Ho una linea Telecom 20Mb con i classici 4 IP assegnati e il router Cisco 887 + un Firewall, tutto funziona regolarmente, ecco schemino:
IP Telecom assegnati A.B.C.1/30
Cisco 887 è A.B.C.2
Firewall è A.B.C.3
tutto funziona regolarmente i PC della rete escono con l'IP A.B.C.3, ORA, devo aggiungere e configurare degli IP aggiuntivi (8 chiaramente 6 disponibili), come devo procedere, grazie mille a chi mi aiuta.
Ecco la mia configurazione:
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 xxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
!
no ip source-route
!
ip cef
no ip bootp server
ip domain name interbusiness.it
ip name-server 151.99.125.1
ip name-server 151.99.125.2
no ipv6 cef
!
license udi pid CISCO887-K9 sn xxxxxxxxxxxx
!
username xxxxxxxx privilege 15 view root secret 5 xxxxxxxxxxxxxxxxxxx
username xxxxxxxx privilege 15 secret 5 xxxxxxxxxxxxxxxxxx
!
!
ip tcp synwait-time 10
no ip ftp passive
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
description PUNTO-PUNTO
ip address 1.2.3.4 255.255.255.252
ip flow ingress
ip nat outside
ip virtual-reassembly in
pvc 8/35
encapsulation aal5snap
!
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Vlan1
description LAN-WAN
ip address 192.168.3.3 255.255.255.0 secondary
ip address A.B.C.2 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip dns server
ip nat inside source list 1 interface ATM0.1 overload
ip route 0.0.0.0 0.0.0.0 ATM0.1
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 192.168.3.0 0.0.0.255
no cdp run
!
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you
want to use.
-----------------------------------------------------------------------
^C
!
line con 0
login local
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end
mi hanno anche verificato che nelle loro configurazioni e confermato che:
