pixfirewall> enable Password: pixfirewall# config Not enough arguments. Usage: configure terminal pixfirewall# config t pixfirewall(config)# no dhcpd address inside DHCPD disabled on inside interface because address pool is removed pixfirewall(config)# no dhcpd address outside pixfirewall(config)# ip address inside 10.0.1.1 255.255.255.0 pixfirewall(config)# ip address outside 192.168.1.2 255.255.255.0 pixfirewall(config)# static (inside,outside) 192.168.1.15 10.0.1.11 netmask 25$ pixfirewall(config)# conduit permit tcp any eq www host 172.16.0.1 pixfirewall(config)# route outside 0.0.0.0 0.0.0.0 192.168.1.1 1 pixfirewall(config)# exit pixfirewall# show route outside 0.0.0.0 0.0.0.0 192.168.1.1 1 OTHER static inside 10.0.1.0 255.255.255.0 10.0.1.1 1 CONNECT static outside 192.168.1.0 255.255.255.0 192.168.1.2 1 CONNECT static outside 192.168.2.0 255.255.255.0 99.99.99.2 1 OTHER static pixfirewall# ping 192.168.1.2 192.168.1.2 response received -- 0ms 192.168.1.2 response received -- 0ms 192.168.1.2 response received -- 0ms pixfirewall# ping 172.16.0.1 172.16.0.1 response received -- 0ms 172.16.0.1 response received -- 0ms 172.16.0.1 response received -- 0ms pixfirewall# ping 172.16.0.11 172.16.0.11 response received -- 0ms 172.16.0.11 response received -- 0ms 172.16.0.11 response received -- 0ms pixfirewall# pixfirewall(config)# icmp deny any outside pixfirewall(config)# icmp deny any inside stranka 88 ------------------------------------------------------------------------------------------------ Vše co dělám s FW ------------------------------------------------------------------------------------------------ pixfirewall> enable Password: pixfirewall# configure factory-default 192.168.1.1 255.255.255.0 Usage: configure terminal pixfirewall# reload Proceed with reload? [confirm] Rebooting.... CISCO SYSTEMS PIX-501 Embedded BIOS Version 4.3.200 07/31/01 15:58:22.08 Compiled by morlee 16 MB RAM PCI Device Table. Bus Dev Func VendID DevID Class Irq 00 00 00 1022 3000 Host Bridge 00 11 00 8086 1209 Ethernet 9 00 12 00 8086 1209 Ethernet 10 Cisco Secure PIX Firewall BIOS (4.2) #6: Mon Aug 27 15:09:54 PDT 2001 Platform PIX-501 Flash=E28F640J3 @ 0x3000000 Use BREAK or ESC to interrupt flash boot. Use SPACE to begin flash boot immediately. Reading 1974784 bytes of image from flash. ################################################################################ ################################# 16MB RAM mcwa i82559 Ethernet at irq 9 MAC: 0016.9dda.e5aa mcwa i82559 Ethernet at irq 10 MAC: 0016.9dda.e5ac Flash=E28F640J3 @ 0x3000000 BIOS Flash=E28F640J3 @ 0xD8000 ----------------------------------------------------------------------- || || || || |||| |||| ..:||||||:..:||||||:.. c i s c o S y s t e m s Private Internet eXchange ----------------------------------------------------------------------- Cisco PIX Firewall Cisco PIX Firewall Version 6.3(5) Licensed Features: Failover: Disabled VPN-DES: Enabled VPN-3DES-AES: Enabled Maximum Physical Interfaces: 2 Maximum Interfaces: 2 Cut-through Proxy: Enabled Guards: Enabled URL-filtering: Enabled Inside Hosts: 10 Throughput: Unlimited IKE peers: 10 This PIX has a Restricted (R) license. ****************************** Warning ******************************* Compliance with U.S. Export Laws and Regulations - Encryption. This product performs encryption and is regulated for export by the U.S. Government. This product is not authorized for use by persons located outside the United States and Canada that do not have prior approval from Cisco Systems, Inc. or the U.S. Government. This product may not be exported outside the U.S. and Canada either by physical or electronic means without PRIOR approval of Cisco Systems, Inc. or the U.S. Government. Persons outside the U.S. and Canada may not re-export, resell or transfer this product by either physical or electronic means without prior approval of Cisco Systems, Inc. or the U.S. Government. ******************************* Warning ******************************* Copyright (c) 1996-2005 by Cisco Systems, Inc. Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013. Cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 . Cryptochecksum(unchanged): 65a76c41 79d27f0d f130a5ae 6519f02e Type help or '?' for a list of available commands. pixfirewall> enable Password: pixfirewall# config t pixfirewall(config)# no dhcpd address inside DHCPD disabled on inside interface because address pool is removed pixfirewall(config)# no dhcpd address outside pixfirewall(config)# ip address inside 10.0.1.1 255.255.255.0 pixfirewall(config)# ip address outside 192.168.1.2 255.255.255.0 pixfirewall(config)# static (inside,outside) 192.168.1.15 10.0.1.11 netmask 255.255.255.255 ------------------------------------------------------------------------------------------------ permit any any nejde ------------------------------------------------------------------------------------------------ pixfirewall(config)# conduit permit any any eq www host 172.16.0.1 ERROR: invalid protocol any Usage: [no] conduit deny|permit |object-group | object-group [ [] | object-group ] | object-group [ [] | object-group ] [no] conduit deny|permit icmp | object-group | object-group [ | object-group ] pixfirewall(config)# conduit permit tcp any eq www host 172.16.0.1 pixfirewall(config)# conduit permit udp any eq www host 172.16.0.1 pixfirewall(config)# route outside 0.0.0.0 0.0.0.0 192.168.1.1 1 pixfirewall(config)# exit pixfirewall# show route outside 0.0.0.0 0.0.0.0 192.168.1.1 1 OTHER static inside 10.0.1.0 255.255.255.0 10.0.1.1 1 CONNECT static outside 192.168.1.0 255.255.255.0 192.168.1.2 1 CONNECT static outside 192.168.2.0 255.255.255.0 99.99.99.2 1 OTHER static ------------------------------------------------------------------------------------------------ PINGY NA JEDNOTLIVÁ ZAŘÍZENÍ ------------------------------------------------------------------------------------------------ pixfirewall# ping 192.168.1.1 192.168.1.1 response received -- 0ms 192.168.1.1 response received -- 0ms 192.168.1.1 response received -- 0ms pixfirewall# ping 192.168.1.2 192.168.1.2 response received -- 0ms 192.168.1.2 response received -- 0ms 192.168.1.2 response received -- 0ms pixfirewall# ping 10.0.1.1 10.0.1.1 response received -- 0ms 10.0.1.1 response received -- 0ms 10.0.1.1 response received -- 0ms pixfirewall# ping 10.0.1.11 10.0.1.11 response received -- 0ms 10.0.1.11 response received -- 0ms 10.0.1.11 response received -- 0ms pixfirewall# ping 172.16.0.1 172.16.0.1 response received -- 10ms 172.16.0.1 response received -- 0ms 172.16.0.1 response received -- 0ms pixfirewall# ping 172.16.0.11 172.16.0.11 response received -- 0ms 172.16.0.11 response received -- 0ms 172.16.0.11 response received -- 0ms pixfirewall# ping 172.16.0.12 172.16.0.12 response received -- 0ms 172.16.0.12 response received -- 0ms 172.16.0.12 response received -- 0ms ------------------------------------------------------------------------------------------------ SHOW RUN ------------------------------------------------------------------------------------------------ pixfirewall# show run : Saved : PIX Version 6.3(5) interface ethernet0 auto interface ethernet1 100full nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password 8Ry2YjIyt7RRXU24 encrypted passwd 2KFQnbNIdI.2KYOU encrypted hostname pixfirewall domain-name ciscopix.com fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol http 443 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names access-list inside_outbound_nat0_acl permit ip any any access-list inside_access_in permit icmp any any access-list inside_access_in permit tcp any any access-list outside_access_in permit icmp any any access-list outside_access_in permit tcp any any access-list outside_access_in permit esp any host 99.99.99.1 access-list outside_access_in permit ah any host 99.99.99.1 access-list outside_access_in permit udp any host 99.99.99.1 eq isakmp access-list crypto1 permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255. 0 pager lines 24 logging on logging standby mtu outside 1500 mtu inside 1500 ip address outside 192.168.1.2 255.255.255.0 ip address inside 10.0.1.1 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm location 99.99.99.2 255.255.255.255 outside pdm location 192.168.2.0 255.255.255.0 outside pdm logging informational 100 pdm history enable arp timeout 14400 nat (inside) 0 access-list inside_outbound_nat0_acl static (inside,outside) 192.168.1.15 10.0.1.11 netmask 255.255.255.255 0 0 access-group outside_access_in in interface outside access-group inside_access_in in interface inside conduit permit tcp any eq www host 172.16.0.1 conduit permit udp any eq www host 172.16.0.1 route outside 0.0.0.0 0.0.0.0 192.168.1.1 1 route outside 192.168.2.0 255.255.255.0 99.99.99.2 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout sip-disconnect 0:02:00 sip-invite 0:03:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ max-failed-attempts 3 aaa-server TACACS+ deadtime 10 aaa-server RADIUS protocol radius aaa-server RADIUS max-failed-attempts 3 aaa-server RADIUS deadtime 10 aaa-server LOCAL protocol local http server enable http 192.168.1.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable crypto ipsec transform-set myset esp-des esp-sha-hmac crypto map pix1map 10 ipsec-isakmp crypto map pix1map 10 match address crypto1 crypto map pix1map 10 set peer 99.99.99.2 crypto map pix1map 10 set transform-set myset crypto map pix1map interface outside isakmp enable outside isakmp key ******** address 99.99.99.2 netmask 255.255.255.255 isakmp policy 10 authentication pre-share isakmp policy 10 encryption des isakmp policy 10 hash sha isakmp policy 10 group 2 isakmp policy 10 lifetime 86400 telnet timeout 5 ssh timeout 5 console timeout 0 dhcpd lease 3600 dhcpd ping_timeout 750 username pixi password mM9IEGD8FDGCDDPf encrypted privilege 15 terminal width 80 Cryptochecksum:65a76c4179d27f0df130a5ae6519f02e : end ------------------------------------------------------------------------------------------------ SHOW IP ------------------------------------------------------------------------------------------------ pixfirewall# show ip System IP Addresses: ip address outside 192.168.1.2 255.255.255.0 ip address inside 10.0.1.1 255.255.255.0 Current IP Addresses: ip address outside 192.168.1.2 255.255.255.0 ip address inside 10.0.1.1 255.255.255.0 ------------------------------------------------------------------------------------------------ SHOW INTERFACE ------------------------------------------------------------------------------------------------ pixfirewall# show interface interface ethernet0 "outside" is up, line protocol is up Hardware is i82559 ethernet, address is 0016.9dda.e5aa IP address 192.168.1.2, subnet mask 255.255.255.0 MTU 1500 bytes, BW 100000 Kbit full duplex 15 packets input, 1082 bytes, 0 no buffer Received 1 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 24 packets output, 1648 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/1) output queue (curr/max blocks): hardware (0/1) software (0/1) interface ethernet1 "inside" is up, line protocol is up Hardware is i82559 ethernet, address is 0016.9dda.e5ac IP address 10.0.1.1, subnet mask 255.255.255.0 MTU 1500 bytes, BW 100000 Kbit full duplex 132 packets input, 10884 bytes, 0 no buffer Received 10 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 6 packets output, 402 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/6) output queue (curr/max blocks): hardware (0/1) software (0/1) ------------------------------------------------------------------------------------------------ Vše co dělám s routerem ------------------------------------------------------------------------------------------------ % Please answer 'yes' or 'no'. Would you like to enter the initial configuration dialog? [yes/no]: no % There may not be enough space available to collect the complete crashinfo % It would be advisable to have 280583 bytes free space on flash:crashinfo Press RETURN to get started! *Mar 1 00:00:42.433: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state t o up *Mar 1 00:00:42.433: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state t o up *Mar 1 00:00:42.433: %LINK-3-UPDOWN: Interface Serial0/0, changed state to down *Mar 1 00:00:42.437: %LINK-3-UPDOWN: Interface Serial0/1, changed state to down *Mar 1 00:00:43.435: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern et0/0, changed state to down *Mar 1 00:00:43.435: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern et0/1, changed state to down *Mar 1 00:00:43.435: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to down *Mar 1 00:00:43.439: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1, changed state to down *Mar 1 00:38:51.550: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern et0/1, changed state to up *Mar 1 00:58:26.432: %LINK-5-CHANGED: Interface BRI0/0, changed state to admini stratively down *Mar 1 00:58:27.590: %LINEP Router> RouteROTO-5-UPDOWN: Line protocol on Interface BRI0/0, changed state to down *Mar 1 00:58:28.135: %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to administratively down *Mar 1 00:58:28.139: %LINK-5-CHANGED: Interface Serial0/0, changed state to adm inistratively down *Mar 1 00:58:28.139: %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to administratively down *Mar 1 00:58:28.139: %LINK-5-CHANGED: Interface Serial0/1, changed state to adm inistratively down *Mar 1 00:58:28.852: %SYS-5-RESTART: System restarted -- Cisco IOS Software, C2600 Software (C2600-ADVSECURITYK9-M), Version 12.4(1a), RE LEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2005 by Cisco Systems, Inc. Compiled Fri 27-May-05 15:09 by hqluong *Mar 1 00:58:28.852: %SNMP-5-COLDSTART: SNMP agent on host Router is undergoing a cold start *Mar 1 00:58:29.141: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern et0/1, changed state to downr> Router>enable) % Unknown command or computer name, or unable to find computer address Router>enable ------------------------------------------------------------------------------------------------ SHOW INTERFACE ------------------------------------------------------------------------------------------------ Router#show interface FastEthernet0/0 is administratively down, line protocol is down Hardware is AmdFE, address is 000a.4121.54c0 (bia 000a.4121.54c0) MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Auto-duplex, Auto Speed, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out BRI0/0 is administratively down, line protocol is down Hardware is PQUICC BRI (3086) MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 48 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Serial0/0 is administratively down, line protocol is down Hardware is PowerQUICC Serial MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 1158 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=down DSR=down DTR=down RTS=down CTS=down BRI0/0:1 is administratively down, line protocol is down Hardware is PQUICC BRI (3086) MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 48 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions BRI0/0:2 is administratively down, line protocol is down Hardware is PQUICC BRI (3086) MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 48 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions FastEthernet0/1 is administratively down, line protocol is down Hardware is AmdFE, address is 000a.4121.54c1 (bia 000a.4121.54c1) MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Auto-duplex, Auto Speed, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:43, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 106 packets input, 40119 bytes Received 100 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out Serial0/1 is administratively down, line protocol is down Hardware is PowerQUICC Serial MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 1158 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=down DSR=down DTR=down RTS=down CTS=down ------------------------------------------------------------------------------------------------ KONFIGURACE ROUTERU ------------------------------------------------------------------------------------------------ Router#config t Enter configuration commands, one per line. End with CNTL/Z. Router(config)#interface fastethernet 0/0 Router(config-if)#ip address 192.168.1.1 255.255.255.0 Router(config-if)#no shutdown Router(config-if)#exit *Mar 1 01:00:34.490: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state t o up *Mar 1 01:00:41.365: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern et0/0, changed state to up Router(config)#interface fastethernet 0/1 Router(config-if)#ip address 172.16.0.1 255.255.255.0 Router(config-if)#no shutdown Router(config-if)# *Mar 1 01:01:25.814: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state t o up *Mar 1 01:01:28.815: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern et0/1, changed state to up Router(config-if)#exit Router(config)#exit *Mar 1 01:01:41.504: %SYS-5-CONFIG_I: Configured from console by console ------------------------------------------------------------------------------------------------ SHOW INTERFACE ------------------------------------------------------------------------------------------------ Router#show interface FastEthernet0/0 is up, line protocol is up Hardware is AmdFE, address is 000a.4121.54c0 (bia 000a.4121.54c0) Internet address is 192.168.1.1/24 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:05, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 13 packets output, 1926 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 babbles, 0 late collision, 0 deferred 4 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out BRI0/0 is administratively down, line protocol is down Hardware is PQUICC BRI (3086) MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 48 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Serial0/0 is administratively down, line protocol is down Hardware is PowerQUICC Serial MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 1158 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=down DSR=down DTR=down RTS=down CTS=down BRI0/0:1 is administratively down, line protocol is down Hardware is PQUICC BRI (3086) MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 48 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions BRI0/0:2 is administratively down, line protocol is down Hardware is PQUICC BRI (3086) MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/16 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 48 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions FastEthernet0/1 is up, line protocol is up Hardware is AmdFE, address is 000a.4121.54c1 (bia 000a.4121.54c1) Internet address is 172.16.0.1/24 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 114 packets input, 42113 bytes Received 108 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 9 packets output, 1708 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 babbles, 0 late collision, 0 deferred 4 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out Serial0/1 is administratively down, line protocol is down Hardware is PowerQUICC Serial MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/0/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 1158 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=down DSR=down DTR=down RTS=down CTS=down Router# ------------------------------------------------------------------------------------------------ SHOW RUN ------------------------------------------------------------------------------------------------ Router>enable Router#show run Building configuration... Current configuration : 853 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! boot-start-marker boot-end-marker ! ! no aaa new-model ! resource policy ! no network-clock-participate slot 1 no network-clock-participate wic 0 ip subnet-zero ip cef ! ! no ip dhcp use vrf connected ! ! no ip ips deny-action ips-interface ! ! ! ! ! ! ! ! ! interface FastEthernet0/0 ip address 192.168.1.1 255.255.255.0 duplex auto speed auto ! interface BRI0/0 no ip address shutdown ! interface Serial0/0 no ip address shutdown ! interface FastEthernet0/1 ip address 172.16.0.1 255.255.255.0 duplex auto speed auto ! interface Serial0/1 no ip address shutdown ! ip classless ! no ip http server no ip http secure-server ! ! ! control-plane ! ! ! ! line con 0 line aux 0 line vty 0 4 ! ! end Router# Router#