tag:blogger.com,1999:blog-19042268068608164922011-04-21T21:18:51.115-07:00ZeuX Productionhttp://www.blogger.com/profile/12872726108435047468noreply@blogger.comBlogger11100tag:blogger.com,1999:blog-1904226806860816492.post-75500917605180535012007-11-28T10:23:00.000-08:002007-12-19T03:43:06.533-08:00<p class="MsoNormal">Voici un exemple de configuration d'un routeur Cisco pour une connexion PPPoA.<br />Il manque bien sur une ACL sur l'interface Dialer pour sécuriser le réseau.<br /></p><br /><p class="MsoNormal"> </p><br /><p class="MsoNormal">#Configuration du service DHCP sur le routeur<br />ip dhcp pool LAN<br />network 192.168.1.0 255.255.255.0<br />default-router 192.168.1.1<br />dns-server 192.168.1.1<br />lease 8<br />!<br />!<br />#Serveur DNS pour la résolution de nom<br />ip name-server 194.6.128.3<br />ip name-server 194.6.128.4<br />!<br />!<br />!</p> <p class="MsoNormal"><span style="" lang="EN-US">#</span>compte<span style="" lang="EN-US"> pour vous </span>connectez<span style="" lang="EN-US"> en Telnet ou SSH<br />username admin privilege 15 secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxx<br />!<br />!<br />!<br />!<br />!<br />interface ATM0<br />no ip address<br />ip mtu 1472<br />no atm ilmi-keepalive<br />pvc 8/35<br />encapsulation aal5mux ppp dialer<br />dialer pool-member 1<br />!<br />#Configuration pour l’ADSL <span style=""> </span>: <i>itu-dmt</i>—ITU full rate mode (ITU G.992.1)<br />dsl operating-mode itu-dmt<br /><o:p></o:p>!<br />#Vlan par défaut </span>correspondant<span style="" lang="EN-US"> aux ports FastEthernet<br />interface Vlan1<br />description LAN<br />ip address 192.168.1.1 255.255.255.0<br />ip nat inside<br />ip virtual-reassembly<br />ip tcp adjust-mss 1452<br />!<o:p></o:p><br />interface Dialer0<br />description WAN<o:p></o:p></span></p> <p class="MsoNormal"><span style="" lang="EN-US">#Adresse dynamique<br />ip address negotiated<br />ip access-group 100 out<br />ip mtu 1492<br />ip nat outside<br />ip virtual-reassembly<br />encapsulation ppp<br />dialer pool 1<br />dialer-group 1<o:p></o:p></span></p> <p class="MsoNormal"><span style="" lang="EN-US">#On désactive le protocol Cisco Discovery Protocol<br />no cdp enable<o:p></o:p></span></p> <p class="MsoNormal"><span style="" lang="EN-US">#Configuration de l’ Authentification PPP chap pap<br />ppp authentication chap callin<br />ppp chap hostname toto@fai.fr<br />ppp chap password 0 toto<br />!<br />ip classless<br />ip route 0.0.0.0 0.0.0.0 Dialer0<br />!<o:p></o:p></span></p> <p class="MsoNormal"><span style="" lang="EN-US">#Désactive connection Http et Https sur le routeur<br />no ip http server<br />no ip http secure-server<o:p></o:p></span></p> <p class="MsoNormal"><span style="" lang="EN-US"># Nat Overload = Port Adresse Translation<br />ip nat inside source list 1 interface Dialer0 overload</span></p><p class="MsoNormal"><span style="" lang="EN-US">#Exemple de NAT statique pour Emule si vous utilisez les ports 2554 et 2558 TCP/UDP<br /></span></p><p class="MsoNormal"><span style="" lang="EN-US"> ip nat inside source static tcp 192.168.1.15 2554 interface Dialer0 2554<br />ip nat inside source static udp 192.168.1.15 2558 interface Dialer0 2558</span></p><p class="MsoNormal"><span style="" lang="EN-US">#Le routeur sera configuré comme relais DNS<br />ip dns server<br />!<o:p></o:p></span></p> <p class="MsoNormal"><span style="" lang="EN-US">#On autorise tous au LAN<br />access-list 1 permit any<br /><br />dialer-list 1 protocol ip permit<br />no cdp run<br />!<br />control-plane<br />!</span></p><p class="MsoNormal"><span style="" lang="EN-US">#Bannière lors d'une connection :</span></p>banner motd<br />Attention !<br />Acces reserve.<br />Toutes activites sur ce systeme sont enregistrees.<br />Toutes preuves d activites non autorisees seront traitees par les autorites competentes.<br /><p class="MsoNormal"><span style="" lang="EN-US">Toute intrusion sur un systeme informatique est interdite par les articles 323-1 a 323-7 du Code penal<br /></span></p><p class="MsoNormal"><span style="" lang="EN-US">!<br />line con 0<br />login local<br />no modem enable<br />line aux 0<br />line vty 0 4<br />privilege level 15<br />login local<br />transport input telnet ssh<br />!<br />scheduler max-task-time 5000<br />end<br /><br /><!--[if !supportLineBreakNewLine]--><br /><!--[endif]--><o:p></o:p></span></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><o:p> </o:p></p><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1904226806860816492-7550091760518053501?l=zeux-production.blogspot.com' alt='' /></div>ZeuX Productionhttp://www.blogger.com/profile/12872726108435047468noreply@blogger.com1