<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Be A Cisco Expert Without Course or Certification &#187; Router</title>
	<atom:link href="http://ciscogeek.org/category/router/feed/" rel="self" type="application/rss+xml" />
	<link>http://ciscogeek.org</link>
	<description>FREE Tons Of Cisco Configuration Example</description>
	<lastBuildDate>Fri, 24 Jul 2009 07:09:26 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Remove clock rate 2000000</title>
		<link>http://ciscogeek.org/remove-clock-rate-2000000/</link>
		<comments>http://ciscogeek.org/remove-clock-rate-2000000/#comments</comments>
		<pubDate>Thu, 08 Jan 2009 19:49:02 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[clock rate]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/?p=86</guid>
		<description><![CDATA[Today cisco router come with clock rate enable as factory default setup.
Once you setup your serial interface, automatically cisco will insert clock rate 2000000 to the interface. And no clock rate 2000000 command will not function or can not remove the clock rate 2000000 line.
Solution for this problem is,

Shutdown your router, switch off the power.
Unplug [...]]]></description>
			<content:encoded><![CDATA[<p>Today cisco router come with clock rate enable as factory default setup.</p>
<p>Once you setup your serial interface, automatically cisco will insert clock rate 2000000 to the interface. And <strong>no clock rate 2000000</strong> command will not function or can not remove the <strong>clock rate 2000000</strong> line.</p>
<p>Solution for this problem is,</p>
<ol>
<li>Shutdown your router, switch off the power.</li>
<li>Unplug your serial DTE cable.</li>
<li>Start up your router.</li>
<li>Type <strong>no clock rate 2000000</strong> at your related interface.</li>
<li>Type <strong>no shutdown</strong>.</li>
<li>Save your running config (type <strong>copy run start</strong>).</li>
<li>Shutdown your router, switch off the power.</li>
<li>Plug in your DTE cable.</li>
<li>Make sure your DSU/CSU modem is ready and connected.</li>
<li>Start up your router again.</li>
<li>Finish.</li>
</ol>
<p>Clock rate 2000000 will insert automatically when your interface status as DCE. This is usually caused by the interface (serial) of your router not receive clock rate info from your DSU/CSU modem.</p>
<p>Check your interface status with <strong>show controller</strong> command and make sure your interface status is <strong>DTE</strong>. Check out 3th line of show controller command result.</p>
<p>Example for serial 0/0/0 interface:</p>
<p>ROUTER#<strong>sho controller s0/0/0</strong><br />
Interface Serial0/0/0<br />
Hardware is GT96K<br />
<strong>DTE</strong> V.35idb at 0&#215;42E43688, driver data structure at 0&#215;42E4ADA4<br />
wic_info 0&#215;42E4B3A8<br />
Physical Port 1, SCC Num 1<br />
MPSC Registers:<br />
MMCR_L=0&#215;000304C0, MMCR_H=0&#215;00000000, MPCR=0&#215;00000100<br />
CHR1=0&#215;00FE007E, CHR2=0&#215;00000000, CHR3=0&#215;0000064A, CHR4=0&#215;00000000<br />
CHR5=0&#215;00000000, CHR6=0&#215;00000000, CHR7=0&#215;00000000, CHR8=0&#215;00000000<br />
CHR9=0&#215;00000000, CHR10=0&#215;00003008<br />
SDMA Registers:<br />
SDC=0&#215;00002201, SDCM=0&#215;00000080<br />
CRDP=0&#215;0F8DDD40, CTDP=0&#215;0F8DF8B0, FTDB=0&#215;0F8DF8B0<br />
Main Routing Register=0&#215;77777707 BRG Conf Register=0&#215;00480000<br />
Rx Clk Routing Register=0&#215;00000080 Tx Clk Routing Register=0&#215;00000090<br />
GPP Registers:<br />
Conf=0&#215;50055600, Io=0&#215;50055600, Data=0xFFFFFBFF, Level=0&#215;00001800<br />
TDM FPGA Registers:<br />
vmcr[0] = 0&#215;00010040, vmcr[1] = 0&#215;00000000,<br />
vmcr[2] = 0&#215;00000000, vmcr[3] = 0&#215;00000000<br />
ntrcr0 = 0&#215;00000000, ntrcr1 = 0&#215;00000000<br />
tdmcr = 0&#215;0000006A, labcr = 0&#215;00000000, tpllr_cr = 0&#215;00000000<br />
nhr = 0&#215;66666660, isr = 0&#215;0000FFFF, imr = 0&#215;00000000</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=86&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/remove-clock-rate-2000000/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Accept Inbound Traffic To Servers Behind NAT</title>
		<link>http://ciscogeek.org/accept-inbound-traffic-behind-nat/</link>
		<comments>http://ciscogeek.org/accept-inbound-traffic-behind-nat/#comments</comments>
		<pubDate>Wed, 12 Nov 2008 08:09:39 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Firewall]]></category>
		<category><![CDATA[Router]]></category>
		<category><![CDATA[inbound traffic]]></category>
		<category><![CDATA[nat]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/?p=82</guid>
		<description><![CDATA[This config to make inbound traffic to a web server in local network behind NAT.
Req:
- Private IP Address plan (eg. 192.168.1.0/24)
- Public IP Address plan (eg.100.1.2.3/30)
- Web Server (port 80) IP Address (eg.192.168.1.10)
- Standard NAT Config work properly
All incoming web traffic from the Internet that comes to 100.1.2.3 will be forwarded to 192.168.1.10
hostname CiscoNAT
!
enable secret [...]]]></description>
			<content:encoded><![CDATA[<p>This config to make inbound traffic to a web server in local network behind NAT.</p>
<p>Req:<br />
- Private IP Address plan (eg. 192.168.1.0/24)<br />
- Public IP Address plan (eg.100.1.2.3/30)<br />
- Web Server (port 80) IP Address (eg.192.168.1.10)<br />
- Standard NAT Config work properly</p>
<p>All incoming web traffic from the Internet that comes to 100.1.2.3 will be forwarded to 192.168.1.10</p>
<p>hostname CiscoNAT<br />
!<br />
enable secret 5 KjhKJGkj$57JHkkl98KJH<br />
!<br />
ip subnet zero<br />
!<br />
interface FastEthernet0/0<br />
description LAN Interface<br />
ip address <strong>192.168.1.254</strong> 255.255.255.0<br />
ip nat inside<br />
duplex auto<br />
speed auto<br />
!<br />
interface <strong>Serial0</strong><br />
description WAN Interface<br />
ip address <strong>100.1.2.3</strong> 255.255.255.248<br />
ip nat outside<br />
<strong>ip access-group 101 in</strong><br />
!<br />
<strong>ip nat inside source static 192.168.1.10 80 interface Serial0</strong><br />
!<br />
access-list 101 deny ip any host 255.255.255.255<br />
<strong>access-list 101 permit tcp any any eq 80</strong><br />
!<br />
line con0<br />
line vty 0 4<br />
login<br />
password cisco<br />
!<br />
end</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=82&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/accept-inbound-traffic-behind-nat/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco Quality of Service (QoS)</title>
		<link>http://ciscogeek.org/cisco-quality-of-service-qos/</link>
		<comments>http://ciscogeek.org/cisco-quality-of-service-qos/#comments</comments>
		<pubDate>Fri, 29 Aug 2008 17:53:18 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[qos]]></category>
		<category><![CDATA[quality of service]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/?p=52</guid>
		<description><![CDATA[Below is Cisco QoS sample config.
In this sample config I created two class-map of traffic. Data and voice.
Router_A
!
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router_A
!
resource policy
!
ip subnet-zero
ip cef
!
class-map match-all data
match ip precedence 3
class-map match-all voice
match ip precedence 5
!
policy-map serial
class voice
bandwidth percent 32
set ip precedence 5
class data
bandwidth percent 63
set ip precedence 3
class [...]]]></description>
			<content:encoded><![CDATA[<p>Below is Cisco QoS sample config.<br />
In this sample config I created two class-map of traffic. Data and voice.</p>
<p><strong>Router_A</strong><br />
!<br />
service timestamps debug datetime msec<br />
service timestamps log datetime msec<br />
no service password-encryption<br />
!<br />
hostname Router_A<br />
!<br />
<strong>resource policy</strong><br />
!<br />
ip subnet-zero<br />
ip cef<br />
!<br />
<strong>class-map match-all data<br />
match ip precedence 3<br />
class-map match-all voice<br />
match ip precedence 5</strong><br />
!<br />
<strong>policy-map serial<br />
class voice<br />
bandwidth percent 32<br />
set ip precedence 5<br />
class data<br />
bandwidth percent 63<br />
set ip precedence 3<br />
class class-default<br />
fair-queue<br />
random-detect</strong><br />
!<br />
interface FastEthernet0/0<br />
description &#8220;LAN A&#8221;<br />
ip address 192.168.1.254 255.255.255.0<br />
duplex auto<br />
speed auto<br />
!<br />
interface Serial0/2/0<br />
description &#8220;WAN Link to B&#8221;<br />
ip address 10.1.1.1 255.255.255.252<br />
<strong> service-policy output serial</strong><br />
!<br />
ip classless<br />
ip route 192.168.2.0 255.255.255.0 10.1.1.2<br />
!<br />
line con 0<br />
line vty 0 4<br />
password hidden<br />
login<br />
!<br />
end</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=52&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/cisco-quality-of-service-qos/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Restore Or Install New IOS From TFTP Server to Cisco Router</title>
		<link>http://ciscogeek.org/restore-or-install-new-ios-from-tftp-server-to-cisco-router/</link>
		<comments>http://ciscogeek.org/restore-or-install-new-ios-from-tftp-server-to-cisco-router/#comments</comments>
		<pubDate>Thu, 31 Jan 2008 23:17:15 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[backup]]></category>
		<category><![CDATA[ios]]></category>
		<category><![CDATA[restore]]></category>
		<category><![CDATA[tftp]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/restore-or-install-new-ios-from-tftp-server-to-cisco-router/</guid>
		<description><![CDATA[Restore or Install new flash from TFTP server to Cisco Router. In this restore process existing IOS will erased completely before install the new IOS image file. Make sure you have a backup.
Requirement:
- PC with TFTP Server that have IOS (IP Address 192.168.1.1 and IOS image file d1600.bin).
- Network connection to Cisco Router.
- Make sure [...]]]></description>
			<content:encoded><![CDATA[<p>Restore or Install new flash from TFTP server to Cisco Router. In this restore process existing IOS will erased completely before install the new IOS image file. Make sure you have a backup.</p>
<p>Requirement:<br />
- PC with TFTP Server that have IOS (IP Address 192.168.1.1 and IOS image file d1600.bin).<br />
- Network connection to Cisco Router.<br />
- Make sure your new IOS is match for your Cisco Router version.</p>
<p>Router&gt;<br />
Router&gt;enable<br />
Password:<br />
Router#<br />
Router#copy tftp flash<br />
Address or name of remote host []? 192.168.1.1<br />
Source filename []? d1600.bin<br />
Destination filename [d1600.bin]?<br />
Accessing tftp://192.168.1.21/d1600.bin&#8230;<br />
Erase flash: before copying? [confirm]<br />
Erasing the flash filesystem will remove all files! Continue? [confirm]<br />
Erasing device&#8230; eeeeeeeeeeeeeeee &#8230;erased<br />
Erase of flash: complete<br />
Loading d1600.bin from 192.168.1.1 (via Ethernet0): !!!!!!!!!!!!!!!!!!<br />
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br />
[OK - 3289170/6578176 bytes]<br />
Verifying checksum&#8230; OK (0xB6BD)<br />
3289170 bytes copied in 89.272 secs (36956 bytes/sec)<br />
Router#</p>
<p>Finish</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=49&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/restore-or-install-new-ios-from-tftp-server-to-cisco-router/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Backup Cisco Router IOS to TFTP Server</title>
		<link>http://ciscogeek.org/backup-cisco-router-ios-to-tftp-server/</link>
		<comments>http://ciscogeek.org/backup-cisco-router-ios-to-tftp-server/#comments</comments>
		<pubDate>Thu, 31 Jan 2008 23:06:27 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[backup]]></category>
		<category><![CDATA[ios]]></category>
		<category><![CDATA[restore]]></category>
		<category><![CDATA[tftp]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/backup-cisco-router-ios-to-tftp-server/</guid>
		<description><![CDATA[Backup Cisco IOS to TFTP server and you can restore it later when your IOS damage.
Requirement:
- PC with TFTP Server (IP Address 192.168.1.1)
- Network connection to Cisco Router
Router&#62;
Router&#62;enable
 Password:
Router#copy flash tftp
Source filename []? d2600.bin
Address or name of remote host []? 192.168.1.1
Destination filename [d2600.bin]? backup_d2600.bin
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
3289170 bytes copied in 47.668 secs (69982 bytes/sec)
Router#
Finish
]]></description>
			<content:encoded><![CDATA[<p>Backup Cisco IOS to TFTP server and you can restore it later when your IOS damage.</p>
<p>Requirement:<br />
- PC with TFTP Server (IP Address 192.168.1.1)<br />
- Network connection to Cisco Router</p>
<p>Router&gt;<br />
Router&gt;enable<br />
 Password:<br />
Router#copy flash tftp<br />
Source filename []? d2600.bin<br />
Address or name of remote host []? 192.168.1.1<br />
Destination filename [d2600.bin]? backup_d2600.bin<br />
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br />
3289170 bytes copied in 47.668 secs (69982 bytes/sec)<br />
Router#</p>
<p>Finish</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=48&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/backup-cisco-router-ios-to-tftp-server/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>ISDN PPP Dialup as WAN Connection</title>
		<link>http://ciscogeek.org/isdn-ppp-dialup-as-wan-connection/</link>
		<comments>http://ciscogeek.org/isdn-ppp-dialup-as-wan-connection/#comments</comments>
		<pubDate>Wed, 09 Jan 2008 17:22:01 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[dialup]]></category>
		<category><![CDATA[isdn]]></category>
		<category><![CDATA[multilink]]></category>
		<category><![CDATA[ppp]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/?p=47</guid>
		<description><![CDATA[We will create a WAN connection over ISDN multilink dialup.
An ISDN have two channel 128kbps. We will dial a channel first and then dial last one once bandwidth usage reach 128kbs. In this sample config isdn type is basic-net3, call your telco company to make sure your isdn type. Idle-timeout is 60sec.
Requirement
- Cisco router with [...]]]></description>
			<content:encoded><![CDATA[<p>We will create a WAN connection over ISDN multilink dialup.<br />
An ISDN have two channel 128kbps. We will dial a channel first and then dial last one once bandwidth usage reach 128kbs. In this sample config isdn type is basic-net3, call your telco company to make sure your isdn type. Idle-timeout is 60sec.</p>
<p>Requirement<br />
- Cisco router with ISDN BRI interface<br />
- ISDN line each site<br />
- ISDN NT1</p>
<p>Hostname RouterA<br />
!<br />
enable secret ciscopass<br />
!<br />
username isdnpppuser password 7 isdnppppass<br />
ip subnet-zero<br />
!<br />
isdn switch-type basic-net3<br />
!<br />
interface FastEthernet0<br />
 ip address 192.168.1.254 255.255.255.0<br />
 no shutdown<br />
!<br />
interface BRI0<br />
 ip address 10.1.1.1 255.255.255.252<br />
 encapsulation ppp<br />
 dialer idle-timeout 60<br />
 dialer map ip 10.1.1.2 name isdnpppuser 123456789 &lt;= remote isdn number<br />
 dialer load-threshold 128 either<br />
 dialer-group 1<br />
 isdn switch-type basic-net3<br />
 random-detect<br />
 ppp authentication chap<br />
 ppp multilink<br />
!<br />
ip classless<br />
ip route 0.0.0.0 0.0.0.0 10.1.1.2<br />
!<br />
access-list 101 deny ip any host 255.255.255.255<br />
access-list 101 permit any any<br />
!<br />
dialer-list 1 protocol ip list 101<br />
!<br />
line con 0<br />
 exec-timeout 0 0<br />
!<br />
end</p>
<p>===</p>
<p>Hostname RouterB<br />
!<br />
enable secret ciscopass<br />
!<br />
username isdnpppuser password 7 isdnppppass<br />
ip subnet-zero<br />
!<br />
isdn switch-type basic-net3<br />
!<br />
interface FastEthernet0<br />
 ip address 192.168.2.254 255.255.255.0<br />
 no shutdown<br />
!<br />
interface BRI0<br />
 ip address 10.1.1.2 255.255.255.252<br />
 encapsulation ppp<br />
 dialer idle-timeout 60<br />
 dialer map ip 10.1.1.1 name isdnpppuser 987654321 &lt;= remote isdn number<br />
 dialer load-threshold 128 either<br />
 dialer-group 1<br />
 isdn switch-type basic-net3<br />
 random-detect<br />
 ppp authentication chap<br />
 ppp multilink<br />
!<br />
ip classless<br />
ip route 0.0.0.0 0.0.0.0 10.1.1.2<br />
!<br />
access-list 101 deny ip any host 255.255.255.255<br />
access-list 101 permit any any<br />
!<br />
dialer-list 1 protocol ip list 101<br />
!<br />
line con 0<br />
 exec-timeout 0 0<br />
!<br />
end</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=47&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/isdn-ppp-dialup-as-wan-connection/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Create Cisco VPN Tunnel over Internet</title>
		<link>http://ciscogeek.org/create-vpn-over-internet/</link>
		<comments>http://ciscogeek.org/create-vpn-over-internet/#comments</comments>
		<pubDate>Tue, 01 Jan 2008 01:49:51 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[tunnel]]></category>
		<category><![CDATA[vpn]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/create-vpn-over-internet/</guid>
		<description><![CDATA[We will create VPN tunnel for connection from SiteA to SIteB over internet connection.


Requirement:

Internet connection each sites.
2 Cisco router with 1 LAN interface (Ethernet) and 1 WAN interface (Serial).
IOS with IPSec.
IP address plan each site network, eg. SIteA 192.168.1.0/24 and SiteB 192.168.2.0/24
Public IP each site that assigned by your ISP, eg. SiteA 10.10.10.1 and SiteB [...]]]></description>
			<content:encoded><![CDATA[<p><a title="vpn.gif" href="http://ciscogeek.org/wp-content/uploads/2008/01/vpn.gif"></a><a title="VPN Network" href="http://ciscogeek.org/wp-content/uploads/2008/01/vpn1.gif"></a>We will create VPN tunnel for connection from SiteA to SIteB over internet connection.</p>
<p><a title="VPN Network" href="http://ciscogeek.org/wp-content/uploads/2008/01/vpn1.gif"><img src="http://ciscogeek.org/wp-content/uploads/2008/01/vpn1.gif" alt="VPN Network" /></a></p>
<p><a title="vpn.gif" href="http://ciscogeek.org/wp-content/uploads/2008/01/vpn.gif"></a></p>
<p>Requirement:</p>
<ul>
<li>Internet connection each sites.</li>
<li>2 Cisco router with 1 LAN interface (Ethernet) and 1 WAN interface (Serial).</li>
<li>IOS with IPSec.</li>
<li>IP address plan each site network, eg. SIteA 192.168.1.0/24 and SiteB 192.168.2.0/24</li>
<li>Public IP each site that assigned by your ISP, eg. SiteA 10.10.10.1 and SiteB 11.11.11.1</li>
</ul>
<p><strong><br />
SITE A</strong></p>
<p>hostname RouterA<br />
!<br />
enable password 123<br />
!<br />
crypto isakmp enable<br />
crypto isakmp identity address<br />
!<br />
crypto isakmp policy 1<br />
encryption des<br />
hash md5<br />
authentication pre-share<br />
group 1<br />
lifetime 86400<br />
crypto isakmp key secretkey address 11.11.11.1<br />
!<br />
crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac<br />
crypto map cm-cryptomap local-address Serial 0<br />
!<br />
crypto map cm-cryptomap 1 ipsec-isakmp<br />
match address 100<br />
set peer 11.11.11.1<br />
set transform-set cm-transformset-1<br />
set security-association lifetime seconds 3600<br />
set security-association lifetime kilobytes 4608000<br />
!<br />
interface FastEthernet 0<br />
description connected to EthernetLAN<br />
ip address 192.168.1.1 255.255.255.0<br />
!<br />
interface Serial 0<br />
description connected to Internet<br />
crypto map cm-cryptomap<br />
ip address 10.10.10.1 255.255.255.252<br />
!<br />
no access-list 100<br />
access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255<br />
!<br />
ip route 0.0.0.0 0.0.0.0 Serial 0<br />
!<br />
line console 0<br />
exec-timeout 0 0<br />
password 123<br />
login<br />
!<br />
line vty 0 4<br />
password 123<br />
login<br />
!<br />
end<br />
===</p>
<p><strong>SITE B</strong></p>
<p>hostname RouterB<br />
!<br />
enable password 123<br />
!<br />
crypto isakmp enable<br />
crypto isakmp identity address<br />
!<br />
crypto isakmp policy 1<br />
encryption des<br />
hash md5<br />
authentication pre-share<br />
group 1<br />
lifetime 86400<br />
crypto isakmp key secretkey address 10.10.10.1<br />
!<br />
crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac<br />
crypto map cm-cryptomap local-address Serial 0<br />
!<br />
crypto map cm-cryptomap 1 ipsec-isakmp<br />
match address 100<br />
set peer 10.10.10.1<br />
set transform-set cm-transformset-1<br />
set security-association lifetime seconds 3600<br />
set security-association lifetime kilobytes 4608000<br />
!<br />
interface FastEthernet 0<br />
description connected to EthernetLAN_1<br />
ip address 192.168.2.1 255.255.255.0<br />
!<br />
interface Serial 0<br />
description connected to Internet<br />
crypto map cm-cryptomap<br />
ip address 11.11.11.1 255.255.255.252<br />
!<br />
no access-list 100<br />
access-list 100 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255<br />
!<br />
ip route 0.0.0.0 0.0.0.0 Serial 0<br />
!<br />
line console 0<br />
exec-timeout 0 0<br />
password 123<br />
login<br />
!<br />
line vty 0 4<br />
password 123<br />
login<br />
!<br />
end</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=28&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/create-vpn-over-internet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Secure Internet Connection Behind NAT (Network Address Translation) Router</title>
		<link>http://ciscogeek.org/internet-connection-behind-nat-network-address-translation-router/</link>
		<comments>http://ciscogeek.org/internet-connection-behind-nat-network-address-translation-router/#comments</comments>
		<pubDate>Tue, 01 Jan 2008 01:08:31 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[nat]]></category>
		<category><![CDATA[translation]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/internet-connection-behind-nat-network-address-translation-router/</guid>
		<description><![CDATA[You can connect to internet securely behind NATed router as firewall.
Requirement:
- Cisco Router with 1 LAN Interface (Ethernet) and 1 WAN Interface (Serial).
- Internet connection.
hostname InternetRouter
!
enable password 123
!
no ip name-server
!
interface Ethernet 0
 description connected to EthernetLAN
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
!
interface Serial 0
 description connected to Internet
 ip address 123.123.123.1 255.255.255.252
 ip nat outside
!
no access-list 1
access-list 1 permit 192.168.1.0 [...]]]></description>
			<content:encoded><![CDATA[<p>You can connect to internet securely behind NATed router as firewall.</p>
<p>Requirement:<br />
- Cisco Router with 1 LAN Interface (Ethernet) and 1 WAN Interface (Serial).<br />
- Internet connection.</p>
<p>hostname InternetRouter<br />
!<br />
enable password 123<br />
!<br />
no ip name-server<br />
!<br />
interface Ethernet 0<br />
 description connected to EthernetLAN<br />
 ip address 192.168.1.1 255.255.255.0<br />
 ip nat inside<br />
!<br />
interface Serial 0<br />
 description connected to Internet<br />
 ip address 123.123.123.1 255.255.255.252<br />
 ip nat outside<br />
!<br />
no access-list 1<br />
access-list 1 permit 192.168.1.0 0.0.0.255<br />
!<br />
ip nat translation timeout 86400<br />
ip nat translation tcp-timeout 86400<br />
ip nat translation udp-timeout 300<br />
ip nat translation dns-timeout 60<br />
ip nat translation finrst-timeout 60<br />
ip nat inside source list 1 interface Serial 0 overload<br />
!<br />
ip route 0.0.0.0 0.0.0.0 Serial 0<br />
!<br />
line console 0<br />
 exec-timeout 0 0<br />
 password 123<br />
 login<br />
!<br />
line vty 0 4<br />
 password 123<br />
 login<br />
!<br />
end</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=26&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/internet-connection-behind-nat-network-address-translation-router/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco Password Recovery Procedures</title>
		<link>http://ciscogeek.org/password-recovery-procedures/</link>
		<comments>http://ciscogeek.org/password-recovery-procedures/#comments</comments>
		<pubDate>Sun, 30 Dec 2007 16:24:22 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[password]]></category>
		<category><![CDATA[recovery]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/password-recovery-procedures/</guid>
		<description><![CDATA[Requirement:
- Windows Hyper Terminal connection to console port. 
Cisco 806, 826, 827, 828, 831, 836 and 837 Series Routers

Use the power switch in order to turn off the router, and then turn the router back on.
Press Break or Ctrl-Break on the terminal keyboard within 60 seconds of power up in order to put the router into [...]]]></description>
			<content:encoded><![CDATA[<p>Requirement:<br />
- Windows Hyper Terminal connection to console port.<strong> </strong></p>
<p><strong>Cisco 806, 826, 827, 828, 831, 836 and 837 Series Routers</strong></p>
<ul>
<li>Use the power switch in order to turn off the router, and then turn the router back on.</li>
<li>Press Break or Ctrl-Break on the terminal keyboard within 60 seconds of power up in order to put the router into ROMMON.</li>
<li>boot#set ios-conf = 142</li>
<li>boot#boot<br />
<em>The router reboots, but ignores the saved configuration.</em><br />
<em>Type no after each setup question.</em></li>
<li>Router&gt;enable<br />
<em>Once the Router# prompt appears, you are in enable mode.</em></li>
<li>Router#copy startup-config running-config</li>
<li>hostname#configure terminal</li>
<li>hostname(config)#enable secret <strong>your_new_password_here</strong><br />
<em>Issue the no shutdown command on every interface that you use.</em></li>
<li>hostname(config)#config-register 0&#215;2102</li>
<li>hostname(config)#end</li>
<li>hostname#copy running-config startup-config</li>
<li>hostname#reload</li>
</ul>
<p><strong>Cisco SOHO 76, 77, 78, 91, 96, and 97 Routers.<br />
Cisco 801, 802, 803, 804, 805, 811, and 813 Series Routers.<br />
Cisco 1700, 1800, 2600, 2800, 3600, 3700, 3800 Series Routers.<br />
Cisco 7100, 7200, 7500, 12000 Series Router.</strong></p>
<ul>
<li>Use the power switch in order to turn off the router, and then turn the router back on.</li>
<li>Press Break or Ctrl-Break on the terminal keyboard within 60 seconds of power up in order to put the router into ROMMON.</li>
<li>rommon 1&gt;confreg 0&#215;2142<br />
<em>This step bypasses the startup configuration where the passwords are stored.</em></li>
<li>rommon 2&gt;reset<br />
<em>Type no after each setup question.</em></li>
<li>Router&gt;enable<br />
<em>You are in enable mode and should see the Router# prompt.</em></li>
<li>Router#copy startup-config running-config </li>
<li>Router#configure terminal</li>
<li>hostname(config)#enable secret <strong>your_new_password_here</strong><br />
<em>Issue the no shutdown command on every interface that you use.</em></li>
<li>hostname(config)#config-register 0&#215;2102</li>
<li>hostname(config)#end</li>
<li>hostname#copy running-config startup-config</li>
<li>hostname#reload</li>
</ul>
<p><strong>Cisco 2000, 2500, 3000, 4000, AccessPro, 7000(RP), AGS+, IGS, STS-10X AS</strong></p>
<ul>
<li>Use the power switch in order to turn off the router, and then turn the router back on.</li>
<li>Press Break or Ctrl-Break on the terminal keyboard within 60 seconds of power up in order to put the router into ROMMON.</li>
<li>&gt;o/r 0&#215;2142<br />
<em>Press Enter at Prompt.<br />
The router reboots, but ignores the saved configuration.<br />
Type no after each setup question.</em></li>
<li>Router&gt;enable<br />
<em>Once the Router# prompt appears, you are in enable mode.</em></li>
<li>Router#copy startup-config running-config </li>
<li>Router#configure terminal</li>
<li>hostname(config)#enable secret <strong>your_new_password_here</strong><br />
<em>Issue the no shutdown command on every interface that you use.</em></li>
<li>hostname(config)#config-register 0&#215;2102</li>
<li>hostname(config)#Ctrl-Z</li>
<li>hostname#copy running-config startup-config</li>
<li>hostname#reload</li>
</ul>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=16&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/password-recovery-procedures/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco Router Dial On-Demand using Analog Modem</title>
		<link>http://ciscogeek.org/cisco-router-dial-on-demand-using-analog-modem/</link>
		<comments>http://ciscogeek.org/cisco-router-dial-on-demand-using-analog-modem/#comments</comments>
		<pubDate>Sun, 30 Dec 2007 15:42:11 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[analog]]></category>
		<category><![CDATA[dial]]></category>
		<category><![CDATA[modem]]></category>
		<category><![CDATA[on-demand]]></category>
		<category><![CDATA[ondemand]]></category>
		<category><![CDATA[ppp]]></category>
		<category><![CDATA[pstn]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/cisco-router-dial-on-demand-using-analog-modem/</guid>
		<description><![CDATA[This connection use an analog modem over PSTN line as WAN link. A connection will created automatically when one of site need a communication to remote site. And disconnect automatically once meet idle times. This connection will reapeat every times communication inter site needed. Each site can initiate/create dialup connection.

Requirement:
- Cisco router with serial interface (support [...]]]></description>
			<content:encoded><![CDATA[<p><a title="Dial On-Demand" href="http://ciscogeek.org/wp-content/uploads/2008/01/dialondemand1.gif"></a>This connection use an analog modem over PSTN line as WAN link. A connection will created automatically when one of site need a communication to remote site. And disconnect automatically once meet idle times. This connection will reapeat every times communication inter site needed. Each site can initiate/create dialup connection.</p>
<p><a title="Dial On-Demand" href="http://ciscogeek.org/wp-content/uploads/2008/01/dialondemand1.gif"><img src="http://ciscogeek.org/wp-content/uploads/2008/01/dialondemand1.gif" alt="Dial On-Demand" /></a></p>
<p>Requirement:<br />
- Cisco router with serial interface (support async mode).<br />
- Analog modem (RS232 interface).<br />
- Serial cable (DB60 to RS232).<br />
- PSTN line.</p>
<p><strong>ROUTER A</strong></p>
<p>hostname Router-A<br />
!<br />
enable password cisco<br />
!<br />
username ciscouser1 password ciscopass<br />
!<br />
chat-script dial “” “atdtT” TIMEOUT 60 CONNECT c<br />
!<br />
interface Ethernet 0<br />
 ip address 10.0.33.250 255.255.255.0<br />
!<br />
interface Serial 0 <em><span style="color: #0000ff;">&lt;= plug modem here</span></em><br />
 physical-layer async<br />
 ip address 10.0.253.30 255.255.255.252<br />
 encapsulation ppp<br />
 async dynamic address<br />
 async dynamic routing<br />
 async mode dedicated<br />
 dialer in-band<br />
 dialer idle-timeout 60<br />
 dialer wait-for-carrier-time 200<br />
 dialer map ip 10.0.253.29 name ciscouser1 modem-script dial +10218560620 <span style="color: #0000ff;"><em>&lt;= remote number</em></span><br />
 dialer-group 1<br />
 peer default ip address 10.0.253.29<br />
 ppp authentication chap pap<br />
!<br />
router eigrp 1<br />
 network 10.0.0.0<br />
!<br />
no ip classless<br />
ip route 10.0.2.0 255.255.255.0 10.0.253.29 150<br />
access-list 103 deny eigrp any host 255.255.255.255<br />
access-list 103 permit ip any any<br />
dialer-list 1 protocol ip list 103<br />
!<br />
line con 0<br />
 line 2<br />
 exec-timeout 0 0<br />
 modem InOut<br />
 modem autoconfigure discovery<br />
 speed 115200<br />
 flowcontrol hardware<br />
!<br />
line vty 0 4<br />
 password cisco<br />
 login<br />
!<br />
end</p>
<p>===</p>
<p><strong>ROUTER B</strong></p>
<p>hostname Router-B<br />
!<br />
enable password cisco<br />
!<br />
username ciscouser2 password ciscopass<br />
chat-script dial “” “atdtT” TIMEOUT 60 CONNECT c<br />
!<br />
interface Ethernet 0<br />
 ip address 10.0.2.251 255.255.255.0<br />
!<br />
interface Serial 0 <em><span style="color: #0000ff;">&lt;= plug modem here</span></em><br />
 physical-layer async<br />
 ip address 10.0.253.29 255.255.255.252<br />
 encapsulation ppp<br />
 async dynamic address<br />
 async dynamic routing<br />
 async mode dedicated<br />
 dialer in-band<br />
 dialer idle-timeout 60<br />
 dialer wait-for-carrier-time 200<br />
 dialer map ip 10.0.253.30 name ciscouser1 modem-script dial +10218195240 <em><span style="color: #0000ff;">&lt;= remote number</span></em><br />
 dialer-group 1<br />
 peer default ip address 10.0.253.30<br />
 ppp authentication chap pap<br />
!<br />
router eigrp 1<br />
 network 10.0.0.0<br />
!<br />
no ip classless<br />
ip route 10.0.33.0 255.255.255.0 10.0.253.30 150<br />
access-list 103 deny eigrp any host 255.255.255.255<br />
access-list 103 permit ip any any<br />
dialer-list 1 protocol ip list 103<br />
!<br />
line con 0<br />
 line 2<br />
 exec-timeout 0 0<br />
 modem InOut<br />
 modem autoconfigure discovery<br />
 speed 115200<br />
 flowcontrol hardware<br />
!<br />
line vty 0 4<br />
 password cisco<br />
 login<br />
!<br />
end</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=15&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/cisco-router-dial-on-demand-using-analog-modem/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Create Load-Balancer with Cisco Router</title>
		<link>http://ciscogeek.org/create-load-balancer-with-cisco-router/</link>
		<comments>http://ciscogeek.org/create-load-balancer-with-cisco-router/#comments</comments>
		<pubDate>Sun, 30 Dec 2007 04:32:12 +0000</pubDate>
		<dc:creator>Yanurmal</dc:creator>
				<category><![CDATA[Router]]></category>
		<category><![CDATA[balance]]></category>
		<category><![CDATA[load]]></category>

		<guid isPermaLink="false">http://ciscogeek.org/?p=9</guid>
		<description><![CDATA[Requirement:
- Cisco router IP CEF support
- Dual WAN connection
- You understand cisco basic configuration (Go to Beginer Section)
ROUTER-A
hostname Router-A
!
enable password cisco
!
ip cef
!
interface Ethernet 0
ip address 10.10.1.1 255.255.255.0
!
interface Serial0
ip address 10.10.253.1 255.255.255.252
ip load-sharing per-packet
!
interface Serial1
ip address 10.10.253.5 255.255.255.252
ip load-sharing per-packet
!
no ip classless
no ip route-cache
ip route 10.10.2.0 255.255.255.0 Serial0
ip route 10.10.2.0 255.255.255.0 Serial1
!
line con 0
!
line vty 0 [...]]]></description>
			<content:encoded><![CDATA[<p>Requirement:<br />
- Cisco router IP CEF support<br />
- Dual WAN connection<br />
- You understand cisco basic configuration (Go to Beginer Section)</p>
<p><strong>ROUTER-A</strong></p>
<p>hostname Router-A<br />
!<br />
enable password cisco<br />
!<br />
ip cef<br />
!<br />
interface Ethernet 0<br />
ip address 10.10.1.1 255.255.255.0<br />
!<br />
interface Serial0<br />
ip address 10.10.253.1 255.255.255.252<br />
ip load-sharing per-packet<br />
!<br />
interface Serial1<br />
ip address 10.10.253.5 255.255.255.252<br />
ip load-sharing per-packet<br />
!<br />
no ip classless<br />
no ip route-cache<br />
ip route 10.10.2.0 255.255.255.0 Serial0<br />
ip route 10.10.2.0 255.255.255.0 Serial1<br />
!<br />
line con 0<br />
!<br />
line vty 0 4<br />
password cisco<br />
login<br />
!<br />
end</p>
<p>===</p>
<p><strong>ROUTER-B<br />
</strong><br />
hostname Router-B<br />
!<br />
enable password cisco<br />
!<br />
ip cef<br />
!<br />
interface Ethernet 0<br />
ip address 10.10.2.1 255.255.255.0<br />
!<br />
interface Serial0<br />
ip address 10.10.253.2 255.255.255.252<br />
ip load-sharing per-packet<br />
!<br />
interface Serial1<br />
ip address 10.10.253.6 255.255.255.252<br />
ip load-sharing per-packet<br />
!<br />
no ip classless<br />
no ip route-cache<br />
ip route 10.10.1.0 255.255.255.0 Serial0<br />
ip route 10.10.1.0 255.255.255.0 Serial1<br />
!<br />
line con 0<br />
!<br />
line vty 0 4<br />
password cisco<br />
login<br />
!<br />
end</p>
<img src="http://ciscogeek.org/?ak_action=api_record_view&id=9&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://ciscogeek.org/create-load-balancer-with-cisco-router/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
