[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now


Cisco 2514 Router with Motorola Surfboard Cable Modem

Posted on 2004-08-17
Medium Priority
Last Modified: 2013-12-14
Hi guys,

I have one computer which is connected by Ethernet NIC to a Motorola Surfboard Cable modem to access the internet.
What I would like to do is to hook up a Cisco 2514 Router to the cable modem and PC and configure a firewall on the cisco router, still enabling internet access through the cable modem.
The router has a built in hub. Any help on how I could configure this would be great.
Thanks in advance.

Question by:Simon336697
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
LVL 43

Accepted Solution

JFrederick29 earned 2000 total points
ID: 11819394
Here is a basic config:

ip address dhcp  <---if your provider uses dhcp
ip nat outside
ip access-group 101 in

ip address
ip nat inside

ip nat inside source list 1 interface ethernet0 overload

access-list 1 permit

access-list 101 permit udp any eq 53 any          <--- Allow return DNS replies
access-list 101 permit tcp any any established   <--- Allow established TCP sessions from the inside network
access-list 101 permit icmp any any echo-reply  <--- Allow icmp replies back into your network

Access-list 101 is a basic ACL which will only allow DNS lookups and TCP sessions intitiated from the inside network back into your LAN.  Cisco makes an IOS firewall which can be used.  It provides greater flexibility.  If you need to permit other udp traffic, you'll need to add access-list entries using the correct ports.
LVL 43

Expert Comment

ID: 11819490
Forgot a line:

ip route ethernet0

Or if you know the next hop router at your ISP:

ip route 68.x.x.1  <---use correct IP address

Author Comment

ID: 11820772
Hi JFrederick29,

Really appreciate your help here mate.
Can you please just clarify a few things for me.

This is my setup at the moment.
          CAT5 Lead
PC------------------------Motorola Cable Modem-------------------Wall Socket

With the router included, would it look like the following?

           CAT5 Lead
PC-----------------------AUX1 of Router

Modem------------------AUX2 of Router

Of the above, which is Ethernet0 and Ethernet1 as you explain?

The IP Address information I have been given from my provider is as follows:

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . : vic.assr.net.au

        Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
        Physical Address. . . . . . . . . : 00-0B-DB-2D-53-EG

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . :

        Subnet Mask . . . . . . . . . . . :

        Default Gateway . . . . . . . . . :

        DHCP Server . . . . . . . . . . . :

        DNS Servers . . . . . . . . . . . :


I just need a bit of help in physically setting up the connections between the router, the modem and the PC, and then determining from what you say what ethernet interfaces belong to what.
I really appreciate your help JFrederick29.

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 43

Expert Comment

ID: 11820885
AUI1 would be Ethernet0 and AUI2 would be Ethernet1.

Plug the CAT5 cable from the cable modem (that is currently going into your PC) into the tranceiver connected to AUI1.  Then if you want to connect your PC directly to the router, you'll need a crossover cable (straight through won't work) from your PC into the tranceiver connected to AUI2.  Alternatively, you can use a hub/switch in between your PC and the routers AUI2 tranceiver, you could use straight through cables in this case.

You are receiving an IP address from your provider via DHCP so use the "ip address dhcp" command as shown in the config I posted.

Author Comment

ID: 11826916
Hi JFrederick29,

Mate thank you so much.

Just one more thing and the points are yours (they are anyway!).

Previously without the router, I could control cable modem access to the Internet through cable modem software on my PC.
Now that the modem is not connected directly to the PCs NIC, but to an Ethernet port on the router, to stop Internet activity, do I have to shut down the interface each time on the router then bring it back up again to get Internet connectivity?
Also, as the internal network will be something like 192.168.x.x, will this mean I have to statically assign an IP address to my PC's network card and also the ethernet port on the router?

Many thanks mate.

LVL 43

Expert Comment

ID: 11829745
You can shut down the interface connected to the cable modem and that will block the Internet from your entire internal network.  If you only have one PC, you could disable your "Local Area Connection" in Windows and that would stop the Internet from hitting your PC but still traversing the router.

For the router's internal interface, yes, you need to statically assign it an IP address using the "ip address <address> <mask>" interface configuration command.  For the PC, two ways, you can statically assign an IP address on the PC which is easiest if you only have the one PC.  If you have a good number of PC's you could setup the DHCP server on the router to provide addresses to the internal PC's.  

Author Comment

ID: 11836020

Youre a champion!

Thanks so much for all your great help.

Appreciate your expertise!!

LVL 43

Expert Comment

ID: 11840178
You're welcome!

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This solves the problem of diagnosing why an internet connection is no longer working. It also helps identify the likely cause of the lost connection if the procedure fails to re-establish your internet connection. It helps to pinpoint the likely co…
Sometimes you have to pull out old tricks to get a new firewall to work… While we were installing a new Sonicwall at a customers site we found that sites they were able to visit before were not working.  It seemed random and we could not understa…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question