I'm a unix systems engineer and my network background is not so strong; I need a help to do the last touch-up to a cisco 877.
I've substituted our adsl router (a simple home router provided by the provider) with this cisco and I've a couple of question.
I done the conf after a long walking on google, and the connectivity from office to internet works fine.
Now I need to use the publics IP: we have some public IP (a /29 net) and with the old router these IPs were forwarded directly to the internal firewall for the management (routing, natting, ecc. ecc.).
The internal firewall mounts on its interfaces these IPs, so I need to forward the traffic from internet, through the router, directly there.
The second question is: what is the BVI interface?
On the router I've 4 eth interfaces, but hte internat IP is configured on the BVI interface. Why? What is it? Can I use it like a VLAN, attaching/detaching interfaces?
Can I create a VLAN, to use on a different net some of these interfaces?
Here the conf:
xelerc001#sh run
Building configuration...
Current configuration : 3533 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xelerc001
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxx
enable password 7 xxxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
!
!
ip cef
ip name-server 8.8.8.8
ip name-server 8.8.4.4
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
username admin privilege 15 secret 5 ddddddddddddddddddddddddddd
!
!
!
archive
log config
hidekeys
!
!
!
bridge irb
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode adsl2+
!
interface ATM0.1 point-to-point
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
no ip address
ip tcp adjust-mss 1452
bridge-group 1
!
interface Dialer0
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap chap callin
ppp chap hostname xxxuserxxx
ppp chap password 7 XXX00PASSWORD00XX
ppp pap sent-username xxxuserxxx password 7 XXX00PASSWORD00XX
!
interface BVI1
ip address 192.168.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
ip http authentication local
ip http secure-server
!
!
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 permit 192.168.0.0 0.0.0.255
!
!
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
password 7 XXpasswordXX
login
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end
xelerc001#
Thanks to all in advance, Regards