Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1787
  • Last Modified:

Cisco 861 Router, anyone have a sample config to get me started

We have 2 networks on site we want to be able to talk to each other.
 Wan side = 172.174.1.0  and Lan side = 10.0.0.0

We have 2 networks that I want to put this router between so I can communicate between.

Does anyoune have a config using nat that I can use for a starting point.

Thanks
0
ParadiseFound
Asked:
ParadiseFound
  • 4
  • 4
  • 3
  • +2
3 Solutions
 
Istvan KalmarSenior Network EngineerCommented:
Hi,

please show the blank config....
and I tell you the required commands!

Best regards,
Istvan
0
 
RobertPartenCommented:
Can you clarify a little more?


WAN (172.174.1.0)  <=========>  [[[((((())))]]] <=======>   LAN (10.0.0.0) - Comptuers behind here

Are you just simply stating that you are working with two groups of computers (subnets) and want to put a router between them to they can communicate back and forth? Are you going to need a default route to the Internet?
0
 
Rick_at_ptscintiCommented:
interface Fastethernet 4
    ip nat outside

interface Vlan 1
    ip nat inside

ip access-list extended matchall
 permit ip any any

ip nat source list matchall interface Fastethernet 4 overload


(this assumes FastEthernet 4 is public and Vlan 1 is private)
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
Istvan KalmarSenior Network EngineerCommented:
0
 
ParadiseFoundAuthor Commented:
Robert - Yes we are just connecting 2 private networks together. Our internet goes to out pix and out.
0
 
Rick_at_ptscintiCommented:
You asked for an example with NAT, but if you are connecting 2 private networks then you typically wouldn't use NAT.

What kind of telecomm connection do you have between the two sites?  Which is end has the PIX on it?  

If you are connecting with MPLS the config will be real basic, but you will need a couple simple route statements to direct the traffic.
0
 
ParadiseFoundAuthor Commented:
The 2 networks are both local (actually 1 is on vlan 1001 and the other is vlan 10.

I have 2 switch ports set one with each vlan.
0
 
Rick_at_ptscintiCommented:
The router is always aware of locally connected networks, so you should be able to talk between them without doing anything else.  

You would need to assign the vlan to a port but it sound like you have already done this.  Do you have IP addresses set on the vlan interface?

interface vlan 1001
   ip address 172.174.1.1 255.255.255.0
   no shutdown

interface vlan 10
   ip address 10.0.0.1 255.255.255.0
   no shutdown

on your switch ports:

interface Fastethernet 1
   switchport access vlan 1
   no shutdown

0
 
RobertPartenCommented:
Sounds like you need a router on a stick to route between these two subnets

I assume dot1q encapsulation

interface fa 0/0.10
encapsulation dot1q 10
ip address 10.0.0.2 255.255.255.0


interface fa 0/0.11
encapsulation do1q 1001
ip address 172.174.1.2 255.255.255.0

Essentially you have ONE link to the routers FA interface 0/0 and that will now have forwarding logic to route between VLAN's on the same physical connection.

Good luck.
0
 
Rick_at_ptscintiCommented:
Robert's comment is true if you are using a single interface on the router.  Since this is an 861 you should have enough ports to put the different networks on different physical ports.

If you are trying to have both networks on the same switching equipment then you will need to have the vlans built on the switches and trunking enabled on the uplink to the router.
0
 
RobertPartenCommented:
As Rick stated, setup your VLANS on the switches and for each interface you want to use setup trunking. Routers DO NOT negotiate trunking so you will have to set the switchport interface on the switch to:

switchport mode trunk

For each interface apply the same commands as above replacing the interface numbers with the correct ones from your 861.
0
 
ParadiseFoundAuthor Commented:
Thanks guys, I will try this after lunch and see what happens.
0
 
Murty KodukulaCommented:
i am also having similar issue.  i have two vlans configured with vlan 1 as 10.50.42.0 and vlan 2 as197.100.100.0 and my wan side is 192.168.175.0.  i would like to access the systems in vlan2  through vlan1's ip.  that is the requirement of my software.  can any one send me the sample config.

thaks in advance
Murty
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 4
  • 3
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now