[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1139
  • Last Modified:

Cisco 2514 Router with Motorola Surfboard Cable Modem

Hi guys,

I have one computer which is connected by Ethernet NIC to a Motorola Surfboard Cable modem to access the internet.
What I would like to do is to hook up a Cisco 2514 Router to the cable modem and PC and configure a firewall on the cisco router, still enabling internet access through the cable modem.
The router has a built in hub. Any help on how I could configure this would be great.
Thanks in advance.

Simon
0
Simon336697
Asked:
Simon336697
  • 5
  • 3
1 Solution
 
JFrederick29Commented:
Here is a basic config:

Ethernet0
ip address dhcp  <---if your provider uses dhcp
ip nat outside
ip access-group 101 in

Ethernet1
ip address 192.168.0.1 255.255.255.0
ip nat inside

ip nat inside source list 1 interface ethernet0 overload

access-list 1 permit 192.168.0.0 0.0.0.255

access-list 101 permit udp any eq 53 any          <--- Allow return DNS replies
access-list 101 permit tcp any any established   <--- Allow established TCP sessions from the inside network
access-list 101 permit icmp any any echo-reply  <--- Allow icmp replies back into your network

Access-list 101 is a basic ACL which will only allow DNS lookups and TCP sessions intitiated from the inside network back into your LAN.  Cisco makes an IOS firewall which can be used.  It provides greater flexibility.  If you need to permit other udp traffic, you'll need to add access-list entries using the correct ports.
0
 
JFrederick29Commented:
Forgot a line:

ip route 0.0.0.0 0.0.0.0 ethernet0

Or if you know the next hop router at your ISP:

ip route 0.0.0.0 0.0.0.0 68.x.x.1  <---use correct IP address
0
 
Simon336697Author Commented:
Hi JFrederick29,

Really appreciate your help here mate.
Can you please just clarify a few things for me.

This is my setup at the moment.
   
          CAT5 Lead
PC------------------------Motorola Cable Modem-------------------Wall Socket

With the router included, would it look like the following?

           CAT5 Lead
PC-----------------------AUX1 of Router

Modem------------------AUX2 of Router

Of the above, which is Ethernet0 and Ethernet1 as you explain?

The IP Address information I have been given from my provider is as follows:

Ethernet adapter Local Area Connection:



        Connection-specific DNS Suffix  . : vic.assr.net.au

        Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
        Physical Address. . . . . . . . . : 00-0B-DB-2D-53-EG

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 138.217.162.12

        Subnet Mask . . . . . . . . . . . : 255.255.252.0

        Default Gateway . . . . . . . . . : 138.217.160.1

        DHCP Server . . . . . . . . . . . : 172.18.17.80

        DNS Servers . . . . . . . . . . . : 61.9.128.14

                                            61.9.192.15
                                            61.9.128.15


I just need a bit of help in physically setting up the connections between the router, the modem and the PC, and then determining from what you say what ethernet interfaces belong to what.
I really appreciate your help JFrederick29.

Simon
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
JFrederick29Commented:
AUI1 would be Ethernet0 and AUI2 would be Ethernet1.

Plug the CAT5 cable from the cable modem (that is currently going into your PC) into the tranceiver connected to AUI1.  Then if you want to connect your PC directly to the router, you'll need a crossover cable (straight through won't work) from your PC into the tranceiver connected to AUI2.  Alternatively, you can use a hub/switch in between your PC and the routers AUI2 tranceiver, you could use straight through cables in this case.

You are receiving an IP address from your provider via DHCP so use the "ip address dhcp" command as shown in the config I posted.
0
 
Simon336697Author Commented:
Hi JFrederick29,

Mate thank you so much.

Just one more thing and the points are yours (they are anyway!).

Previously without the router, I could control cable modem access to the Internet through cable modem software on my PC.
Now that the modem is not connected directly to the PCs NIC, but to an Ethernet port on the router, to stop Internet activity, do I have to shut down the interface each time on the router then bring it back up again to get Internet connectivity?
Also, as the internal network will be something like 192.168.x.x, will this mean I have to statically assign an IP address to my PC's network card and also the ethernet port on the router?

Many thanks mate.

Simon
0
 
JFrederick29Commented:
You can shut down the interface connected to the cable modem and that will block the Internet from your entire internal network.  If you only have one PC, you could disable your "Local Area Connection" in Windows and that would stop the Internet from hitting your PC but still traversing the router.

For the router's internal interface, yes, you need to statically assign it an IP address using the "ip address <address> <mask>" interface configuration command.  For the PC, two ways, you can statically assign an IP address on the PC which is easiest if you only have the one PC.  If you have a good number of PC's you could setup the DHCP server on the router to provide addresses to the internal PC's.  
0
 
Simon336697Author Commented:
JFrederick29,

Youre a champion!

Thanks so much for all your great help.

Appreciate your expertise!!

Simon
0
 
JFrederick29Commented:
You're welcome!
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now