Solved

Cisco 2514 Router with Motorola Surfboard Cable Modem

Posted on 2004-08-17
8
1,102 Views
Last Modified: 2013-12-14
Hi guys,

I have one computer which is connected by Ethernet NIC to a Motorola Surfboard Cable modem to access the internet.
What I would like to do is to hook up a Cisco 2514 Router to the cable modem and PC and configure a firewall on the cisco router, still enabling internet access through the cable modem.
The router has a built in hub. Any help on how I could configure this would be great.
Thanks in advance.

Simon
0
Comment
Question by:Simon336697
  • 5
  • 3
8 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
Comment Utility
Here is a basic config:

Ethernet0
ip address dhcp  <---if your provider uses dhcp
ip nat outside
ip access-group 101 in

Ethernet1
ip address 192.168.0.1 255.255.255.0
ip nat inside

ip nat inside source list 1 interface ethernet0 overload

access-list 1 permit 192.168.0.0 0.0.0.255

access-list 101 permit udp any eq 53 any          <--- Allow return DNS replies
access-list 101 permit tcp any any established   <--- Allow established TCP sessions from the inside network
access-list 101 permit icmp any any echo-reply  <--- Allow icmp replies back into your network

Access-list 101 is a basic ACL which will only allow DNS lookups and TCP sessions intitiated from the inside network back into your LAN.  Cisco makes an IOS firewall which can be used.  It provides greater flexibility.  If you need to permit other udp traffic, you'll need to add access-list entries using the correct ports.
0
 
LVL 43

Expert Comment

by:JFrederick29
Comment Utility
Forgot a line:

ip route 0.0.0.0 0.0.0.0 ethernet0

Or if you know the next hop router at your ISP:

ip route 0.0.0.0 0.0.0.0 68.x.x.1  <---use correct IP address
0
 
LVL 1

Author Comment

by:Simon336697
Comment Utility
Hi JFrederick29,

Really appreciate your help here mate.
Can you please just clarify a few things for me.

This is my setup at the moment.
   
          CAT5 Lead
PC------------------------Motorola Cable Modem-------------------Wall Socket

With the router included, would it look like the following?

           CAT5 Lead
PC-----------------------AUX1 of Router

Modem------------------AUX2 of Router

Of the above, which is Ethernet0 and Ethernet1 as you explain?

The IP Address information I have been given from my provider is as follows:

Ethernet adapter Local Area Connection:



        Connection-specific DNS Suffix  . : vic.assr.net.au

        Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
        Physical Address. . . . . . . . . : 00-0B-DB-2D-53-EG

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 138.217.162.12

        Subnet Mask . . . . . . . . . . . : 255.255.252.0

        Default Gateway . . . . . . . . . : 138.217.160.1

        DHCP Server . . . . . . . . . . . : 172.18.17.80

        DNS Servers . . . . . . . . . . . : 61.9.128.14

                                            61.9.192.15
                                            61.9.128.15


I just need a bit of help in physically setting up the connections between the router, the modem and the PC, and then determining from what you say what ethernet interfaces belong to what.
I really appreciate your help JFrederick29.

Simon
0
 
LVL 43

Expert Comment

by:JFrederick29
Comment Utility
AUI1 would be Ethernet0 and AUI2 would be Ethernet1.

Plug the CAT5 cable from the cable modem (that is currently going into your PC) into the tranceiver connected to AUI1.  Then if you want to connect your PC directly to the router, you'll need a crossover cable (straight through won't work) from your PC into the tranceiver connected to AUI2.  Alternatively, you can use a hub/switch in between your PC and the routers AUI2 tranceiver, you could use straight through cables in this case.

You are receiving an IP address from your provider via DHCP so use the "ip address dhcp" command as shown in the config I posted.
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 1

Author Comment

by:Simon336697
Comment Utility
Hi JFrederick29,

Mate thank you so much.

Just one more thing and the points are yours (they are anyway!).

Previously without the router, I could control cable modem access to the Internet through cable modem software on my PC.
Now that the modem is not connected directly to the PCs NIC, but to an Ethernet port on the router, to stop Internet activity, do I have to shut down the interface each time on the router then bring it back up again to get Internet connectivity?
Also, as the internal network will be something like 192.168.x.x, will this mean I have to statically assign an IP address to my PC's network card and also the ethernet port on the router?

Many thanks mate.

Simon
0
 
LVL 43

Expert Comment

by:JFrederick29
Comment Utility
You can shut down the interface connected to the cable modem and that will block the Internet from your entire internal network.  If you only have one PC, you could disable your "Local Area Connection" in Windows and that would stop the Internet from hitting your PC but still traversing the router.

For the router's internal interface, yes, you need to statically assign it an IP address using the "ip address <address> <mask>" interface configuration command.  For the PC, two ways, you can statically assign an IP address on the PC which is easiest if you only have the one PC.  If you have a good number of PC's you could setup the DHCP server on the router to provide addresses to the internal PC's.  
0
 
LVL 1

Author Comment

by:Simon336697
Comment Utility
JFrederick29,

Youre a champion!

Thanks so much for all your great help.

Appreciate your expertise!!

Simon
0
 
LVL 43

Expert Comment

by:JFrederick29
Comment Utility
You're welcome!
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

    Over the past few years, small business and home owners have become so dependent on internet that a need for redundancy has arisen.    What happens when your small business or home / home office loses its internet connection?  The results c…
Sometimes you have to pull out old tricks to get a new firewall to work… While we were installing a new Sonicwall at a customers site we found that sites they were able to visit before were not working.  It seemed random and we could not understa…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now