Wednesday, September 19, 2007

Simple Cisco Router Setup Network

This is about how simple setup network with Cisco router connect to internet service provider. We must concern about a few things, simple security performance.

o Simple : not all people deep understand about router specially Cisco router, so how setup network is simple, not need deep understand and more time to understand too.

#example configuration
- interface F0/0 to internet provider with IP address 100.100.100.1/30
interface FastEthernet0/0
ip address 100.100.100.2 255.255.255.252
duplex auto
speed auto

- interface F0/1 to LAN with switch IP gateway 192.168.0.1/24
interface FastEthernet0/1
ip address 192.168.0.1 255.255.255.0
duplex auto
speed auto

- default route to internet service provider with static route if we use one service provider
ip route 0.0.0.0 0.0.0.0 100.100.100.1

o Security : how about device is simple but secure, I'm not show about complex security, just simple security to defend attack from illegal management device.

#mandatory security configuration
service password-encryption
!
enable secret 5 [skip-enable-secret]
!
access-list 1 permit 192.168.0.100
!
line con 0
exec-timeout 5 0
password 7 [skip-password]
line aux 0
line vty 0 4
access-class 1 in
exec-timeout 3 0
password 7 [skip-password]
login

o Performance : how about device work best in performance, not overload process, not overload capacity of throughput interface.
- do it periodic check list about activity processor and memory usage in peak time and low time usage network.
- don't do debug command in operational network without deep understanding about Cisco router.
- don't do change configuration in peak time and do maintenance network in low time usage network or may be in off work.

IOS command to check list performance
o #show version
o #show processes
o #show processes cpu history