icmp rate-limit unreachable 1000
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool1
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
!
!
ip inspect log drop-pkt
ip inspect max-incomplete low 300
ip inspect max-incomplete high 400
ip inspect one-minute low 300
ip inspect hashtable-size 2048
ip inspect tcp synwait-time 20
ip inspect tcp max-incomplete host 300 block-time 60
ip inspect name IDS tcp
ip inspect name IDS udp
ip inspect name IDS ftp
ip tcp selective-ack
ip tcp window-size 2144
ip tcp synwait-time 10
no ip bootp server
ip domain name cisco.com
ip name-server 151.99.125.2
ip name-server 151.99.125.3
ip name-server 151.99.125.1
ip name-server 208.67.222.222
login block-for 1 attempts 3 within 30
login on-failure
login on-success
!
!
crypto pki trustpoint TP-self-signed-1070015463
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1070015463
revocation-check none
rsakeypair TP-self-signed-1070015463
!
!
crypto pki certificate chain TP-self-signed-1070015463
certificate self-signed 01
30820251 308201BA A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31303730 30313534 3633301E 170D3032 30333031 30303035
31365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 30373030
31353436 3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A07A 3E4BEF9F 2E812EA7 8740F14D 9BA5AFC1 E64ECEE3 F47FF174 A41BC394
9518880B D026D3D8 EA12F1E3 D5C5B9E9 A80012DB B7AF7AA9 EFE50750 C649D09B
4875B33F D165E6C7 9488C03B E877D702 9D3E4FC3 FDDAF449 968F77C9 2B03F380
E4D9914D 1B4CAD1E 0F2D717E 00FD4FFB E318408C D3C01F74 30180443 E8810DDA
F1D30203 010001A3 79307730 0F060355 1D130101 FF040530 030101FF 30240603
551D1104 1D301B82 19436973 636F3837 372E696E 74657262 7573696E 6573732E
6974301F 0603551D 23041830 16801429 FD4D3757 2F6F237A 41E5E2A0 50672000
32483830 1D060355 1D0E0416 041429FD 4D37572F 6F237A41 E5E2A050 67200032
4838300D 06092A86 4886F70D 01010405 00038181 0087D7BB 1FFEF260 D7766918
41D8CF3E 39E2676B 001BCE26 ADF198AF E85FCE06 7B7A9702 2C56DBE1 D47F8282
C1682215 D95B1692 ADD6CDDE 392A214E 1BB11907 FDBCE3FC 778EFC55 693A8117
91C777F0 EC559074 16851E5D 6F02E20D 42DB0B18 43569035 422A7CEC 0C8EE5D4
4DF4AA85 C62D13A8 DA46E903 91A51E33 D2D146C5 CD
quit
username demaservice privilege 15 secret 5 $1$hOqK$H5z25G.bqwlStPl5i.pGn0
username admin password 7 06575D72181B5F
archive
log config
hidekeys
!
!
!
!
!
interface Null0
no ip unreachables
!
interface Loopback0
description INTERFACCIA VIRTUALE END-POINT VPN
no ip address
!
interface ATM0
mtu 1500
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description INTERFACCIA PER ACCESSO AD INTERNET
ip address XX.XX.XX.XX 255.255.255.252
ip access-group 131 in
ip verify unicast reverse-path
no ip redirects
no ip unreachables
no ip proxy-arp
ip accounting access-violations
ip inspect IDS out
ip nat outside
ip virtual-reassembly
no ip mroute-cache
no snmp trap link-status
pvc 8/35
protocol ip XX.XX.XX.XX broadcast
encapsulation aal5snap
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description CONNESSIONE LAN ***
ip address 10.10.10.1 255.255.255.0
ip accounting output-packets
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
no ip mroute-cache
hold-queue 100 out
!
ip classless
ip route 0.0.0.0 0.0.0.0 ATM0.1
!
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
banner motd ^CC
****************************************************************
----------------------------------------------------------------
* *** ROUTER PERIMETRALE ---- *** *
----------------------------------------------------------------
* WARNING: System is RESTRICTED to authorized personnel ONLY! *
* Unauthorized use of this system will be logged and *
* prosecuted to the fullest extent of the law. *
* *
* If you are NOT authorized to use this system, LOG OFF NOW! *
* *
****************************************************************
^C
!
line con 0
exec-timeout 120 0
login local
no modem enable
transport output ssh
stopbits 1
line aux 0
login local
transport output ssh
stopbits 1
line vty 0 4
exec-timeout 0 0
privilege level 15
login local
transport input telnet ssh
transport output telnet ssh
!
scheduler max-task-time 5000
scheduler interval 500
end