Исходное сообщение
"Базовая настройка Cisco 2911" Отправлено maximsaykin, 08-Июл-15 16:59
Всем спасибо. Кто помогал и не очень. Вот конфиг того что получилось. Берите кому надо version 15.2 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname xxxxxxx ! boot-start-marker boot-end-marker ! ! security authentication failure rate 10 log security passwords min-length 6 logging console critical enable secret 5 xxxxxxxxxxxxxxx enable password 7 xxxxxxxxxxxxxxxx ! aaa new-model ! ! aaa authentication login local_auth local ! ! ! ! ! aaa session-id common ! no ip source-route no ip gratuitous-arps ! ! ! ! ! ! no ip bootp server ip domain name local.dom ip name-server 1.1.1.1 ip name-server 2.2.2.2 ip inspect name INSPECT_OUT dns ip inspect name INSPECT_OUT icmp router-traffic ip inspect name INSPECT_OUT tcp router-traffic ip inspect name INSPECT_OUT udp router-traffic ip inspect name INSPECT_OUT http ip inspect name INSPECT_OUT https ip inspect name INSPECT_OUT ftp ip inspect name INSPECT_OUT imap ip inspect name INSPECT_OUT pop3 ip inspect name INSPECT_OUT ldap ip cef login block-for 10 attempts 3 within 5 no ipv6 cef ! multilink bundle-name authenticated ! ! ! ! license udi pid CISCO2911/K9 sn xxxxxxx license boot module c2900 technology-package securityk9_npe ! ! archive log config   logging enable username user password 7 xxxxxxxx ! redundancy ! ! ip ssh time-out 60 ip ssh authentication-retries 2 ! ! ! ! interface Embedded-Service-Engine0/0 no ip address no ip redirects no ip unreachables no ip proxy-arp shutdown no mop enabled ! interface GigabitEthernet0/0 no ip address no ip redirects no ip unreachables no ip proxy-arp shutdown duplex auto speed auto no mop enabled ! interface GigabitEthernet0/1 ip address 3.3.3.3 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat outside ip inspect INSPECT_OUT out ip virtual-reassembly in ip verify unicast source reachable-via rx allow-default 100 duplex auto speed auto no mop enabled ! interface GigabitEthernet0/2 ip address 192.168.x.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly in duplex auto speed auto no mop enabled ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip dns server ip nat inside source list nat interface GigabitEthernet0/1 overload ip route 0.0.0.0 0.0.0.0 4.4.4.4 ! ip access-list extended nat permit ip 192.168.x.0 0.0.0.255 any ! logging trap debugging logging facility local2 access-list 100 permit udp any any eq bootpc no cdp run ! ! ! ! ! control-plane ! ! banner motd ACHTUNG!!! ! line con 0 exec-timeout 5 0 login authentication local_auth transport output telnet line aux 0 exec-timeout 15 0 login authentication local_auth transport output telnet line 2 exec-timeout 15 0 login authentication local_auth no activation-character no exec transport preferred none transport input all transport output pad telnet rlogin lapb-ta mop udptn v120 ssh stopbits 1 line vty 0 4 login authentication local_auth transport input telnet ssh ! scheduler allocate 20000 1000 ! end