Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations bkrike on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

check my configuration and give a recommendation if you can

Status
Not open for further replies.

superjett

MIS
Jun 18, 2004
62
US
We had a power outage over the weekend and between our Sonicwall and the 2621's, we lost some configuration (probably wasn't written to memory) so I'm looking for a definitive answer to what we need.

We have a fairly simple system

internet
|
ISP router
|
Sonicwall firewall---10.5.80.80 internal IP
|
10.5.0.0/16 network
|
Cisco 2621---10.5.101.1 fastethernet0/0
-------------172.16.1.2/24 serial0/0
|
point to point T1
|
Cisco 2621---172.16.1.1/24 serial0/0
-------------10.6.101.1 fastethernet0/0
|
10.6.0.0/16 network


Here are the show ip route outputs:
10.5.101.1 router:

Gateway of last resort is 10.5.80.80 to network 0.0.0.0

172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Serial0/0
10.0.0.0/16 is subnetted, 2 subnets
R 10.6.0.0 [120/1] via 172.16.1.1, 00:00:01, Serial0/0
C 10.5.0.0 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 [1/0] via 10.5.80.80

10.6.101.1 router:

Gateway of last resort is 172.16.1.2 to network 0.0.0.0

172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Serial0/0
10.0.0.0/16 is subnetted, 2 subnets
C 10.6.0.0 is directly connected, FastEthernet0/0
R 10.5.0.0 [120/1] via 172.16.1.2, Serial0/0
S* 0.0.0.0/0 [1/0] via 172.16.1.2


Should this work, or is there a better configuration or ? Currently it's not functioning properly. Both subnets should be allowed internet access and be aware of each other.

Thanks for your time if you can help and either verify or recommend a change.
 
Well on a point to point connection you don't need to use a whole subnet. In fact you could even just use unnumbered.
 
10.5.101.1 router:
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname B
!
enable password
!
memory-size iomem 10
ip subnet-zero
no ip domain-lookup
!
interface FastEthernet0/0
description connected to B LAN
ip address 10.5.101.1 255.255.0.0
no ip directed-broadcast
duplex auto
speed auto
!
interface Serial0/0
description connected to C LAN
ip address 172.16.1.2 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
!
interface FastEthernet0/1
no ip address
no ip directed-broadcast
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
no ip directed-broadcast
shutdown
!
router rip
version 2
network 10.0.0.0
network 172.16.0.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 68.156.55.1
ip route 0.0.0.0 0.0.0.0 10.5.80.80
no ip http server
!
snmp-server engineID local 00000009020000B064535920
snmp-server community public RO
snmp-server location B
snmp-server contact
banner motd
!
line con 0
exec-timeout 0 0
password
login
transport input none
line aux 0
line vty 0 4
password
login
!
no scheduler allocate
end


10.6.101.1 router:

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname C
!
enable password
!
ip subnet-zero
no ip domain-lookup
!
interface FastEthernet0/0
description connected to C LAN
ip address 10.6.101.1 255.255.0.0
no ip directed-broadcast
!
interface Serial0/0
description connected to B LAN
ip address 172.16.1.1 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
!
interface FastEthernet0/1
no ip address
no ip directed-broadcast
shutdown
!
interface Serial0/1
no ip address
no ip directed-broadcast
shutdown
!
router rip
version 2
network 10.0.0.0
network 172.16.0.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.16.1.2
no ip http server
!
snmp-server engineID local 00000009020000036BE1EC00
snmp-server community public RO
snmp-server location C
snmp-server
banner motd
!
line con 0
exec-timeout 0 0
password
login
transport input none
line aux 0
line vty 0 4
password
login
!
no scheduler allocate
end


Just in looking at those outputs, I think I'm seeing something but I'll let some of you experts give me the real answer.
 
Things that caught my eye/raise questions include:

1. How many devices on the /16 subnets? If over 512, consider subnetting further to avoid potential broadcast storm conditions.

2. What is function of this default route on 10.5.101.1

ip route 0.0.0.0 0.0.0.0 68.156.55.1

with that line there, it will load-balance all generic traffic between 68.156.55.1 and 10.5.80.80. Is this the intention?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top