Review PtP T1 configs for errors or suggestions

[oldplugger]

At this point everything is working. I want to know if I have made any glaring errors or if someone with more experience has some suggestions about things to clean up.

I would like to switch from RIP to either IGRP or EIGRP. And would be interested in the changes that should be made to do that.

I have 2 sites seperated by several hundred miles which I will call Site A and Site B. With a Point to Point T1 connecting them. One of the sites (Site A) also has a T1 connection to the outside.

All hardware was purchased and installed, just not working when I first looked at things. My goal was to make as few changes as I could and spend as little time on this as I could. Since it was a freebee.

All I did was program the 2 cisco routers and have them point the computers to the cisco's as gateways.

Site A:

requirements at site A,
access the internet,
access the site B (x.x.10.0 subnet) for normal network
items such as email server, terminal server, etc.

<internet - T1>
|
|
SonicWall FireWall (public side with static IP from ISP)
|
SonicWall FireWall (private side x.x.1.10)
|
|
--------------------------- = x.x.1.0 internal subnet
| with all computers setup with a gateway
| of x.x.1.9 (the Cisco 1720)
|
Cisco 1720 (FastEthernet0, x.x.1.9)
|
Cisco 1720 (Serial0, unnumbered FastEthernet0)
|
| Point to Point connection to Site B


Site B

requirements at site B
access the internet through site A's T1
access the x.x.10.0 subnet for normal network
items such as email server, terminal server, etc.

| Point to Point connection to Site A
|
Cisco 2620 (Serial0, x.x.100.1)
|
Cisco 2620 (FastEthernet0, x.x.10.9)
|
|
|
--------------------------- = x.x.10.0 internal subnet
with all computers setup with a gateway
of x.x.10.9 (the Cisco 2620)


Config 1720 - Site A

Cisco1720#show run
Building configuration...

Current configuration : 838 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Cisco1720
!
enable password **********
!
memory-size iomem 25
ip subnet-zero
no ip domain-lookup
!
!
!
!
interface FastEthernet0
description connected to LAN_Site_A
ip address 192.168.1.9 255.255.255.0
no keepalive
speed auto
!
interface Serial0
description connected to Cisco2620
ip unnumbered FastEthernet0
encapsulation ppp
service-module t1 remote-alarm-enable
!
router rip
version 2
network 192.168.1.0
network 192.168.10.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.10
no ip http server
!
!
line con 0
exec-timeout 0 0
password **********
login
line aux 0
line vty 0 4
password **********
login
!
end


Config 2620 - Site B

Cisco2620#show run
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Cisco2620
!
enable password **********
!
!
!
!
!
ip subnet-zero
no ip domain-lookup
!
!
!
!
interface FastEthernet0/0
description connected to LAN_Site_B
ip address 192.168.10.9 255.255.255.224
no ip directed-broadcast
no keepalive
duplex auto
speed auto
!
interface Serial0/0
description connected to Cisco1720
ip address 192.168.100.1 255.255.255.0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
service-module t1 remote-alarm-enable
!
router rip
version 2
network 192.168.10.0
network 192.168.100.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0
ip route 192.168.1.0 255.255.255.0 Serial0/0
ip route 192.168.10.0 255.255.255.0 FastEthernet0/0
no ip http server
!
snmp-server engineID local **********
!
line con 0
exec-timeout 0 0
password **********
login
transport input none
line aux 0
line vty 0 4
password **********
login
!
no scheduler allocate
end

 

[tknofile]

I haven't implemented my own version of your configuration yet. My only question is where do any of the configurations point to the SonicWall (x.x.1.10)for access to the outside world? Everything else looks good.

 

[lgarner]

The "ip route 0.0.0.0 0.0.0.0 192.168.1.10" takes care of outbound access.

Personally, I'd put an IP address on s0 of the 1720 in the 192.168.100 network. When troubleshooting, it's nice to be able to ping the closest interface to rule out connection problems.