How to Configure a Basic Router with CLI in Bangladesh

-

How to Configure a Basic Router with CLI in Bangladesh

This step-by-step guide shows how to bring a small site or home office online using a typical Bangladesh ISP connection (often PPPoE or a static IP). We’ll cover WAN setup, LAN, DHCP, NAT, DNS, basic security, and verification on Cisco IOS. MikroTik equivalents are included at the end.

LAN (192.168.10.0/24) Clients / Wi-Fi AP / PC Router Gi0/0: LAN Gi0/1: WAN (PPPoE/static) ISP BDIX / Internet Ethernet PPPoE or DHCP/Static
Simple topology: LAN → Router → ISP. Use PPPoE or a static/DHCP WAN as provided by your Bangladeshi ISP.

What You Need

  • A router with CLI (Cisco ISR/Catalyst IR, MikroTik, etc.).
  • ISP handoff on Ethernet (ONT/media converter) with PPPoE username/password or static IP.
  • Console/SSH access and a terminal app.

Quick Start – Cisco IOS (copy-paste)

This configuration assumes:

  • LAN: 192.168.10.0/24 on GigabitEthernet0/0
  • WAN: Option A PPPoE on GigabitEthernet0/1 (common in BD), or Option B Static IP
  • DNS: Cloudflare (1.1.1.1) + Google (8.8.8.8)
  • Timezone: Asia/Dhaka

1) Basic identity, time, and SSH

conf t
 hostname BD-RTR
 ip domain-name techornothing.local
 clock timezone BD +6 0
 service timestamps log datetime msec
 username admin privilege 15 secret 
 crypto key generate rsa modulus 2048
 ip ssh version 2
 line vty 0 4
  login local
  transport input ssh
 exit
 banner motd ^ Authorized use only. ^

2) LAN interface + DHCP

conf t
 interface GigabitEthernet0/0
  description LAN
  ip address 192.168.10.1 255.255.255.0
  no shutdown
 exit

 ip dhcp excluded-address 192.168.10.1 192.168.10.20
 ip dhcp pool LAN-10
  network 192.168.10.0 255.255.255.0
  default-router 192.168.10.1
  dns-server 1.1.1.1 8.8.8.8
  lease 1

3) WAN – Option A: PPPoE (most common)

conf t
 interface GigabitEthernet0/1
  description WAN-to-ISP (PPPoE)
  no ip address
  pppoe enable group global
  pppoe-client dial-pool-number 1
  no shutdown
 exit

 interface Dialer1
  mtu 1492
  ip address negotiated
  ip nat outside
  encapsulation ppp
  dialer pool 1
  ppp chap hostname 
  ppp chap password 
  ppp pap sent-username  password 
  no shutdown
 exit

 interface GigabitEthernet0/0
  ip nat inside
 exit

 ip route 0.0.0.0 0.0.0.0 Dialer1

WAN – Option B: Static Public IP (alternative)

conf t
 interface GigabitEthernet0/1
  description WAN-to-ISP (Static)
  ip address  
  ip nat outside
  no shutdown
 exit

 ip route 0.0.0.0 0.0.0.0

4) NAT overload (PAT)

conf t
 access-list 100 permit ip 192.168.10.0 0.0.0.255 any
 ip nat inside source list 100 interface Dialer1 overload     ! for PPPoE
 ! or:
 ! ip nat inside source list 100 interface GigabitEthernet0/1 overload

5) Basic hardening

conf t
 no ip http server
 no cdp run
 service password-encryption
 logging buffered 64000
 access-list 10 permit 192.168.10.0 0.0.0.255
 line vty 0 4
  access-class 10 in
 exit
 write memory

6) Verification & useful commands

show ip interface brief
show interface dialer1
show pppoe session
show ip dhcp binding
show ip nat translations
show ip route
ping 1.1.1.1 source 192.168.10.1
ping google.com
traceroute google.com

MikroTik RouterOS (equivalent quick config)

Interface names may vary (ether1 WAN, ether2 LAN). Adjust as needed.

1) Identity, time, user

/system identity set name=BD-RTR
/system clock set time-zone-name=Asia/Dhaka
/user add name=admin group=full password= disabled=no
/ip service set telnet disabled=yes
/ip service set www disabled=yes

2) LAN + DHCP + DNS

/ip address add interface=ether2 address=192.168.10.1/24 comment=LAN
/ip pool add name=LAN-POOL ranges=192.168.10.21-192.168.10.200
/ip dhcp-server add name=LAN-DHCP interface=ether2 address-pool=LAN-POOL lease-time=1d disabled=no
/ip dhcp-server network add address=192.168.10.0/24 gateway=192.168.10.1 dns-server=1.1.1.1,8.8.8.8
/ip dns set servers=1.1.1.1,8.8.8.8 allow-remote-requests=yes

3) WAN Option A – PPPoE

/interface pppoe-client add name=pppoe-out1 interface=ether1 user= password= disabled=no use-peer-dns=yes add-default-route=yes
/ip firewall nat add chain=srcnat out-interface=pppoe-out1 action=masquerade

WAN Option B – Static

/ip address add interface=ether1 address=/
/ip route add dst-address=0.0.0.0/0 gateway=
/ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

4) Test

/ping 1.1.1.1
/tool traceroute address=google.com
/ip dhcp-server lease print

Troubleshooting Checklist

  • PPPoE auth fails: re-check username/password and MTU (1492). Confirm the ISP VLAN isn’t required.
  • Got IP but no internet: default route present? DNS reachable? NAT rule applied to correct WAN?
  • Clients no IP: verify DHCP pool, server status, and that the LAN interface is up.
  • Slow sites but ping ok: check DNS, try 1.1.1.1/8.8.8.8; verify there isn’t a double-NAT upstream.
  • Bangladesh-specific tip: many ISPs peer via BDIX; if international seems slow but local fast, open a ticket with your ISP and ask them to check upstream routing.

Note: command examples assume lab defaults; adapt interface names and addresses to your environment.

Comments

Post a Comment

Popular posts from this blog

Telecom Security & Data Privacy in Bangladesh: Protecting Citizens in the Digital Era (2025 Edition)

-
Telecom Security & Data Privacy in Bangladesh: Protecting Citizens in the Digital Era (2025 Edition) Telecom Security & Data Privacy in Bangladesh: Protecting Citizens in the Digital Era (2025 Edition) Updated for 2025 • 20 min read As Bangladesh’s telecom sector expands with 5G, IoT, and cloud adoption , ensuring data privacy and security has become a national priority. Millions of users rely on mobile operators and ISPs daily, making telecom networks critical infrastructure that must be protected against cyber threats, fraud, and misuse of personal data. Fact: In 2024, global telecom companies reported a 35% increase in cyberattacks , with data breaches being the most costly. 📌 Why Security & Privacy Matter National Security: Telecom networks are vital for defense and emergency services. Consumer Trust: Users expect their call records and data to remain private. Regulatory Compliance: Data protection laws ar...
Read more

Cybersecurity & Networking in Bangladesh: Defending 5G and IoT Networks (2025 Edition)

-
Cybersecurity & Networking in Bangladesh: Defending 5G and IoT Networks (2025 Edition) Cybersecurity & Networking in Bangladesh: Defending 5G and IoT Networks (2025 Edition) Updated for 2025 • 20 min read As Bangladesh adopts 5G, IoT, and cloud networks , cybersecurity has become one of the biggest challenges. From DDoS attacks to IoT botnets , the risks are rising. Telecom operators, ISPs, and enterprises must build stronger defenses to keep networks secure. Fact: In 2024, Bangladesh faced multiple DDoS attacks on telecom and banking networks , showing the urgency of cybersecurity. 📌 Key Threats to 5G & IoT Networks DDoS Attacks: Hackers flood telecom networks with fake traffic. IoT Botnets: Weak IoT devices hijacked for cyberattacks. SIM Swapping: Criminals steal mobile identities for fraud. Cloud Breaches: Weak security in virtualized environments. Insider Threats: Employee misuse of sensitive da...
Read more

Cybersecurity in Bangladesh’s Telecom Industry: Protecting 5G, IoT, and Cloud Networks (2025 Edition)

-
Cybersecurity in Bangladesh’s Telecom Industry: Protecting 5G, IoT, and Cloud Networks (2025 Edition) Cybersecurity in Bangladesh’s Telecom Industry: Protecting 5G, IoT, and Cloud Networks (2025 Edition) Updated for 2025 • 18 min read As Bangladesh moves toward 5G, IoT, and cloud-native networks , cybersecurity has become the most critical challenge for telecom operators. With millions of devices connecting daily, the risk of cyberattacks, data breaches, and service outages is higher than ever. Fact: In 2024 alone, telecom operators worldwide faced over 35% more cyberattacks compared to the previous year. Bangladesh is not immune to this trend. 🔒 Why Cybersecurity Matters for Telecom 5G Rollouts: High-speed networks mean bigger targets for attackers. IoT Expansion: Millions of IoT devices = millions of entry points. Cloud Migration: Protecting data sovereignty and privacy is essential. National Security: Telecom net...
Read more