NT Server and Cisco router

[Bush]

Administrator of a small NT TCP/IP LAN. Recently got T1 line with CISCO router. I'm going to use the router just to connect the LAN to a ISP for now. Looking for some basic configurations/steps to get me started. Will be connecting two offices with VPN with in a few weeks. Will there be much to configure at that point. [sig][/sig]

 

[jeter]

Here is a sample of a frame-relay T1 ISP connection . obviously your IP's will be
different from this sample config however you should do just find . Good Luck !!!

Building configuration...
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
!
!
!
!
!
memory-size iomem 25
ip subnet-zero
ip name-server 208.19.225.20
ip name-server 205.244.200.3
ip name-server 204.117.214.10
ip name-server 199.2.252.10
ip name-server 204.97.212.10
!
!
!
!
interface Serial0
no ip address
no ip directed-broadcast
encapsulation frame-relay IETF
no fair-queue
service-module t1 timeslots 1-8
frame-relay lmi-type ansi
!
interface Serial0.1 point-to-point
description circuit# 60.QBDA.289440 FRAME RELAY TO INTERNET
ip address 208.19.224.106 255.255.255.252
no ip directed-broadcast
frame-relay interface-dlci 17
!
interface FastEthernet0
ip address 206.159.183.217 255.255.255.248
no ip directed-broadcast
half-duplex
!
ip classless
ip route 0.0.0.0 0.0.0.0 208.19.224.105
ip http server
!
!
line con 0
exec-timeout 30 0
password ????
login
transport input none
line aux 0
exec-timeout 30 0
password ?????
login
modem InOut
modem autoconfigure discovery
speed 2400
line vty 0 4
exec-timeout 30 0
password ????
login
!
end [sig][/sig]

 

[tuks]

Arent you going to use access list since you are connected to the Internet ? Just for security reasons.

Thanks [sig][/sig]

 

[jeter]

This sample is behind a firewall !!!! Of course I did not provide our correct IP address.
That just would not be too SMART . [sig][/sig]

 

[ariev]

Hi

A few comments on the example:
add:
service password-encryption
enable secret <password> - would be used for enable mode
line vty 0 4
password <telnet password>
exec
login
end

also, there is no use to use 4 DNS servers... I guess 2 are more than enough.
another thing, why to buy a fastethernet router, switches and then use it with halfduplex? configure it to fullduplex, and all those collisions will go away (don't forget to configure it on the switch as well)

Arie [sig][/sig]

 

[jeter]

good comments on the encryption , enable secret, and the dns servers . A person starting out may not know to activate these features . As far as the FastEthernet we installed a cisco 1700 per the customers request . [sig][/sig]

 

[Bush]

Thanks everyone, I appreciate the response. If someone could answer this you'll be my hero. Is there a third- party software thats good for this set-up and a fire-wall, maybe with GUI, ha-ha you guys lost be alittle bit.I really don't have much experince with routers. I guess this is the best way to learn? [sig][/sig]

 

[BusinessPhoneSystems]

You can use CISCO Config Maker to do some of the work for you.
This is a GUI driven configuration program that comes free with most of the routers/feature packs.
However, that said, I only ever use it to give me an idea of the code and often only take small samples of code that it has prepared rather than taking the whole config.
It may be that it is available for download from

http://www.cisco.com.

Having said all that, Config maker is alright for router config and basic access lists etc. but, advance config in IOS I have found best when created manually.
The certification cisco & 3rd Party books are often good on things like access lists.
In terms of Firwalls, there are many third party software and hardware solutions with very easy to use GUIs. However, CISCOs offering is the PIX fire wall.
I have very limited knowledge of the PIX firewall but, I believe it is a hardware solution with a couple of versions. Once again I beleive you can use Config Maker to do some of the configuration.
I would like some more info my self on the PIX solutions as firewalls are becoming an essencial part of WAN infastructures and the PIX solution looks to be a good solution for CISCO users. Hence, I would be interested in any other comments!
Regards

Richad
[sig][/sig]