Cisco 857 and multiple IP addresses

ffmedia — Fri, 07 Oct 2011 09:59:58 GMT

Hello all,

At one of our remote offices we have a BT business broadband product, which at the moment is working ok... apart from all traffic from the office comes across a dynamic IP address - we want to use one of the static IP addresses.

The info provided by BT is as follows (obscured, apart from last octet):

Network: 1.2.3.152

Router: 1.2.3.158

Subnet: 255.255.255.248

Giving us usable IP addresses: 1.2.3.153 - 1.2.3.157

At this office we have 2 servers, "server1" on 1.2.3.154 and "server2" on 1.2.3.155 - these are working fine right now and the IP addresses shouldn't be changed.

The configuration from the router is below, if anyone could advise on changes to get all other traffic to/from the office (including the VPN) routed across one of the other addresses rather than a dynamic address that would be great. Internal IP addresses in the office are 192.168.30.*, router IP is 192.168.30.1

Config:

Current configuration : 5862 bytes
!
! No configuration change since last restart
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router-2
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 ******************
enable password ******************
!
no aaa new-model
!
resource policy
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.30.1 192.168.30.29
!
ip dhcp pool LANDHCP
   import all
   network 192.168.30.0 255.255.255.0
   default-router 192.168.30.1
   dns-server 8.8.8.8 8.8.4.4
   lease 0 2
!
ip dhcp pool server1
   host 1.2.3.154 255.255.255.248
   hardware-address 001f.c6e2.63e8 ieee802
   dns-server 8.8.8.8 8.8.4.4
   default-router 1.2.3.153
!
ip dhcp pool server2
   host 1.2.3.155 255.255.255.248
   hardware-address 0090.e816.41b0 ieee802
   dns-server 8.8.8.8 8.8.4.4
   default-router 1.2.3.153
!
!
ip cef
!
crypto pki trustpoint TP-self-signed-2892020221
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2892020221
revocation-check none
rsakeypair TP-self-signed-2892020221
!
!
crypto pki certificate chain TP-self-signed-2892020221
certificate self-signed 01
[certinfo]
quit
username admin privilege 15 secret 5 *******************
archive
log config
hidekeys
!
!
!
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
crypto isakmp key ************ address *.*.*.5
!
!
crypto ipsec transform-set sonicwall esp-3des esp-md5-hmac
!
crypto map sonicwallmap 10 ipsec-isakmp
description VPN tunnel 1
set peer *.*.*.5
set security-association lifetime seconds 86400
set transform-set sonicwall
match address 120
!
!
!
interface ATM0
description $ES_WAN$
no ip address
no atm ilmi-keepalive
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description LAN VLAN
ip address 1.2.3.153 255.255.255.248 secondary
ip address 192.168.30.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Dialer1
description Internet connection dialer
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer idle-timeout 0 either
dialer persistent delay initial 5
dialer-group 1
no cdp enable
ppp authentication pap chap callin
ppp chap hostname *******@****.btclick.com
ppp chap password 0 *************
ppp ipcp dns request
crypto map sonicwallmap
!
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
no ip nat service sip udp port 5060
ip nat inside source route-map SDM_RMAP_2 interface Dialer1 overload
ip nat inside source route-map blocknat interface Vlan1 overload
!
ip access-list extended Internet-inbound-ACL
permit udp host *.*.*.5 any eq isakmp
permit esp host *.*.*.5 any
!
access-list 100 remark SDM_ACL Category=16
access-list 100 deny   ip 192.168.30.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 100 permit ip 192.168.30.0 0.0.0.255 any
access-list 101 remark CCP_ACL Category=2
access-list 101 remark SDM_ACL Category=16
access-list 101 deny   ip 192.168.30.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 101 permit ip 192.168.30.0 0.0.0.255 any
access-list 120 permit ip 192.168.30.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 135 deny   ip 192.168.30.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 135 permit ip 192.168.30.0 0.0.0.255 any
access-list 140 permit tcp any eq www any
dialer-list 1 protocol ip permit
no cdp run
route-map blocknat permit 10
match ip address 135
!
route-map SDM_RMAP_1 permit 1
match ip address 100
!
route-map SDM_RMAP_2 permit 1
match ip address 101
!
!
control-plane
!
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
password *************
login local
transport input telnet ssh
!
scheduler max-task-time 5000
ntp server 193.62.22.74
end

topic Cisco 857 and multiple IP addresses in Archive

Cisco 857 and multiple IP addresses