Yves Mellet
asked on
Does this simple config look right on cisco 2500
Here is the scenario.
I am having an issue with slow logins due to the fact I have an internal server that has DNS running, but to get to the internet I have to put my ISP DNS into my workstations to even get to the internet. If I put just my internal DNS numbers I have quick logins but no internet. I put my ISP DNS in with my internal DNS I can get to the internet but I have slow logins.
I know the issue is that the first DNS is my ISP DNS and of course when users login, it is going to my ISP to look for my internal servers before it times out and lets them in. So I got a Cisco 2500 router now.
I have a ISP that is giving me a ethernet handoff. I have a cisco 2500 router with two ethernet ports and two serial ports. I am connecting my ISP to E0 and my E1 to my cisco switch. Below is the configuration I built. To your knowledge is this the best way to go with the simplest config .
Current configuration:
!
version 11.2
service config
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname router
!
enable secret 5 $1$E0nQ$C.Asw42D9.YdHIU/7. Dts1
enable password 7 110A48161442
!
ip subnet-zero
ip name-server 151.164.11.201
!
interface Ethernet0
description ISP
ip address 64.x.x.x 255.x.x.x
no ip directed-broadcast
no ip mroute-cache
no shutdown
no cdp enable
!
interface Ethernet1
description 10.0.0 network
ip address 10.0.0.1 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
no cdp enable
!
interface Serial0
no ip address
no ip mroute-cache
shutdown
!
interface Serial1
no ip address
no ip mroute-cache
shutdown
no cdp enable
!
no ip classless
line con 0
exec-timeout 0 0
line aux 0
password 7 15115A1F077A
line vty 0 4
password 7 15115A1F077A
login
!
end
I am having an issue with slow logins due to the fact I have an internal server that has DNS running, but to get to the internet I have to put my ISP DNS into my workstations to even get to the internet. If I put just my internal DNS numbers I have quick logins but no internet. I put my ISP DNS in with my internal DNS I can get to the internet but I have slow logins.
I know the issue is that the first DNS is my ISP DNS and of course when users login, it is going to my ISP to look for my internal servers before it times out and lets them in. So I got a Cisco 2500 router now.
I have a ISP that is giving me a ethernet handoff. I have a cisco 2500 router with two ethernet ports and two serial ports. I am connecting my ISP to E0 and my E1 to my cisco switch. Below is the configuration I built. To your knowledge is this the best way to go with the simplest config .
Current configuration:
!
version 11.2
service config
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname router
!
enable secret 5 $1$E0nQ$C.Asw42D9.YdHIU/7.
enable password 7 110A48161442
!
ip subnet-zero
ip name-server 151.164.11.201
!
interface Ethernet0
description ISP
ip address 64.x.x.x 255.x.x.x
no ip directed-broadcast
no ip mroute-cache
no shutdown
no cdp enable
!
interface Ethernet1
description 10.0.0 network
ip address 10.0.0.1 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
no cdp enable
!
interface Serial0
no ip address
no ip mroute-cache
shutdown
!
interface Serial1
no ip address
no ip mroute-cache
shutdown
no cdp enable
!
no ip classless
line con 0
exec-timeout 0 0
line aux 0
password 7 15115A1F077A
line vty 0 4
password 7 15115A1F077A
login
!
end
ASKER
Thanks. I was trying to put the ip route to point to my E1 interface "duh" wrong INT. Just to make sure is the ip route go to my E0 int or to the actual ISP router interface.
No I have not tried a forwarder, I was thinking I may need the router but I will look into it.
No I have not tried a forwarder, I was thinking I may need the router but I will look into it.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ip route 0.0.0.0 0.0.0.0 <ISP_Router>