Stealth installation of Cisco Router

[compufxr]

I want to connect the LAN of an office to E0. I want to connect S0 to a private T-1 that comes to our office. S0 is the default route. I want the office on E0 to get their data through us. All routes are static.

Here's where it get's tricky. There are some services we can't provide, they belong on a LAN in the building that the office is in. I want to connect E1 to that LAN. I do not want the default route of S0 used or advertised to E1. In fact, I want nothing advertised on that interface.

I know using firewall IOS and access-lists will prevent the E1 lan users from getting in, but will it stop broadcasts and route availability?

 

[lgarner]

passive-interface is what you're after.

 

[123tech]

Since you are using static routes, passive interface won't work in this case. Also the default route entry to use S0 as the default route is a global config, so you can't just say it will work for E0 and not E1. You will have to either use an ACL, or on the router connecting to S0, you specify a static route strictly for the network address of E0 to go out back the serial interface. You don't have to worry about Broadcast, it's not routable.

 

[lgarner]

static - I missed that part. But static routes aren't advertised by themselves- you'd need to redistribute them into a dynamic routing protocol for that to happen.