Sottopongo la mia configurazione al parere di chi ne sa piu di me, se qualcuno vuol commentarla (in bene o in male ... ) mi fara' un grande piacere.
Grazie, un saluto a tutti.
Configurazione very-basic perche' a monte c'era gia un firewall che non ho smontato:
// -- Versione -----------
Router>sh ver
Cisco Internetwork Operating System Software
IOS (tm) C820 Software (C820-Y6-M), Version 12.1(5)YB4, EARLY DEPLOYMENT RELEASE
SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2001 by cisco Systems, Inc.
Copyright (c) 1986-2001 by cisco Systems, Inc.
Image text-base: 0x80013170, data-base: 0x80672A1C
ROM: System Bootstrap, Version 12.1(1r)XB1, RELEASE SOFTWARE (fc1)
ROM: C820 Software (C820-Y6-M), Version 12.1(5)YB4, EARLY DEPLOYMENT RELEASE SOF
TWARE (fc1)
Router uptime is 1 minute
System returned to ROM by reload
System image file is "flash:c820-y6-mz.121-5.YB4"
CISCO C827 (MPC855T) processor (revision 0x701) with 15360K/1024K bytes of memor
y.
Processor board ID JAD06020EJ8 (2636027084), with hardware revision 0000
CPU rev number 5
Bridging software.
1 Ethernet/IEEE 802.3 interface(s)
1 ATM network interface(s)
128K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)
Configuration register is 0x102
Router>
// -- Configurazione --------
!
version 12.1
no service single-slot-reload-enable
no service pad
service timestamps debug datetime msec
service timestamps log uptime
no service password-encryption
!
hostname F5ADSL-Router
!
logging rate-limit console 10 except errors
enable password <la password>
!
ip subnet-zero
no ip finger
ip domain-name ngi.it.
ip name-server <il DNS>
ip name-server <l'altro DNS>
!
no ip dhcp-client network-discovery
!
interface Ethernet0
ip address 10.1.1.1 255.255.255.0
ip nat inside
no ip mroute-cache
hold-queue 100 out
!
interface ATM0
no ip address
no ip mroute-cache
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5snap
protocol ppp dialer
dialer pool-member 1
!
bundle-enable
dsl operating-mode auto
hold-queue 224 in
!
interface Dialer0
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
down-when-looped
ppp pap sent-username <l' username> password <l'altra password>
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
ip nat inside source list 101 interface Dialer0 overload
access-list 101 permit ip 10.1.1.0 0.0.0.255 any
dialer-list 1 protocol ip permit
!
line con 0
transport input none
stopbits 1
line vty 0 4
login local
!
scheduler max-task-time 5000
end
