Can someone double check the config

Hello,

Below are the configurations from 2 routers that are connected via point to point T1 line. Please note hollywood router has 3 serial interfaces that connect to other routers via point to point T1 lines as well. Can you guys double check the configs to make sure that they are correct and doesnt have anything thats not needed and also if you guys suggest any improvmenets. These are all connected via private T1 lines and actually no access lists are needed but they are there from the previous guy, I want to make some changes to improve performance and stuff. Any advice or suggestions is greatly appreciated!

Building configuration...

Current configuration : 1234 bytes ! ! Last configuration change at 17:32:21 UTC Tue Jul 17 2007 ! NVRAM config last updated at 17:32:33 UTC Tue Jul 17 2007 ! version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Downtown ! enable secret 5 xxxxx enable password xxxxx ! ! ! ! ! ip subnet-zero no ip finger ! ip dhcp pool LA network 10.1.0.0 255.255.0.0 default-router 10.1.0.1 netbios-name-server 10.3.0.254 ! ip audit notify log ip audit po max-events 100 ! ! ! ! ! ! ! interface Ethernet0/0 ip address 10.1.0.1 255.255.0.0 no ip mroute-cache full-duplex arp timeout 60 no mop enabled ! interface BRI0/0 no ip address no ip mroute-cache shutdown ! interface Serial0/0 ip address 192.168.1.6 255.255.255.252 encapsulation ppp no ip mroute-cache ! interface Ethernet0/1 ip address 64.171.205.2 255.255.255.248 ip nat outside no ip mroute-cache shutdown ! ip nat inside source list 1 interface Ethernet0/1 overload ip classless ip route 0.0.0.0 0.0.0.0 Serial0/0 ip route 10.3.0.0 255.255.0.0 192.168.1.5 ip http server ! access-list 1 permit 10.1.0.0 0.0.255.255 ! ! ! line con 0 transport input none line aux 0 line vty 0 4 password xxxxx login ! end

Downtown#

Hollywood#sh run Building configuration...

Current configuration : 1807 bytes ! ! Last configuration change at 17:27:20 UTC Tue Jul 17 2007 ! NVRAM config last updated at 17:28:31 UTC Tue Jul 17 2007 ! version 12.1 no service single-slot-reload-enable service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Hollywood ! logging rate-limit console 10 except errors enable secret 5 xxxxx enable password xxxxx ! ip subnet-zero ! ! no ip finger ! ip dhcp pool hollywood network 10.3.0.0 255.255.0.0 netbios-name-server 10.3.0.252 default-router 10.3.1.1 lease 0 8 ! ip audit notify log ip audit po max-events 100 ! ! call rsvp-sync ! ! ! ! ! ! ! ! interface Ethernet0/0 ip address 10.8.1.1 255.255.0.0 ip nat inside no keepalive shutdown full-duplex arp timeout 60 ! interface Serial0/0 ip address 192.168.1.1 255.255.255.252 encapsulation ppp ! interface Ethernet0/1 bandwidth 10000000 ip address 10.3.0.1 255.255.0.0 no keepalive full-duplex arp timeout 60 ! interface Serial0/1 ip address 192.168.1.5 255.255.255.252 encapsulation ppp ! interface Serial0/2 ip address 192.168.1.9 255.255.255.252 encapsulation ppp service-module t1 timeslots 1-24 ! ip nat inside source list 1 interface Ethernet0/1 overload ip nat inside source static 10.3.0.254 64.174.223.75 ip classless ip route 0.0.0.0 0.0.0.0 10.3.1.1 ip route 10.1.0.0 255.255.0.0 Serial0/1 ip route 10.2.0.0 255.255.0.0 Serial0/0 ip route 10.4.0.0 255.255.0.0 Serial0/2 ip route 10.6.0.0 255.255.0.0 10.3.0.2 no ip http server ! access-list 1 permit 10.0.0.0 0.255.255.255 access-list 1 permit 192.168.0.0 0.0.255.255 snmp-server community public RO ! dial-peer cor custom ! ! ! ! ! line con 0 transport input none line aux 0 line vty 0 4 password xxxxx login ! no scheduler allocate end

Hollywood#

Thank you in advance,

Igor Pinchevskiy

Reply to
Igor Pinchevskiy
Loading thread data ...

Hello,

Below are the configurations from 2 routers that are connected via point to point T1 line. Please note hollywood router has 3 serial interfaces that connect to other routers via point to point T1 lines as well. Can you guys double check the configs to make sure that they are correct and doesnt have anything thats not needed and also if you guys suggest any improvmenets. These are all connected via private T1 lines and actually no access lists are needed but they are there from the previous guy, I want to make some changes to improve performance and stuff. Any advice or suggestions is greatly appreciated!

Building configuration...

Current configuration : 1234 bytes ! ! Last configuration change at 17:32:21 UTC Tue Jul 17 2007 ! NVRAM config last updated at 17:32:33 UTC Tue Jul 17 2007 ! version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Downtown ! enable secret 5 xxxxx enable password xxxxx ! ! ! ! ! ip subnet-zero no ip finger ! ip dhcp pool LA network 10.1.0.0 255.255.0.0 default-router 10.1.0.1 netbios-name-server 10.3.0.254 ! ip audit notify log ip audit po max-events 100 ! ! ! ! ! ! ! interface Ethernet0/0 ip address 10.1.0.1 255.255.0.0 no ip mroute-cache full-duplex arp timeout 60 no mop enabled ! interface BRI0/0 no ip address no ip mroute-cache shutdown ! interface Serial0/0 ip address 192.168.1.6 255.255.255.252 encapsulation ppp no ip mroute-cache ! interface Ethernet0/1 ip address 64.171.205.2 255.255.255.248 ip nat outside no ip mroute-cache shutdown ! ip nat inside source list 1 interface Ethernet0/1 overload ip classless ip route 0.0.0.0 0.0.0.0 Serial0/0 ip route 10.3.0.0 255.255.0.0 192.168.1.5 ip http server ! access-list 1 permit 10.1.0.0 0.0.255.255 ! ! ! line con 0 transport input none line aux 0 line vty 0 4 password xxxxx login ! end

Downtown#

Hollywood#sh run Building configuration...

Current configuration : 1807 bytes ! ! Last configuration change at 17:27:20 UTC Tue Jul 17 2007 ! NVRAM config last updated at 17:28:31 UTC Tue Jul 17 2007 ! version 12.1 no service single-slot-reload-enable service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Hollywood ! logging rate-limit console 10 except errors enable secret 5 xxxxx enable password xxxxx ! ip subnet-zero ! ! no ip finger ! ip dhcp pool hollywood network 10.3.0.0 255.255.0.0 netbios-name-server 10.3.0.252 default-router 10.3.1.1 lease 0 8 ! ip audit notify log ip audit po max-events 100 ! ! call rsvp-sync ! ! ! ! ! ! ! ! interface Ethernet0/0 ip address 10.8.1.1 255.255.0.0 ip nat inside no keepalive shutdown full-duplex arp timeout 60 ! interface Serial0/0 ip address 192.168.1.1 255.255.255.252 encapsulation ppp ! interface Ethernet0/1 bandwidth 10000000 ip address 10.3.0.1 255.255.0.0 no keepalive full-duplex arp timeout 60 ! interface Serial0/1 ip address 192.168.1.5 255.255.255.252 encapsulation ppp ! interface Serial0/2 ip address 192.168.1.9 255.255.255.252 encapsulation ppp service-module t1 timeslots 1-24 ! ip nat inside source list 1 interface Ethernet0/1 overload ip nat inside source static 10.3.0.254 64.174.223.75 ip classless ip route 0.0.0.0 0.0.0.0 10.3.1.1 ip route 10.1.0.0 255.255.0.0 Serial0/1 ip route 10.2.0.0 255.255.0.0 Serial0/0 ip route 10.4.0.0 255.255.0.0 Serial0/2 ip route 10.6.0.0 255.255.0.0 10.3.0.2 no ip http server ! access-list 1 permit 10.0.0.0 0.255.255.255 access-list 1 permit 192.168.0.0 0.0.255.255 snmp-server community public RO ! dial-peer cor custom ! ! ! ! ! line con 0 transport input none line aux 0 line vty 0 4 password xxxxx login ! no scheduler allocate end

Hollywood#

Thank you in advance,

Igor Pinchevskiy

Reply to
Igor Pinchevskiy

Remove the enable password command as it is overrideen by enable secret

I would migrate to a dynamic routing protocol - in your case EIGRP. Then I would redistribute default from one router only.

I would use network 10.x.x.x addressing only and thus would lose the

192.168.x.x addressing on the serial interfaces
Reply to
Merv

Thank you Merv!

Reply to
Igor Pinchevskiy

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.