Cisco 800 bridged managed?

[techmasterblue]

Hello,

I need to set up a Bridged router with a external ip address so I can manage it.

The Cisco 800 does the ADSL Sync and we have a firewall behind with a WAN address but we have 5 usable ip addresses on the WAN side, can anyone tell me how I can configure it so I can get to the cisco contactable from the internet and the firewall behind? Here is the config

!

no ip routing

no ip cef

!

!

bridge irb

!

!

interface ATM0

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

no ip route-cache

no snmp trap link-status

no atm ilmi-keepalive

dsl operating-mode adsl2+

!

interface ATM0.1 point-to-point

no ip redirects

no ip unreachables

no ip proxy-arp

ip virtual-reassembly

no ip route-cache

no snmp trap link-status

atm route-bridged ip

pvc 0/101

  encapsulation aal5snap

!

bridge-group 1

bridge-group 1 spanning-disabled

!

!

interface Vlan1

ip address *additional WAN* *WAN subnet*

ip nat inside

ip virtual-reassembly

no ip route-cache

bridge-group 1

bridge-group 1 spanning-disabled

!

interface BVI1

no ip address

no ip redirects

ip nat outside

ip virtual-reassembly

!

ip route 0.0.0.0 0.0.0.0 *WAN Gateway*

!

!

bridge 1 route ip

!

[techmasterblue]

Does no one know? Is it not possible?

[Giuseppe Larosa]

Hello Techmasterblue,

if the device is used as a bridge allows for an easy setup but it becomes difficult to manage.

your configuration is a mix between a bridged and a routed solution

to use NAT you would need a routed solution there is no sense in attempting to configure NAT that is an IP translation on an interface that does not process IP packets like your BVI1.

so you should move the public IP address to BVI1 and you should use a private IP address on the Vlan interface that can use a NAT pool carved from the public IP addresses

to be noted with your current configuration you should be able to access it but NAT shouldn't work this is what I see at first glance

Hope to help

Giuseppe