Salve ragassi
Oggi mi è arrivato il cavo console..
Cmq appena ho acceduto alla console mi richiedeva la pass, così sono entrato in modalità rommon, l'ho fatto partire dall'altra cfg 0x2140, poi ho settato la nuova pass e resa primaria nuovamente la cfg di default 0x2102, che poi ho cancellato con write erase perchè era troppo complicata
Cmq detto fatto in pochi min ero su internet! Ho girato 1 pò il forum alla ricerca dei migliori accorgimenti sia per p2p e per firewall..
Alla fine ho tirato fuori questa CFG..ditemi se c'è qlks da migliorare!
Codice: Seleziona tutto
Router#sh run
Building configuration...
Current configuration : 2718 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxx (cancellata)
!
no aaa new-model
ip subnet-zero
no ip source-route
ip dhcp excluded-address 192.168.1.1 (Ip router)
ip dhcp excluded-address 192.168.1.2 (Ip dell'unico pc da cui si usano p2p, l'ho reso statico in pratica)
!
ip dhcp pool 192.168.1.0/4
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 193.70.152.15 193.70.152.25
!
!
no ip bootp server
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.1.1 255.255.255.0
ip access-group 103 out
ip nat inside
ip virtual-reassembly
no cdp enable
hold-queue 100 out
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
interface Dialer0
ip address negotiated
ip access-group 101 in
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp chap hostname XXX@XXX (RIMOSSO)
ppp chap password 0 xxxxxx ("" "" )
ppp pap sent-username xxx@xxx (rimosso) password 0 ("" "")
!
interface Dialer1
no ip address
no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
no ip http secure-server
!
ip nat translation timeout 3600
ip nat translation tcp-timeout 3600
ip nat translation udp-timeout 1200
ip nat translation finrst-timeout 300
ip nat translation syn-timeout 120
ip nat translation dns-timeout 300
ip nat translation icmp-timeout 120
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.2 4800 interface Dialer0 4800
ip nat inside source static udp 192.168.1.2 4800 interface Dialer0 4800
ip nat inside source static udp 192.168.1.2 4900 interface Dialer0 4900
ip nat inside source static tcp 192.168.1.2 4900 interface Dialer0 4900
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 101 permit icmp any any echo
access-list 101 permit icmp any any echo-reply
access-list 101 deny tcp any any lt 1024
access-list 101 deny udp any any lt 1024
access-list 101 deny icmp any any
access-list 101 permit ip any any
access-list 101 permit icmp any any net-unreachable
access-list 101 permit icmp any any host-unreachable
no cdp run
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password xxxxxx (RIMOSSA)
login
!
scheduler max-task-time 5000
end
ed ecco un Show ver
Codice: Seleziona tutto
Router#show ver
Cisco IOS Software, C837 Software (C837-K9O3Y6-M), Version 12.3(11)T5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Sat 02-Apr-05 13:38 by yiyan
ROM: System Bootstrap, Version 12.2(11r)YV3, RELEASE SOFTWARE (fc2)
Router uptime is 12 minutes
System returned to ROM by reload
System image file is "flash:c837-k9o3y6-mz.123-11.T5.bin"
Cisco C837 (MPC857DSL) processor (revision 0x600) with 58983K/6553K bytes of memory.
Processor board ID FCZ092951UA (542204547), with hardware revision 0000
CPU rev number 7
1 Ethernet interface
4 FastEthernet interfaces
1 ATM interface
128K bytes of NVRAM.
12288K bytes of processor board System flash (Read/Write)
2048K bytes of processor board Web flash (Read/Write)
Configuration register is 0x2102
Cisco 837 con 64Mb di ram anche se nn capisco xkè adesso ne visualizza solo 59..ma forse è normale?
Ahh..inoltre avrei 1 ultima domanda! Ho provato a vedere quante sessioni di NAT ho aperto al momento (c'ho uTorrent con 1 download attivo impostato max 200 connessioni e di aperte ce ne sono 150 circa al momento) mi da questo
Codice: Seleziona tutto
Router#show ip nat statistics
Total active translations: 1277 (0 static, 1277 dynamic; 1277 extended)
Outside interfaces:
Dialer0, Virtual-Access2
Inside interfaces:
Ethernet0
Hits: 70811 Misses: 1517
CEF Translated packets: 71700, CEF Punted packets: 129
Expired translations: 680
Dynamic mappings:
-- Inside Source
[Id: 1] access-list 1 interface Dialer0 refcount 281
Queued Packets: 0
Router#
e la ram...
Codice: Seleziona tutto
Router#show memory statistics
Head Total(b) Used(b) Free(b) Lowest(b) Largest(b)
Processor 8175864C 35919284 9988000 25931284 25736020 25701840
I/O 3999C00 6710272 716088 5994184 5994184 5994184
Router#
e il processore...
Codice: Seleziona tutto
Router#show processes
CPU utilization for five seconds: 13%/8%; one minute: 14%; five minutes: 13%
è tutto nella norma? Vado tranquillo?
Ho letto anche vari 3d ma non ho trovato questo problema!
