cisco 2811 e tiscali business

Configurazioni per connettività ADSL, ISDN e switch per privati e piccole network

Moderatore: Federico.Lagni

Avatar utente
François
Cisco fan
Messaggi: 36
Iscritto il: mer 04 mar , 2009 4:25 pm

paolomat75 ha scritto:Non considerare il mio post precedente allora :-D
:D :D
CCNA certified
CCAI certified
CCNP Route in progress
ello212
n00b
Messaggi: 9
Iscritto il: lun 14 feb , 2011 6:23 pm

François ha scritto:La configurazione che ho postato è da me utilizzata su vari cisco 877 con ADSL Tiscali Business e funziona regolarmente. Non devi specificare tu l'IP in quanto Tiscali assegna l'IP statico ai suoi clienti Business in base alla username, pertanto lascia pure l'autonegoziazione, sarà poi Tiscali ad assegnarti il tuo IP statico.

Posteresti la tua conf?
ciao
questa è il config
Using 1614 out of 196600 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service dhcp
!
hostname gelda
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password 7 xxxxxxxx
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
username xxxxxx privilege 15 password 7 xxxxxxxxxx
archive
log config
hidekeys
!
!
!
!
!
!
interface FastEthernet0/0
ip address negotiated
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface ATM0/0/0
mtu 1492
no ip address
no atm ilmi-keepalive
!
interface ATM0/0/0.835 point-to-point
bandwidth 24576
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface Dialer0
mtu 1492
ip address 217.133.3.215 255.255.255.0
ip nat outside
ip virtual-reassembly max-fragments 64 max-reassemblies 1024
encapsulation ppp
dialer pool 1
no cdp enable
ppp pap sent-username xxxxxxx password 7 xxxxxxxxxxxx

ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
no ip http secure-server
!
!
ip nat inside source list 9 interface Dialer0 overload
!
access-list 9 permit 10.10.10.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4 password 7 xxxxxxxxxxxx
login
!
scheduler allocate 20000 1000
end
Ultima modifica di ello212 il sab 01 ott , 2011 11:15 pm, modificato 1 volta in totale.
Avatar utente
François
Cisco fan
Messaggi: 36
Iscritto il: mer 04 mar , 2009 4:25 pm

prova a modificarla così:

Codice: Seleziona tutto

interface ATM0/0/0
mtu 1492
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0/0/0.835 point-to-point
bandwidth 24576
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface Dialer0
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly max-fragments 64 max-reassemblies 1024
encapsulation ppp
dialer pool 1
no cdp enable
ppp chap hostname [email protected]
ppp chap password 0 XXXXXXX
ppp pap sent-username [email protected] password 7 050E0A0A35585C08
Hai dimenticato di inserire il comando "dsl operating-mode auto" sotto l'int atm0/0/0 e hai poi dimenticato di configurare il CHAP sulla dialer, e se non vado errando Tiscali autentica proprio in CHAP.

consiglio: occhio a mettere username e password così su internet, non sai mai chi legge. Anche se le password sono criptate in type7 ci vuole veramente un nonnulla a decriptarle. :wink:
CCNA certified
CCAI certified
CCNP Route in progress
ello212
n00b
Messaggi: 9
Iscritto il: lun 14 feb , 2011 6:23 pm

buongiorno

ringrazio calorosamente francois per il sostegno e la pazienza dimostrata, ora il mio 2811 si collega finalmente alla rete tiscali, ora non volendo abusare della disponibilità dimostratami fin ora mi piacerebbe sapere come aprire delle porte tcp e udp e rtp.
nello specifico mi server di aprire la porta tcp 25 per il server di posta, la porta udp 5060 e rtp da 10000 a 12000 per centralino asterisk e la tcp 1723 per vpn.
grazie Dario
Avatar utente
François
Cisco fan
Messaggi: 36
Iscritto il: mer 04 mar , 2009 4:25 pm

Buongiorno Dario,

figurati, le community servono a questo :wink:
Per aprire dei NAT come servono a te devi utilizzare la sintassi dei seguenti esempi:

Codice: Seleziona tutto

ip nat inside source static udp 192.168.1.1 5060 interface Dialer0 5060
ip nat inside source static tcp 192.168.1.2 1723 interface Dialer0 1723

Ti consiglio di abbinare a questi NAT delle ACL che ti consentano di bloccare il traffico indesiderato. Fai particolare attenzione all'asterisk, nattarlo in pubblica è molto pericoloso se non implementi un minimo di sicurezza. Lavorando molto con PBX Asterisk, ti consiglio di:
- fare delle ACL specifiche a protezione della macchina asterisk;
- impostare correttamente gli allow e i deny sulle estensioni SIP in modo da consentire l'autenticazione solo dalle LAN consentite (se non vuoi farlo a mano su ogni estensione puoi impostare la regola direttamente dal DB)
- non usare estensioni o password scontate in quanto sono le prime che vengono utilizzate per provare a fare attacchi sulla 5060
CCNA certified
CCAI certified
CCNP Route in progress
ello212
n00b
Messaggi: 9
Iscritto il: lun 14 feb , 2011 6:23 pm

buongiorno

per aorire le porte ho usato il codice seguente

Codice: Seleziona tutto

ip nat pool voip 192.168.0.6 192.168.0.6 netmask 255.255.255.0 type rotary
ip nat source static tcp 192.168.0.6 25 interface Dialer0 25
ip nat source static tcp 192.168.0.6 1723 interface Dialer0 1723
ip nat source static udp 192.168.0.6 5060 interface Dialer0 5060
ip nat source static udp 192.168.0.6 4569 interface Dialer0 4569
ip nat source static tcp 192.168.0.6 80 interface Dialer0 80
ip nat source static tcp 192.168.0.6 22 interface Dialer0 22
ip nat inside source list 9 interface Dialer0 overload
ip nat inside source list 101 interface Dialer0 overload
ip nat inside destination list 101 pool voip
!
access-list 9 permit 192.168.0.0 0.0.0.255
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
access-list 101 permit udp any any range 10000 12000
dialer-list 1 protocol ip permit
provato con questa conf, le porte risultano bloccate, penso di aver usato male le ACL, le telefonate in uscita vanno abbastanza bene, quelle in entrata si boccano dopo pochi secondi, significa che le porte rtp sono bloccate.

per quanto riguarda asterisk, per renderlo più sicuro sperando di aver fatto bene, è già nattato su server di posta, uso una distribuzione 7.5.1 di SME server, con firewall configurato e in più ho attivato il firerwall su asterisk stesso e installato fail2ban che mi invia immediatamente e-mail nel caso di attacchi, diciamo che finora sono stato abbastanza immune speriamo che duri.
ello212
n00b
Messaggi: 9
Iscritto il: lun 14 feb , 2011 6:23 pm

ciao
mi sa che il casino l'ho fatto qua

Codice: Seleziona tutto

ip nat pool voip 192.168.0.6 192.168.0.6 netmask 255.255.255.0 type rotary
qui ho dato un indirizzo unico

Codice: Seleziona tutto

access-list 101 permit ip 192.168.0.0 0.0.0.255 any
e qui l' ho ubriacato dicendogli che possono accedere tutti
davide24
n00b
Messaggi: 4
Iscritto il: gio 28 gen , 2016 6:42 pm

Salve a tutti.
Ho un problema mi potete aiutare?

Ho un router 1800 che vorrei fare andare con tiscali business la conf è questa,

dove sbaglio?

Grazie

Adsl_Forcate>ena
Password:
Adsl_Forcate#show conf
Using 1778 out of 196600 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Adsl_F****
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable secret 5 $1$/jgB$LJE5.aGbfh8UT1JuFfmYn1
enable password *****
!
no aaa new-model
ip source-route
no ip routing
!
!
!
!
no ip cef
no ip domain lookup
multilink bundle-name authenticated
!
!
username admin privilege 15 password 0 admin
username administrator privilege 15 secret 5 *****
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.1.67 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
!
interface ATM0/0/0
mtu 1492
no ip address
no ip route-cache
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface ATM0/0/0.835 point-to-point
bandwidth 24576
no ip route-cache
!
interface Dialer0
description connessione a internet
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
no cdp enable
ppp chap hostname *****
ppp chap password 0 ****
ppp pap sent-username **** password 0 ***
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
ip http server
ip http authentication local
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
privilege level 15
password ***
login
transport input telnet
!
scheduler allocate 20000 1000
end
ohmygod
Cisco fan
Messaggi: 29
Iscritto il: gio 14 dic , 2006 8:14 pm

Prova a modificarla così:

interface ATM0/0/0
no ip address
no atm ilmi-keepalive
!
interface ATM0/0/0.835point-to-point
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
davide24
n00b
Messaggi: 4
Iscritto il: gio 28 gen , 2016 6:42 pm

Ho rifatto la configurazione ma purtroppo niente.
posto lo stato delle interfacce e della configurazione.
-ho dato il comando "dsl operating-mode auto" lo prende ma non lo fa vedere
-ho messo la password in chiaro con lo 0 perchè non so metterla cifrata.

Router#show interface

FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is 0018.1846.6826 (bia 0018.1846.6826)
Internet address is 192.168.1.67/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 7000 bits/sec, 10 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
13913 packets input, 1391916 bytes
Received 10526 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
949 packets output, 71411 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
289 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
FastEthernet0/1 is administratively down, line protocol is down
Hardware is Gt96k FE, address is 0018.1846.6827 (bia 0018.1846.6827)
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Auto-duplex, Auto Speed, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
ATM0/0/0 is up, line protocol is up
Hardware is HWIC-DSLSAR (with Alcatel ADSL Module)
MTU 1492 bytes, sub MTU 1492, BW 320 Kbit/sec, DLY 1600 usec,
reliability 255/255, txload 3/255, rxload 1/255
Encapsulation ATM, loopback not set
Encapsulation(s): AAL5 AAL2, PVC mode
23 maximum active VCs, 256 VCs per VP, 1 current VCCs
VC Auto Creation Disabled.
VC idle disconnect time: 300 seconds
Last input never, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 21
Queueing strategy: Per VC Queueing
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 4000 bits/sec, 2 packets/sec
286 packets input, 7687 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
2935 packets output, 633257 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
ATM0/0/0.835 is up, line protocol is up
Hardware is HWIC-DSLSAR (with Alcatel ADSL Module)
MTU 1492 bytes, BW 320 Kbit/sec, DLY 1600 usec,
reliability 255/255, txload 3/255, rxload 1/255
Encapsulation ATM
288 packets input, 8867 bytes
2941 packets output, 634499 bytes
0 OAM cells input, 0 OAM cells output
AAL5 CRC errors : 0
AAL5 SAR Timeouts : 0
AAL5 Oversized SDUs : 0
Last clearing of "show interface" counters never
NVI0 is up, line protocol is up
Hardware is NVI
Interface is unnumbered. Using address of FastEthernet0/0 (192.168.1.67)
MTU 1514 bytes, BW 56 Kbit/sec, DLY 5000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation UNKNOWN, loopback not set
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
Virtual-Access1 is up, line protocol is up
Hardware is Virtual Access interface
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, LCP Closed
Base PPPoATM vaccess
Vaccess status 0x44, loopback not set
DTR is pulsed for 5 seconds on reset
Last input never, output never, output hang never
Last clearing of "show interface" counters 00:21:13
Input queue: 0/4096/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
Virtual-Access2 is up, line protocol is up
Hardware is Virtual Access interface
MTU 1492 bytes, BW 320 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 2/255, rxload 1/255
Encapsulation PPP, LCP Open
Open: IPCP
PPPoATM vaccess, cloned from Dialer0
Vaccess status 0x44
Bound to ATM0/0/0.835 VCD: 1, VPI: 8, VCI: 35, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 5 seconds on reset
Interface is bound to Di0 (Encapsulation PPP)
Last input 00:00:36, output never, output hang never
Last clearing of "show interface" counters 00:20:43
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 3000 bits/sec, 1 packets/sec
288 packets input, 7715 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
2970 packets output, 630872 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
Dialer0 is up, line protocol is up (spoofing)
Hardware is Unknown
Internet address is 217.133.22.***/32
MTU 1492 bytes, BW 56 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 1 seconds on reset
Interface is bound to Vi2
Last input never, output never, output hang never
Last clearing of "show interface" counters 00:21:21
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/0/16 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 42 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
31 packets input, 3943 bytes
2957 packets output, 632537 bytes
Bound to:
Virtual-Access2 is up, line protocol is up
Hardware is Virtual Access interface
MTU 1492 bytes, BW 320 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 3/255, rxload 1/255
Encapsulation PPP, LCP Open
Open: IPCP
PPPoATM vaccess, cloned from Dialer0
Vaccess status 0x44
Bound to ATM0/0/0.835 VCD: 1, VPI: 8, VCI: 35, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 5 seconds on reset
Interface is bound to Di0 (Encapsulation PPP)
Last input 00:00:42, output never, output hang never
Last clearing of "show interface" counters 00:20:52
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 4000 bits/sec, 2 packets/sec
290 packets input, 7743 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
2983 packets output, 633639 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions




Configurazione:

Router#show config
Using 1370 out of 196600 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
ip source-route
!
!
!
!
ip cef
multilink bundle-name authenticated
!
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.1.67 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface ATM0/0/0
mtu 1492
no ip address
no atm ilmi-keepalive
!
interface ATM0/0/0.835 point-to-point
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface Dialer0
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly max-fragments 64 max-reassemblies 1024
encapsulation ppp
dialer pool 1
no cdp enable
ppp chap hostname *****@tiscali.it
ppp chap password 0 *****
ppp pap sent-username ********@tiscali.it password 0 *****
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
no ip http server
ip nat inside source list 9 interface Dialer0 overload
!
access-list 9 permit 10.10.10.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end
davide24
n00b
Messaggi: 4
Iscritto il: gio 28 gen , 2016 6:42 pm

:D :D :D :D :D :D :D
La configurazione giusta è questa !!

Using 1374 out of 196600 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
ip source-route
!
!
!
!
ip cef
multilink bundle-name authenticated
!
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
no ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface ATM0/0/0
mtu 1492
no ip address
no atm ilmi-keepalive
!
interface ATM0/0/0.835 point-to-point
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface Dialer0
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly max-fragments 64 max-reassemblies 1024
encapsulation ppp
dialer pool 1
no cdp enable
ppp chap hostname ******@tiscali.it
ppp chap password 0 ******
ppp pap sent-username ******@tiscali.it password 0 ****
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
no ip http server
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end
ohmygod
Cisco fan
Messaggi: 29
Iscritto il: gio 14 dic , 2006 8:14 pm

Quindi il problema era l'access list che abilitava una subnet diversa da quella della fastethernet 0/0 e quindi non ti faceva accedere al router
Rispondi