How to configure a vro to access the public network

China Telecom's bandwidth is 2 M and the assigned fixed IP Address: 202.249.11.101 subnet mask: 255.255.255.255.248 Gateway: 202.249.11.20 planned IP address range: 192.168.0.2-192.168.0.254 subnet mask: 255.255.255.255.248 Gateway: 192.168.0.1 vro provides a 1721 M Adaptive port for Cisco 10/100. Next, we need to configure a 1ENET expansion card with a 10 M RJ45 port on the card. We use the 1ENET port as the Internet port and the port on the machine as the Intranet port. The configuration process is as follows: router> [color = red] en [/color] // Enter privileged configuration mode Router # [color = red] configure terminal [/color] // Enter global configuration mode Enter configuration commands, one per line. end with CNTL/Z. (The prompt automatically appears on the device, which tells you that you have already logged on to the main console) router <config> # [color = red] interface FastEthernet 0 [/color] // first enter the Intranet port (the device's own port) www.2cto.com Router <config-if> # [color = red] ip address 192.168.0.1 255.255.255.0 [/color] // specify the ip address and subnet mask of the Intranet Port
Router <config-if> # [color = red] ip nat inside [/color] // defines this port as an address translation (NAT) "internal port" Router <config-if> # [color = red] no shutdown [/color] // make the port "running" Router <config-if> # [color = red] exit [/color] // return to Router <config> # [color = red] interface Ethernet 0 [/color] // enter the Internet port (the port above 1ENET)) router <config-if> # [color = red] ip address 202.249.11.101 255.255.255.255.248 [/color] // specify the Internet ip address and subnet mask of the Router <config-if> # [color = red] ip nat outside [/color] // define this port as an address translation (NAT) "External port" Router <config-if> # [color = red] no shutdown [/color] // make the port "running" Router <config-if> # [color = red] exit [/color] // return to the Router <config> # ip route 0.0.0.0 0.0.0.0 202.249.11.20 [/color] // define the route address Router <config> # [color = red] no access-list 1 [/color] // cancel the access control list "1" Router <config> # [color = red] access-list 1 in the factory. permit 192.168.0.0 0.0.255 [/color] // redefine the "1" in the access control list as "allowed CIDR blocks of 192.168.0.0/24"
Router <config> # [color = red] ip nat pool nanpool 202.249.11.97 202.249.11.102 netmask 255.255.255.248 [/color] // defines the policies for allocating public ip addresses applied from the ISP supplier to the Enterprise, here we define an address pool named "nanpool". The IP addresses (from 202.249.11.97 to 202.249.11.102) defined in this pool will be used by Intranet users to access the Internet. If the ISP only gives you one ip address (for example, 202.249.11.101), you can write "ip nat pool nanpool 202.249.11.101 202.249.11.101 netmask implements 255.255.248" www.2cto.com
Router <config> # [color = red] ip nat inside source list 1 pool nanpool overload [/color] // matches the access control list "1" with the address pool "nanpool "BIND. This means that when all users in the "192.168.0.0" network segment access the Internet, their intranet addresses will be converted to any Internet address in "202.249.11.97-202.249.11.102. The subsequent "overload" indicates that if there is more than the number of addresses defined in the address pool (for example, there were 6 users accessing the internet, their respective Internet addresses are 202.249.11.97, 202.249.11.98, 202.249.11.99, 202.249.11.100, 202.249.11.101, and 202.249.11.102. Now, 30 users suddenly access the Internet, and then they will execute a task according to the above command, that is, to allow multiple Intranet users to use the same Internet address. In this way, the nanpool address pool can drive all users on the Intranet to access the Internet. Therefore, this command is very important !).
Router <config> # [color = red] enable password 12345 [/color] // set the password to "12345" Router <config> # [color = red] enable secret 12345 [/ color] // set the privileged ciphertext to "12345" Router <config> # [color = red] line console 0 [/color] // enter the "0" port Router on the main console <config-line> # [color = red] password cisco [/color] // set the logon password to "cisco" Router <config-line> # [color = red] login [/color] // set the "0" Port of the console to "Allow Logon" Router <config-line> # [color = red] exit [/color] // exit router <config> # [color = red] line vty 0 4 [/color] // enter the VTY (terminal ue terminal line virtual terminal, usually for Telnet logon)
Router <config-line> # [color = red] password cisco [/color] // set the password to "cisco" Router <config-line> # [color = red] exec-timeout 5 0 [/color] // After logging on to the vro, if you do not perform any operation, it will be disconnected from the vro after 5 minutes 0 seconds. If you do not enter this command, when you enter the vro without entering any content, the vro will be automatically kicked out 10 minutes later. The complete format of the "exec-timeout" command is exec-timeout x (that is, exec-timeout in seconds). Note: if you enter "exec-timeout 0 0" here, it means that you will always be connected to the vro, unless you have your own logout. Www.2cto.com Router <config-line> # [color = red] login [/color] // never forget this last login ~ This is an important command to allow virtual terminal login.
Now the configuration process is complete. In the preceding configuration, the DHCP function is not enabled on the vrodhcp. Therefore, if you want to access the Internet, you must set the NIC. For example, after the IP address of the client Nic is set to 192.168.0.3 subnet mask: 255.255.255.0 Gateway: 192.168.0.1 primary DNS address: 202.106.0.20 backup DNS address: 202.106.46.151, most of my friends use the Cisco 1721 router, a DHCP server will be set up in the LAN to work, and IP addresses can be allocated to machines in the LAN, thus saving 1721 of the memory. We recommend that you use this network. By the way, when talking about the vro memory, I will introduce some common commands to you. Remember this ~
The following commands are all in the "Router #" status: show version: displays the hardware configuration, software version, configuration file source and name, and boot image information. Show processes: shows that the current active process show prot Telecom broadband is 2 M, assigned to a fixed IP Address: 202.249.11.101 subnet mask: 255.255.255.248 Gateway: 202.249.11.20 planned IP address range: 192.168.0.2-192.168.0.254 subnet mask: 255.255.255.248 Gateway: 192.168.0.1 vro provides a 1721 M Adaptive port for Cisco 10/100. Next, we need to configure a 1ENET expansion card with a 10 M RJ45 port on the card. We use the 1ENET port as the Internet port and the port on the machine as the Intranet port. The configuration process is as follows: router> [color = red] en [/color] // Enter privileged configuration mode Router # [color = red] configure terminal [/color] // Enter global configuration mode Enter configuration commands, one per line. end with CNTL/Z. (The prompt automatically appears on the device, which tells you that you have already logged on to the main console) router <config> # [color = red] interface FastEthernet 0 [/color] // first enter the Intranet port (the device's own port) www.2cto.com Router <config-if> # [color = red] ip address 192.168.0.1 255.255.255.0 [/color] // specify the ip address and subnet mask of the Intranet Port
Router <config-if> # [color = red] ip nat inside [/color] // defines this port as an address translation (NAT) "internal port" Router <config-if> # [color = red] no shutdown [/color] // make the port "running" Router <config-if> # [color = red] exit [/color] // return to Router <config> # [color = red] interface Ethernet 0 [/color] // enter the Internet port (the port above 1ENET)) router <config-if> # [color = red] ip address 202.249.11.101 255.255.255.255.248 [/color] // specify the Internet ip address and subnet mask
Router <config-if> # [color = red] ip nat outside [/color] // define the port as an address translation (NAT) "External port" Router <config-if> # [color = red] no shutdown [/color] // make the port "running" Router <config-if> # [color = red] exit [/color] // return to the Router <config> # ip route 0.0.0.0 0.0.0.0 202.249.11.20 [/color] // define the route address Router <config> # [color = red] no access-list 1 [/color] // cancel the access control list "1" Router <config> # [color = red] access-list 1 in the factory. permit 192.168.0.0 0.0.255 [/color] // redefine the "1" in the access control list as "allowed CIDR blocks of 192.168.0.0/24"
Router <config> # [color = red] ip nat pool nanpool 202.249.11.97 202.249.11.102 netmask 255.255.255.248 [/color] // defines the policies for allocating public ip addresses applied from the ISP supplier to the Enterprise, here we define an address pool named "nanpool". The IP addresses (from 202.249.11.97 to 202.249.11.102) defined in this pool will be used by Intranet users to access the Internet. If the ISP only gives you one ip address (for example, 202.249.11.101), you can write "ip nat pool nanpool 202.249.11.101 202.249.11.101 netmask implements 255.255.248" www.2cto.com
Router <config> # [color = red] ip nat inside source list 1 pool nanpool overload [/color] // matches the access control list "1" with the address pool "nanpool "BIND. This means that when all users in the "192.168.0.0" network segment access the Internet, their intranet addresses will be converted to any Internet address in "202.249.11.97-202.249.11.102. The subsequent "overload" indicates that if there is more than the number of addresses defined in the address pool (for example, there were 6 users accessing the internet, their respective Internet addresses are 202.249.11.97, 202.249.11.98, 202.249.11.99, 202.249.11.100, 202.249.11.101, and 202.249.11.102. Now, 30 users suddenly access the Internet, and then they will execute a task according to the above command, that is, to allow multiple Intranet users to use the same Internet address. In this way, the nanpool address pool can drive all users on the Intranet to access the Internet. Therefore, this command is very important !).
Router <config> # [color = red] enable password 12345 [/color] // set the password to "12345" Router <config> # [color = red] enable secret 12345 [/ color] // set the privileged ciphertext to "12345" Router <config> # [color = red] line console 0 [/color] // enter the "0" port Router on the main console <config-line> # [color = red] password cisco [/color] // set the logon password to "cisco" Router <config-line> # [color = red] login [/color] // set the "0" Port of the console to "Allow Logon" Router <config-line> # [color = red] exit [/color] // exit router <config> # [color = red] line vty 0 4 [/color] // enter the VTY (terminal ue terminal line virtual terminal, usually for Telnet logon)
Router <config-line> # [color = red] password cisco [/color] // set the password to "cisco" Router <config-line> # [color = red] exec-timeout 5 0 [/color] // After logging on to the vro, if you do not perform any operation, it will be disconnected from the vro after 5 minutes 0 seconds. If you do not enter this command, when you enter the vro without entering any content, the vro will be automatically kicked out 10 minutes later. The complete format of the "exec-timeout" command is exec-timeout x (that is, exec-timeout in seconds). Note: if you enter "exec-timeout 0 0" here, it means that you will always be connected to the vro, unless you have your own logout. Router <config-line> # [color = red] login [/color] // never forget this last login ~ This is an important command to allow virtual terminal login. Www.2cto.com
Now the configuration process is complete. In the preceding configuration, the DHCP function is not enabled on the vrodhcp. Therefore, if you want to access the Internet, you must set the NIC. For example, after the IP address of the client Nic is set to 192.168.0.3 subnet mask: 255.255.255.0 Gateway: 192.168.0.1 primary DNS address: 202.106.0.20 backup DNS address: 202.106.46.151, most of my friends use the Cisco 1721 router, a DHCP server will be set up in the LAN to work, and IP addresses can be allocated to machines in the LAN, thus saving 1721 of the memory. We recommend that you use this network. By the way, when talking about the vro memory, I will introduce some common commands to you. Remember this ~
The following commands are all in the "Router #" status: show version: displays the hardware configuration, software version, configuration file source and name, and boot image information. Show processes: displays the current active process show protocols: displays the configured Protocol show memory: displays the router memory information show ip route: displays the route table information show flash: show running-config: displays the current activity information show startup-config: displays the backup configuration file show interfaces: displays the configured port properties. For example, show interface eth0 will display the configuration information of Ethernet 0 :) www.2cto.com
Ocols: displays the configured Protocol show memory: displays the memory information of the router show ip route: displays the route table information show flash: displays the flash device information show running-config: show startup-config: shows the backup configuration file show interfaces: displays the configured port properties. For example, show interface eth0 will display the configuration information of Ethernet 0 :)