Cisco 2811 Bridge setup

Hi,

I'd really appreciate some assistance.

I need to set up my Cisco 2811 router as a bridge with no ip addresses and pass my only public IP address from the router where it is presently (see Current-Router-Config attached), to my ASA 510 firewall. I've set up my router to the requirements of my ISP (see the Configuration section of the attached adslguide-irb-staticstep.pdf) which works fine, but I need to move the public IP address inside to the firewall and set up some VPNs etc.

I was hoping to achieve this with the following config: (I've changed the IP addresses)
--------------------------------------------------------------------------
!
Interface FastEthernet0/0
no ip address 10.3.10.1 255.255.0.0
no ip nat inside
switchport access vlan 1
!
interface vlan 1
bridge group 1
!
interface BVI1
no ip address 1.2.123.108 255.255.248.0
no ip nat outside
!
no bridge 1 route ip
-------------------------------------------------------------------------
I was then going to configure the outside interface of my firewall with the 1.2.123.108 255.255.248.0 address.
Would I then need to remove the default route 1.2.120.1 from the router and put it on the firewall?
What do I do about access-list 1?
Can anyone advise me as to any additional or different configuration I'll need to make this work?


Current-Router-Config.txt
adslguide-irb-staticstep.pdf
LVL 3
FMabeyAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Don JohnstonInstructorCommented:
>I need to set up my Cisco 2811 router as a bridge  with no ip addresses

Simple enough. See below:

no ip routing
!
bridge 1 protocol ieee
!
int f0/0
 no ip address
 bridge-group 1
 no shut
!
int f0/1
 no ip address
 bridge-group 1
 no shut
!
end
 

Open in new window

0
FMabeyAuthor Commented:
Hi Don,

Thanks for your reply. As you can see from my config, I have already set up bridge group 1 and interface ATM0/3/0 is already a member. I can see that I have to put f0/0 into bridge group 1 whether directly or through vlan 1. I also need to remove my public IP from BVI1 and add it to the ouside interface of my firewall, but what to do with my default route and access list 1? I'm thinking to remove access-list 1 and the default route and put the ddefault route on the firewall. What are your thoughts?

Regards

Egg
0
Router_MonkeyCommented:
Default route goes on the firewall since it now becomes the default gateway for your clients. Since router is now acting as a bridge, ACLs are not needed except for protecting access to the device itself for management.
0
Router_MonkeyCommented:
The access-list is only for NAT/PAT at the router. Since the router will  not be doing NAT/PAT anymore, but instead bridging to the firewall, the access-list and NAT statement are not needed. The firewall will need to perform the NAT/PAT for your inside hosts.
0
Don JohnstonInstructorCommented:
Once you remove the ip addresses from the interfaces and disable ip routing, all of the ip related commands become irrelevant.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.