Router God tutorial

yellum

http://routergod.com/deniserichards/

bricks

http://www.zelow.no/floppyfw/

Ruaidhri

Dear LORD,have some ppl no shame?and now for some more PIX firewall )

Demitri

why not just get down and dirty with standard & extended access-lists on your router, which I asume you have if your going to be putting a moderate amount of money into a small home network. You can pick up a 25** series access router for a few hundred. Hell put a named access list on and you'll be launghing.

Example:

access-list 101 deny tcp 172.16.4.0 0.0.0.255 any eq 80
access-list 101 permit ip any any
(implicit deny any)
(access-list 101 deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255)

interface ethernet 0
ip access-group 101 out

this access list will deny the port 80 or internet traffic from that host and permit all other traffic. With a decent knowledge of port numbers (Lists of which are readily available) you can permit or deny anything and everything

In case you wonder about the source of this it's CCNA, Net+ and mod V CCNP so I have faith in what I've learnt and why fork out for security periphals when the knowledge of how to implement security features is worth so much more. And will get you more money from your Job.

My tupence.

The Cigarette Smoking Man

Originally posted by Demitri
why not just get down and dirty with standard & extended access-lists on your router, which I asume you have if your going to be putting a moderate amount of money into a small home network.

I've never seen anyone using a PIX for a home network....

Demitri

The same applies for coporate networks of moderate size, hiring someone to your IT team to manage your networks and troubleshoot any faults should be able to do some router configuration. And it is more cost effective to have some one in your work place able to configure any changes necessary in your access lists than having some one come out to you or talk you through configuration changes over the phone, which it is likely to be the case with periphals.

Demitri

Bosco

Originally posted by Demitri
And it is more cost effective to have some one in your work place able to configure any changes necessary in your access lists than having some one come out to you or talk you through configuration changes over the phone, which it is likely to be the case with periphals.

Actually, unless the work place is large enough to keep your networking engineer busy round-the-clock, its much much (much much much much) more cost effective to outsource your network maintainance to a specialist networking company.