cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
422
Views
0
Helpful
5
Replies

Internet router setup? Help!

jmx2020
Level 1
Level 1

I am replacing an old Intel router with a new 1721 and I'm having trouble getting it configured correctly. I havn't worked on Cisco routers in a long time.

The router is a perimeter router connected a LAN to the Internet, with a PIX in the middle. Alas, there is no inside router between the LAN and the PIX; the PC's gateway address is set to the firewall's inside interface address. The PC's are privately addressed as 192.168.1.x 255.255.255.0

ISP provides IP block: 162.xx.xx.64 255.255.255.224

Nearest router at ISP is: 166.xx.xx.225

Internet connects to Router 1721 serial0

Router Fastethernet0 connects to PIX outside interface

PIX inside interface is private at 192.168.1.1 255.255.255.0

Here are the relevant router commands I've established:

ip subnet-zero

ip cef

no ip domain lookup

no ftp-server write-enable

interface FastEthernet0

ip address 162.39.211.65 255.255.255.224

speed auto

full-duplex

interface Serial0

description Internet T1

no ip address

ip classless

encapsulation ppp

no fair-queue

ip route 0.0.0.0 0.0.0.0 162.xx.xx.65

The PIX config has not changed & it works fine with the Intel router, but for sake of understanding here are the relevant commands in the PIX:

nameif ethernet0 outside security0

nameif ethernet1 inside security100

ip address outside 162.xx.xx.67 255.255.255.224

ip address inside 192.168.1.1 255.255.255.0

global (outside) 30 interface

nat (inside) 30 192.168.1.0 255.255.255.0 0 0

access-group outside_access_in in interface outside

route outside 0.0.0.0 0.0.0.0 162.xx.xx.65 1

Can anyone tells me what I am doing wrong with the router config?

thanks!!!

5 Replies 5

schatsm
Level 1
Level 1

your ISP didn't give you a /30 address to assign to your serial0?

Yeah, you need a route to the 162.xx.xx.65 address -- typically this would come from assigning an IP address in that subnet to the serial interface.

Thanks for the response!

I thought I did not have to assign an IP to the serial interface as long as I assigned one to the Ethernet and used the 'IP unnumbered fastethernet0'? Now that I think about it, I may have left this line out!

Let me know what you think; tomorrow I'll check to see if this line is in.

I had a frac. T1 with thme, and moved the IP block that came with it to a full T1. They are shutting down, so I have a new T1 on order and will get a /30 with it.

jmx2020
Level 1
Level 1

Figured it out - I wrote the static route incorrectly, it should have been:

ip route 0.0.0.0 0.0.0.0 serial0

Thanks!