this is all screwed up. i'm pretty sure the ACL's have something to do with this.
anyways, i'm trying to get my router to get an address from my cable provider via DHCP, unfortunately it's not picking.
Ethernet0/0 unassigned YES DHCP up up
here's my config... it's a bit long...
----------------
version 12.3
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname pluto
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxx
enable password 7 xxxxx
!
username austin password 7 xxxxx
clock timezone PST -8
clock summer-time PDT recurring
aaa new-model
aaa session-id common
!
!
! ------ IP and network services section
ip subnet-zero
ip classless
ip audit notify log
ip audit po max-events 100
ip audit smtp spam 50
ip ssh time-out 30
ip ssh authentication-retries 2
ip domain name sol.home
ip name-server 24.52.223.218
ip name-server 24.52.223.219
ip cef
logging trap debugging
no service tcp-small-servers
no service udp-small-servers
no snmp-server
no service config
no service finger
no cdp run
no voice hpi capture buffer
no voice hpi capture destination
no ip source-route
no ip http server
no ip http secure-server
no ip bootp server
no ip finger
no ip domain-lookup
no ip name-server
!
!
! ----- Boot control section
no boot network
no service config
!
!
! ----- SNMP Section (for totally disabling SNMP)
! disable SNMP trap and system-shutdown features
no snmp-server enable traps
no snmp-server system-shutdown
no snmp-server trap-auth
! turn off SNMP altogether
no snmp-server
!
!
!
!
interface Ethernet0/0
description *** ethernet 0 - WAN Interface ***
ip address dhcp
ip inspect FIREWALL out
ip access-group INBOUND in
ip accounting access-violations
ip nat outside
ip verify unicast reverse-path
no cdp enable
no ip redirect
no ip proxy-arp
no ip directed-broadcast
no ip mask-reply
no ip unreachable
no ip redirect
full-duplex
hold-queue 100 out
no shutdown
!
interface Serial0/0
no ip address
no ip proxy-arp
no ip directed-broadcast
no ip unreachable
no ip redirect
no fair-queue
no cdp enable
shutdown
!
interface BRI0/0
no ip address
no ip proxy-arp
no ip directed-broadcast
no ip unreachable
no ip redirect
no cdp enable
shutdown
!
interface Ethernet0/1
description *** ethernet 0/1 - LAN Interface ***
ip address 10.10.100.1 255.255.255.248
ip access-group OUTBOUND out
ip accounting access-violations
ip nat inside
no ip unreachables
no ip proxy-arp
no ip directed-broadcast
no ip mask-reply
no cdp enable
full-duplex
hold-queue 100 out
no shutdown
!
ip nat pool homenatpool 10.10.100.1 10.10.100.1 netmask 255.255.255.248
ip nat inside source list 25 pool homenatpool overload
!
!
!
!---- CBAC's
ip inspect tcp synwait-time 15
ip inspect tcp finwait-time 1
ip inspect tcp idle-time 1800
ip inspect udp idle-time 15
ip inspect name FIREWALL http audit-trail on
ip inspect name FIREWALL smtp audit-trail on
ip inspect name FIREWALL ftp audit-trail on
ip inspect name FIREWALL tcp audit-trail on
ip inspect name FIREWALL udp audit-trail on
!
!---- OUTBOUND LAN port access-list
ip access-list extended OUTBOUND
deny tcp any any eq 27665 log
deny udp any any eq 31335 log
deny udp any any eq 27444 log
deny tcp any any eq 16660 log
deny tcp any any eq 65000 log
deny tcp any any eq 33270 log
deny tcp any any eq 39168 log
deny tcp any any range 6711 6712 log
deny tcp any any eq 6776 log
deny tcp any any eq 6669 log
deny tcp any any eq 2222 log
deny tcp any any eq 7000 log
!--- ICMP_blocking
permit icmp any any echo-reply
permit icmp any any time-exceeded
permit icmp any any packet-too-big
permit icmp any any traceroute
permit icmp any any unreachable
permit icmp any any parameter-problem
!
!
!---- INBOUND WAN port access-list
ip access-list extended INBOUND
deny ip 10.10.100.0 0.0.0.3 any log
deny ip 127.0.0.0 0.255.255.255 any log
deny ip 10.0.0.0 0.255.255.255 any log
deny ip 0.0.0.0 0.255.255.255 any log
deny ip 172.16.0.0 0.15.255.255 any log
deny ip 192.168.0.0 0.0.255.255 any log
deny ip 192.0.2.0 0.0.0.255 any log
deny ip 224.0.0.0 15.255.255.255 any log
deny ip host 255.255.255.255 any log
!--- ICMP_blocking
deny icmp any any echo log
deny icmp any any redirect log
deny icmp any any mask-request log
deny ip any any log
!
!---- SSH Connectivity
ip access-list extenxted SSH_ACCESS
permit tcp host xxx host 10.10.100.xxx eq 22 log
permit tcp host xxx host 10.10.100.xxx eq 22 log
!
!
!
!
banner exec ^C
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This system is private property, and is intended for the specific *
* use of authorized users only. All activities of individuals using this *
* computing system without authority, or in excess of their authority, are *
* monitored and recorded by system personnel. If any such monitoring *
* reveals possible evidence of criminal activity, system personnel may *
* provide such evidence to law enforcement officials. *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *^C
!
line con 0
password 7 xxxxx
stopbits 1
speed 115200
line aux 0
line vty 0
access-class SSH_ACCESS in
transport input ssh
line vty 1 4
transport input none
!
scheduler max-task-time 5000
ntp clock-period 17168756
ntp server 192.4.41.41
ntp server 192.5.41.40
!
!
end
------------------------
anyways, i'm trying to get my router to get an address from my cable provider via DHCP, unfortunately it's not picking.
Ethernet0/0 unassigned YES DHCP up up
here's my config... it's a bit long...
----------------
version 12.3
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname pluto
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxx
enable password 7 xxxxx
!
username austin password 7 xxxxx
clock timezone PST -8
clock summer-time PDT recurring
aaa new-model
aaa session-id common
!
!
! ------ IP and network services section
ip subnet-zero
ip classless
ip audit notify log
ip audit po max-events 100
ip audit smtp spam 50
ip ssh time-out 30
ip ssh authentication-retries 2
ip domain name sol.home
ip name-server 24.52.223.218
ip name-server 24.52.223.219
ip cef
logging trap debugging
no service tcp-small-servers
no service udp-small-servers
no snmp-server
no service config
no service finger
no cdp run
no voice hpi capture buffer
no voice hpi capture destination
no ip source-route
no ip http server
no ip http secure-server
no ip bootp server
no ip finger
no ip domain-lookup
no ip name-server
!
!
! ----- Boot control section
no boot network
no service config
!
!
! ----- SNMP Section (for totally disabling SNMP)
! disable SNMP trap and system-shutdown features
no snmp-server enable traps
no snmp-server system-shutdown
no snmp-server trap-auth
! turn off SNMP altogether
no snmp-server
!
!
!
!
interface Ethernet0/0
description *** ethernet 0 - WAN Interface ***
ip address dhcp
ip inspect FIREWALL out
ip access-group INBOUND in
ip accounting access-violations
ip nat outside
ip verify unicast reverse-path
no cdp enable
no ip redirect
no ip proxy-arp
no ip directed-broadcast
no ip mask-reply
no ip unreachable
no ip redirect
full-duplex
hold-queue 100 out
no shutdown
!
interface Serial0/0
no ip address
no ip proxy-arp
no ip directed-broadcast
no ip unreachable
no ip redirect
no fair-queue
no cdp enable
shutdown
!
interface BRI0/0
no ip address
no ip proxy-arp
no ip directed-broadcast
no ip unreachable
no ip redirect
no cdp enable
shutdown
!
interface Ethernet0/1
description *** ethernet 0/1 - LAN Interface ***
ip address 10.10.100.1 255.255.255.248
ip access-group OUTBOUND out
ip accounting access-violations
ip nat inside
no ip unreachables
no ip proxy-arp
no ip directed-broadcast
no ip mask-reply
no cdp enable
full-duplex
hold-queue 100 out
no shutdown
!
ip nat pool homenatpool 10.10.100.1 10.10.100.1 netmask 255.255.255.248
ip nat inside source list 25 pool homenatpool overload
!
!
!
!---- CBAC's
ip inspect tcp synwait-time 15
ip inspect tcp finwait-time 1
ip inspect tcp idle-time 1800
ip inspect udp idle-time 15
ip inspect name FIREWALL http audit-trail on
ip inspect name FIREWALL smtp audit-trail on
ip inspect name FIREWALL ftp audit-trail on
ip inspect name FIREWALL tcp audit-trail on
ip inspect name FIREWALL udp audit-trail on
!
!---- OUTBOUND LAN port access-list
ip access-list extended OUTBOUND
deny tcp any any eq 27665 log
deny udp any any eq 31335 log
deny udp any any eq 27444 log
deny tcp any any eq 16660 log
deny tcp any any eq 65000 log
deny tcp any any eq 33270 log
deny tcp any any eq 39168 log
deny tcp any any range 6711 6712 log
deny tcp any any eq 6776 log
deny tcp any any eq 6669 log
deny tcp any any eq 2222 log
deny tcp any any eq 7000 log
!--- ICMP_blocking
permit icmp any any echo-reply
permit icmp any any time-exceeded
permit icmp any any packet-too-big
permit icmp any any traceroute
permit icmp any any unreachable
permit icmp any any parameter-problem
!
!
!---- INBOUND WAN port access-list
ip access-list extended INBOUND
deny ip 10.10.100.0 0.0.0.3 any log
deny ip 127.0.0.0 0.255.255.255 any log
deny ip 10.0.0.0 0.255.255.255 any log
deny ip 0.0.0.0 0.255.255.255 any log
deny ip 172.16.0.0 0.15.255.255 any log
deny ip 192.168.0.0 0.0.255.255 any log
deny ip 192.0.2.0 0.0.0.255 any log
deny ip 224.0.0.0 15.255.255.255 any log
deny ip host 255.255.255.255 any log
!--- ICMP_blocking
deny icmp any any echo log
deny icmp any any redirect log
deny icmp any any mask-request log
deny ip any any log
!
!---- SSH Connectivity
ip access-list extenxted SSH_ACCESS
permit tcp host xxx host 10.10.100.xxx eq 22 log
permit tcp host xxx host 10.10.100.xxx eq 22 log
!
!
!
!
banner exec ^C
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* This system is private property, and is intended for the specific *
* use of authorized users only. All activities of individuals using this *
* computing system without authority, or in excess of their authority, are *
* monitored and recorded by system personnel. If any such monitoring *
* reveals possible evidence of criminal activity, system personnel may *
* provide such evidence to law enforcement officials. *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *^C
!
line con 0
password 7 xxxxx
stopbits 1
speed 115200
line aux 0
line vty 0
access-class SSH_ACCESS in
transport input ssh
line vty 1 4
transport input none
!
scheduler max-task-time 5000
ntp clock-period 17168756
ntp server 192.4.41.41
ntp server 192.5.41.40
!
!
end
------------------------
(preferably late at night.)
Facebook
Twitter