---
title: Cisco configuration
slug: legacy/cisco-configuration
description: Unlock the full potential of your Cisco router with our comprehensive step-by-step guide. This document walks you through configuring DNS settings and enhancing security measures. 
docTags: 
createdAt: 2024-01-25T10:53:21.816Z
---

## Filter Configuration on CISCO Router

If you have not yet registered for the service you can do so by clicking on the following link:<font color="#000000"> </font>.
Connect to the control panel by entering the Cisco IP address in the address bar of any Browser. Then log in by entering your credentials.
First you need to configure the DNS of the device. To do this, open the \[**Setup**] menu and then click on \[**Network**].
Look for the section called WAN Setting Table and select the name of your WAN interface. Click on the \[**Edit**] button to edit the interface parameters.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/g2sraS1QoA-GdPH-i4rwK_image.png" size="50" width="1371" height="672" position="center" caption="DNS Configuration" alt="Cisco DNS Configuration" showCaption="true"}



In the window that appears, enable te Use the Following DNS Server Address item and then type inside the DNS Server 1 and DNS Server 2 fields, respectively, the following IPs:

-
  *185.236.104.104*
- *185.236.105.105*


Click on the \[**Save**] button to save the changes.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/Sh3lPnHON7xNlhs60z9Qg_image.png" size="50" width="804" height="358" position="center" caption="DNS Settings" alt="DNS setting and editing" showCaption="true"}

To configure *Dynamic DNS service*, open the \[**Setup**] menu and then click on \[**Dynamic DNS**].
Select the name of your WAN interface again and click on \[**Edit**].

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/ccdLAtrJR6B1r2sczf8e6_image.png" size="50" width="768" height="292" position="center" caption="Dynamic DNS Configuration" alt="Dynamic DNS Configuration and Attivation" showCaption="true"}



Configure the service as follows:

-
  **Service**: Select *DynDNS.org*.
- **Username**: Enter your registration email/username.
- **Password**: Enter your password.
- **Host Name**: Enter ddns.name.com.


Finally, click \[**Save**] to make the changes.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/hGnbIyX63iLLBjbDHQZbj_image.png" size="50" width="723" height="338" position="center" caption="DNS Dynamic Edit " alt="DnyDNS Dynamic Edit" showCaption="true"}



At this point you can enable the *DHCP Server* so that it automatically assigns network parameters, including our DNS, to the various internal devices.
Then open the \[**DHCP**] menu and click on \[**DHCP Setup**].
Configure the service with your network parameters and *select Use DNS as Below*, next to *the DNS Server field*, to configure our DNS.
Then enter the following *IPs in the Static DNS 1 and Static DNS 2 fields*, respectively:

- *185.236.104.104*
- *185.236.105.105*


Finally, click \[**Save**] to activate the service. Alternatively, the DNS of the various devices within the network can be changed manually.

## OPTIONAL: Deny DNS changes by users

It is possible to increase security by denying the user the ability to browse unfiltered, as a result of changing the DNS on their device. To do this, proceed as follows:

Open the \[**Firewall**] menu and click on \[**Access Rules**]. Then click on \[**Add**] to create a new rule.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/x033BPOpBy9lSgt0E_iJ-_image.png" size="50" width="825" height="353" position="center" caption="DNS rules" alt=" Changing DNS rules and denying user changes" showCaption="true"}



At this point we need to create rules to block all traffic on **port 53** (*DNS Service*), both *TCP and UDP*, except those directed to our IPs.
Proceed as follows:

-
  **Action**: Choose Allow.
- **Service**: Select the DNS entry \[UDP/53-53] from the drop-down menu.
- **Log**: Decide whether or not you want to display the log related to this.
- **Source Interface**: Select the name of your LAN (internal) interface.
- **Source IP**: Choose ANY. PLEASE NOTE: It is also possible to select an IP range that will use this rule, instead of the entire network.
- **Destination IP**: Select Single and then enter this IP 185.236.104.104 in the field on the right.

Click \[**Apply**] to save.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/bcNeDaYSg0B6npN-o7WzU_image.png" size="50" width="715" height="478" position="center" caption="Access Rules" alt="Changing access rules" showCaption="true"}



Now it is necessary to create another rule, similar to the previous one, except for the *Destination IP field address*, which must be *185.236.105.105*.
Finally, it is necessary to create another rule to block all DNS traffic directed to other IPs, other than our own.
Therefore, proceed as follows

- **Action**: Choose *Deny*.
- **Service**: Select the *DNS entry \[UDP/53-53]* from the drop-down menu.
- **Log**: Decide whether or not you want to view the log related to this rule.
- **Source Interface**: Select the name of your *LAN (internal) interface*.
- **Source IP**: Choose ANY.

**PLEASE NOTE**: It is also possible to select an IP range that will use this rule, instead of the entire network.

- **Destination IP**: Select ANY from the drop-down menu.


Then click \[**Save**] to apply the changes.

::Image[]{src="https://api.archbee.com/api/optimize/qeNTDI134aDAkmAtZMoNc/CM3PlnKRfKFVazV4UVDa-_image.png" size="50" width="705" height="485" position="center" caption="Creation new rules" alt="Creating a new rule with Destination IP different from the one previously created" showCaption="true"}

**Other ways to ask:**

- How to configure the Cisco router.
- Cisco router configuration. How to.