my 1st post about cisco configuration at techexam

I got a nice gift 2611 bought by my girlfriend. She got me this because she want my skills to be reached to another level. So I am now officially into this game.

This is my first post in technical question regarding cisco router configuration. Sorry if this is a dumb question for you guys.

I have a few question regarding NAT configuration on cisco router.

1)
In this site, http://www.cisco.com/en/US/tech/tk86/tk89/technologies_configuration_example09186a0080094be1.shtml
i see that the access-list is access-list 102 permit ip 10.10.10.0 0.0.0.255 any

my question is. what if the internal network is 10.10.10.0 255.255.255.240. Will you still type the command access-list 102 permit ip 10.10.10.0 0.0.0.X any where X is equal 15 or still 255?

2) the site also shows ip route 0.0.0.0 0.0.0.0 66.108.112.1. However, as the e0/1 is dhcp, which get the public automatically from ISP. Why does it use 66.108.112.1? I believe 66.108.112.1 is a gateway ip, but what if the ISP changes? And as we use dhcp on e0/1, it supposes to get the gateway ip as well, rite? can we use ip route 0.0.0.0 0.0.0.0 0.0.0.0?

3) how do i open bunch of ports? I need to open 21, 443, 1721, 3389, 4662, etc

4) does this configuration block ping?

Thank you so much.

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

pooker

taktsoi wrote:

I got a nice gift 2611 bought by my girlfriend. She got me this because she want my skills to be reached to another level. So I am now officially into this game.

This is my first post in technical question regarding cisco router configuration. Sorry if this is a dumb question for you guys.

I have a few question regarding NAT configuration on cisco router.

1)
In this site, http://www.cisco.com/en/US/tech/tk86/tk89/technologies_configuration_example09186a0080094be1.shtml
i see that the access-list is access-list 102 permit ip 10.10.10.0 0.0.0.255 any

my question is. what if the internal network is 10.10.10.0 255.255.255.240. Will you still type the command access-list 102 permit ip 10.10.10.0 0.0.0.X any where X is equal 15 or still 255?

2) the site also shows ip route 0.0.0.0 0.0.0.0 66.108.112.1. However, as the e0/1 is dhcp, which get the public automatically from ISP. Why does it use 66.108.112.1? I believe 66.108.112.1 is a gateway ip, but what if the ISP changes? And as we use dhcp on e0/1, it supposes to get the gateway ip as well, rite? can we use ip route 0.0.0.0 0.0.0.0 0.0.0.0?

3) how do i open bunch of ports? I need to open 21, 443, 1721, 3389, 4662, etc

4) does this configuration block ping?

Thank you so much.

Question number one - For the 255.255.255.240 the wildcard mask would be 0.0.0.15

question two - That is setting up a gateway of last resort, it is mainly used for if a routing table does not have information to use about the network you can enter that command, and any network that is not in the routing table it will send it to 66.108.112.1 if you have point to point set up you can also tell it to send it out of an interface.