Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > Can someone double check the config

Reply
Thread Tools

Can someone double check the config

 
 
Igor Pinchevskiy
Guest
Posts: n/a
 
      10-03-2007
Hello,

Below are the configurations from 2 routers that are connected via
point to point T1 line. Please note hollywood router has 3 serial
interfaces that connect to other routers via point to point T1 lines
as well. Can you guys double check the configs to make sure that they
are correct and doesnt have anything thats not needed and also if you
guys suggest any improvmenets. These are all connected via private T1
lines and actually no access lists are needed but they are there from
the previous guy, I want to make some changes to improve performance
and stuff. Any advice or suggestions is greatly appreciated!

Building configuration...

Current configuration : 1234 bytes
!
! Last configuration change at 17:32:21 UTC Tue Jul 17 2007
! NVRAM config last updated at 17:32:33 UTC Tue Jul 17 2007
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Downtown
!
enable secret 5 xxxxx
enable password xxxxx
!
!
!
!
!
ip subnet-zero
no ip finger
!
ip dhcp pool LA
network 10.1.0.0 255.255.0.0
default-router 10.1.0.1
netbios-name-server 10.3.0.254
!
ip audit notify log
ip audit po max-events 100
!
!
!
!
!
!
!
interface Ethernet0/0
ip address 10.1.0.1 255.255.0.0
no ip mroute-cache
full-duplex
arp timeout 60
no mop enabled
!
interface BRI0/0
no ip address
no ip mroute-cache
shutdown
!
interface Serial0/0
ip address 192.168.1.6 255.255.255.252
encapsulation ppp
no ip mroute-cache
!
interface Ethernet0/1
ip address 64.171.205.2 255.255.255.248
ip nat outside
no ip mroute-cache
shutdown
!
ip nat inside source list 1 interface Ethernet0/1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0
ip route 10.3.0.0 255.255.0.0 192.168.1.5
ip http server
!
access-list 1 permit 10.1.0.0 0.0.255.255
!
!
!
line con 0
transport input none
line aux 0
line vty 0 4
password xxxxx
login
!
end

Downtown#



Hollywood#sh run
Building configuration...

Current configuration : 1807 bytes
!
! Last configuration change at 17:27:20 UTC Tue Jul 17 2007
! NVRAM config last updated at 17:28:31 UTC Tue Jul 17 2007
!
version 12.1
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Hollywood
!
logging rate-limit console 10 except errors
enable secret 5 xxxxx
enable password xxxxx
!
ip subnet-zero
!
!
no ip finger
!
ip dhcp pool hollywood
network 10.3.0.0 255.255.0.0
netbios-name-server 10.3.0.252
default-router 10.3.1.1
lease 0 8
!
ip audit notify log
ip audit po max-events 100
!
!
call rsvp-sync
!
!
!
!
!
!
!
!
interface Ethernet0/0
ip address 10.8.1.1 255.255.0.0
ip nat inside
no keepalive
shutdown
full-duplex
arp timeout 60
!
interface Serial0/0
ip address 192.168.1.1 255.255.255.252
encapsulation ppp
!
interface Ethernet0/1
bandwidth 10000000
ip address 10.3.0.1 255.255.0.0
no keepalive
full-duplex
arp timeout 60
!
interface Serial0/1
ip address 192.168.1.5 255.255.255.252
encapsulation ppp
!
interface Serial0/2
ip address 192.168.1.9 255.255.255.252
encapsulation ppp
service-module t1 timeslots 1-24
!
ip nat inside source list 1 interface Ethernet0/1 overload
ip nat inside source static 10.3.0.254 64.174.223.75
ip classless
ip route 0.0.0.0 0.0.0.0 10.3.1.1
ip route 10.1.0.0 255.255.0.0 Serial0/1
ip route 10.2.0.0 255.255.0.0 Serial0/0
ip route 10.4.0.0 255.255.0.0 Serial0/2
ip route 10.6.0.0 255.255.0.0 10.3.0.2
no ip http server
!
access-list 1 permit 10.0.0.0 0.255.255.255
access-list 1 permit 192.168.0.0 0.0.255.255
snmp-server community public RO
!
dial-peer cor custom
!
!
!
!
!
line con 0
transport input none
line aux 0
line vty 0 4
password xxxxx
login
!
no scheduler allocate
end

Hollywood#


Thank you in advance,

Igor Pinchevskiy

 
Reply With Quote
 
 
 
 
Merv
Guest
Posts: n/a
 
      10-06-2007

Remove the enable password command as it is overrideen by enable
secret

I would migrate to a dynamic routing protocol - in your case EIGRP.
Then I would redistribute default from one router only.

I would use network 10.x.x.x addressing only and thus would lose the
192.168.x.x addressing on the serial interfaces

 
Reply With Quote
 
 
 
 
Igor Pinchevskiy
Guest
Posts: n/a
 
      10-08-2007
On Oct 6, 2:08 am, Merv <merv.hr...@rogers.com> wrote:
> Remove the enable password command as it is overrideen by enable
> secret
>
> I would migrate to a dynamic routing protocol - in your case EIGRP.
> Then I would redistribute default from one router only.
>
> I would use network 10.x.x.x addressing only and thus would lose the
> 192.168.x.x addressing on the serial interfaces


Thank you Merv!

 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Can someone double check the config Igor Pinchevskiy Cisco 0 10-03-2007 09:40 PM
dll config and web.config and Label Expressions (binding label text to dll config settings) CSharpner ASP .Net 0 04-09-2007 09:00 PM
ctime double double check aisling.cronin@gmail.com C Programming 11 03-09-2007 10:39 PM
Can someone check this NAT/ACL solution please? Rob Dover Cisco 2 12-22-2005 11:10 PM
cannot convert parameter from 'double (double)' to 'double (__cdecl *)(double)' error Sydex C++ 12 02-17-2005 06:30 PM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57