04-29-2004 01:30 PM - edited 03-02-2019 03:22 PM
I am replacing an old Intel router with a new 1721 and I'm having trouble getting it configured correctly. I havn't worked on Cisco routers in a long time.
The router is a perimeter router connected a LAN to the Internet, with a PIX in the middle. Alas, there is no inside router between the LAN and the PIX; the PC's gateway address is set to the firewall's inside interface address. The PC's are privately addressed as 192.168.1.x 255.255.255.0
ISP provides IP block: 162.xx.xx.64 255.255.255.224
Nearest router at ISP is: 166.xx.xx.225
Internet connects to Router 1721 serial0
Router Fastethernet0 connects to PIX outside interface
PIX inside interface is private at 192.168.1.1 255.255.255.0
Here are the relevant router commands I've established:
ip subnet-zero
ip cef
no ip domain lookup
no ftp-server write-enable
interface FastEthernet0
ip address 162.39.211.65 255.255.255.224
speed auto
full-duplex
interface Serial0
description Internet T1
no ip address
ip classless
encapsulation ppp
no fair-queue
ip route 0.0.0.0 0.0.0.0 162.xx.xx.65
The PIX config has not changed & it works fine with the Intel router, but for sake of understanding here are the relevant commands in the PIX:
nameif ethernet0 outside security0
nameif ethernet1 inside security100
ip address outside 162.xx.xx.67 255.255.255.224
ip address inside 192.168.1.1 255.255.255.0
global (outside) 30 interface
nat (inside) 30 192.168.1.0 255.255.255.0 0 0
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 162.xx.xx.65 1
Can anyone tells me what I am doing wrong with the router config?
thanks!!!
04-29-2004 03:17 PM
your ISP didn't give you a /30 address to assign to your serial0?
04-29-2004 04:07 PM
Yeah, you need a route to the 162.xx.xx.65 address -- typically this would come from assigning an IP address in that subnet to the serial interface.
04-29-2004 05:04 PM
Thanks for the response!
I thought I did not have to assign an IP to the serial interface as long as I assigned one to the Ethernet and used the 'IP unnumbered fastethernet0'? Now that I think about it, I may have left this line out!
Let me know what you think; tomorrow I'll check to see if this line is in.
04-29-2004 05:06 PM
I had a frac. T1 with thme, and moved the IP block that came with it to a full T1. They are shutting down, so I have a new T1 on order and will get a /30 with it.
04-30-2004 10:25 AM
Figured it out - I wrote the static route incorrectly, it should have been:
ip route 0.0.0.0 0.0.0.0 serial0
Thanks!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide