I'm a unix systems engineer and my network background is not so strong; I need a help to do the last touch-up to a cisco 877.
I've substituted our adsl router (a simple home router provided by the provider) with this cisco and I've a couple of question.
I done the conf after a long walking on google, and the connectivity from office to internet works fine.
Now I need to use the publics IP: we have some public IP (a /29 net) and with the old router these IPs were forwarded directly to the internal firewall for the management (routing, natting, ecc. ecc.).
The internal firewall mounts on its interfaces these IPs, so I need to forward the traffic from internet, through the router, directly there.
The second question is: what is the BVI interface?
On the router I've 4 eth interfaces, but hte internat IP is configured on the BVI interface. Why? What is it? Can I use it like a VLAN, attaching/detaching interfaces?
Can I create a VLAN, to use on a different net some of these interfaces?
Here the conf:
xelerc001#sh run Building configuration... Current configuration : 3533 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname xelerc001 ! boot-start-marker boot-end-marker ! logging message-counter syslog enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxx enable password 7 xxxxxxxxxxxxxxxxxxxxx ! no aaa new-model ! dot11 syslog ip source-route ! ! ! ! ip cef ip name-server 18.104.22.168 ip name-server 22.214.171.124 no ipv6 cef ! multilink bundle-name authenticated ! ! ! username admin privilege 15 secret 5 ddddddddddddddddddddddddddd ! ! ! archive log config hidekeys ! ! ! bridge irb ! ! interface ATM0 no ip address no atm ilmi-keepalive dsl operating-mode adsl2+ ! interface ATM0.1 point-to-point pvc 8/35 encapsulation aal5mux ppp dialer dialer pool-member 1 ! ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface Vlan1 no ip address ip tcp adjust-mss 1452 bridge-group 1 ! interface Dialer0 ip address negotiated ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 ppp authentication pap chap callin ppp chap hostname xxxuserxxx ppp chap password 7 XXX00PASSWORD00XX ppp pap sent-username xxxuserxxx password 7 XXX00PASSWORD00XX ! interface BVI1 ip address 192.168.0.254 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 Dialer0 ip http server ip http authentication local ip http secure-server ! ! ip nat inside source list 1 interface Dialer0 overload ! access-list 1 permit 192.168.0.0 0.0.0.255 ! ! ! ! ! control-plane ! bridge 1 protocol ieee bridge 1 route ip ! line con 0 password 7 XXpasswordXX login no modem enable line aux 0 line vty 0 4 privilege level 15 login local transport input telnet ssh ! scheduler max-task-time 5000 end xelerc001#
Thanks to all in advance, Regards