1

1. Enabling internet access with PAT for small office

|

Small office need acces to internet. Internal office network use 192.168.66.0/24 network rane and contain four clients with static preconfigured IP and DHCP range 192.168.66.100-200 (ip dhcp excluded-address 192.168.66.1 – .99 and 201.  – 254). Switching topology is without redundancy with Office 1841 router ast in router on a stick scenario. ISP is simulated by ISP router with remote www.cisco.com server.

Network topology:

Office server dns configuration that resolve name www.testking.com and www.cisco.com is configured:

Pc with static ip are configured:

Device configs are: (!!! Some ! was ommited from config!!!)

1) Switch S1

 

hostname S1
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet1/1
!
interface GigabitEthernet1/2
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan99
 ip address 192.168.66.253 255.255.255.0
ip default-gateway 192.168.66.254
line con 0
line vty 0 4
 login
line vty 5 15
 login
end
There are no VLAN configured – convinient only in very small network with full trustworthy environment.
 
2) Router Office
 
hostname Office
ip dhcp excluded-address 192.168.66.1 192.168.66.99
ip dhcp excluded-address 192.168.66.201 192.168.66.254
ip dhcp pool Office_LAN
 network 192.168.66.0 255.255.255.0
 default-router 192.168.66.254
 dns-server 192.168.66.252
username ISP password 0 pppcisco
interface FastEthernet0/0
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface FastEthernet0/1
 ip address 192.168.66.254 255.255.255.0
 duplex auto
 speed auto
!
interface Serial0/0/0
 ip address 198.160.130.129 255.255.255.240
 encapsulation ppp
 ppp authentication pap
 ppp pap sent-username Office password 0 pppcisco
!
interface Serial0/0/1
 no ip address
 shutdown
!
interface Vlan1
 no ip address
 shutdown
!
ip nat pool PATforLAN 198.160.130.135 198.160.130.140 netmask 255.255.255.240
ip nat inside source list PATenabled pool PATforLAN overload
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0/0 
!
ip access-list standard PATenabled
 permit 192.168.66.0 0.0.0.255
 deny any
!
line con 0
line vty 0 4
 login
!
end
 
3) ISP router
 
hostname ISP
!
username Office password 0 pppcisco
!
interface FastEthernet0/0
 ip address 200.0.0.2 255.255.255.252
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface Serial0/0/0
 ip address 198.160.130.130 255.255.255.240
 encapsulation ppp
 ppp authentication pap
 ppp pap sent-username ISP password 0 pppcisco
 clock rate 250000
!
interface Serial0/0/1
 no ip address
 shutdown
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
ip route 192.168.66.0 255.255.255.0 Serial0/0/0 
!
line con 0
line vty 0 4
 login
!
end
 
Link between ISP and Office router is serial PPP line with older PAP authentication.
 
(!!! Some ! was ommited from config!!!)