11-15-2004 11:28 AM - edited 03-09-2019 09:27 AM
i want to create a loopback interface, is this right.
conf t
interface loopback0
ip address 172.16.3.3 255.255.255.255
where the ip address can be a private ip address that can reach the router? i know i cant have the ip address the same as my external ip block from my isp.
what i dont understand is, is this a mechanism for my internal network that i can use to bind otherwise insecure services to only. or does this setting affect my internet connection at all. i dont want to create the interface and cause connection problems. i want to bind telnet to the internal lan only, and only temporarily also, only when i need it. as well as http. this will help me see what they can do and then i will turn them off.
11-16-2004 02:22 AM
You can create loopback interface as you want.Then you have to configure "how to reach your loopback interface" by routing protocol, statics routes, ecc.
Look at your routing table "sh ip route" before to set loopback ip address. Important is that private ip address loopback is not announced to your isp but known only in your lan.
11-16-2004 05:31 AM
so then a loopback interface is for my private use only. if i dont have other routers then i shouldnt need a route for it. i can just create one using a private ip address and then bind a service to it that i only want accessable from the internal network. is this the right way of thinking of it?
why is it using 255.255.255.255 as the mask?
11-16-2004 06:35 AM
Loopback is a virtual interface that act as one of other ip phisical-interface addresses.
/32 mask to save ip addresses.
11-16-2004 07:16 AM
can someone please explain to me how to set one up, why i would, and what the ramifications to my existing setup would be. i am still unclear after these few posts. i am a beginner. thanks for helping me.
11-16-2004 10:43 AM
The important thing to understand about loopback interfaces is that they are virtual interfaces. They have the characteristics of interfaces in that you can assign addresses to them, can route packets to them, can source packets from them. But they are virtual and have no physical implementation, so there is no cord that can get unplugged and take them down. So one big advantage of loopback interfaces is that they remove phycial dependencies that might impact real interfaces.
So to answer your question about why you would want to create a loopback interface, they are usually more stable than a physical interface. If you have a router that has two serial interfaces and you can get to the router via either of the interfaces, if you telnet to serial 0 it only works if that interface is up. But if you telnet to loopback 0 then it should work as long as either of the serial interfaces is up. So loopback interfaces are frequently used as the address used to manage the router, frequently used as the source address of management packets, or logging packets, and things like that.
There are really not any praticular ramifications other than the ramifications of adding any interface on a router. If you want the address to be reachable you must make sure that your routing protocol advertises it. There is not anything about loopback that says whether to use private addresses (172.16.0.0 etc) or public addresses. Either kind of address works well on loopbacks. Choosing whether to use public or private would depend on what you were attempting to accomplish. If you want it to be known at the ISP then it should be public. If you want it known only inside your network then private may be what you want.
HTH
Rick
11-16-2004 01:07 PM
thanks for making it a bit more clear. i want to use ftp, telnet, and other things and bind them to a loopback interface. i dont want this routed out to the isp. this shouldnt happen since i am going to create it under the ethernet card and not the serial card. i just want to give the interface a private ip and bind the services to them. so that i can say telnet 10.0.0.2 and get there. i see what you are saying about what ip to use, taking the load off, and what this interface is about. i just didnt want to mess up the isp connection in any way. i have learned not to jump, but crawl when it comes to changing settings on anything. can you point me to some paperwork or something that shows the commands and explains them. thanks for taking your time. i think cisco ios is awsome and i want to learn more about a null route later on for unwanted traffic, specifically aol and the like that i dont want on my network.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide