Hi we are trying to swap out an old 887VA-K9 with a new 897VA-K9 and having some issues.
We have used the same or essentially the same config on both. The 887 works and our OPNSense FW/Router can login via a PPPoE connection and is assigned our Public IP's correctly etc.
When we put the 897 in place it also connects and our OPNSense can login via a PPPoE connection and is assigned our PUblic IP's correctly. However we get weird behaviour on the network and cannot seem to get traffic into and out of the WAN interface.
Can someone take a look at the config below and see if there is anything obvious we are missing.
887 Config:
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service internal
service sequence-numbers
!
hostname
!
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200
logging console critical
enable secret
enable password
!
aaa new-model
!
!
aaa authentication login local_authen local
aaa authorization exec local_author local
!
!
!
!
!
aaa session-id common
memory-size iomem 25
clock timezone GMT 0 0
!
!
no ip source-route
no ip routing
no ip domain lookup
no ip cef
no ipv6 cef
!
license udi pid CISCO887VA-M-K9
license accept end user agreement
license boot module
!
username
!
controller VDSL 0
operating mode vdsl2
modem ukfeature
!
bridge irb
!
interface Ethernet0
no ip address
no ip route-cache
!
interface Ethernet0.101
encapsulation dot1Q 101
no ip route-cache
bridge-group 1
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
no ip address
duplex full
speed 100
!
interface FastEthernet1
no ip address
duplex full
speed 100
!
interface FastEthernet2
no ip address
duplex full
speed 100
!
interface FastEthernet3
no ip address
duplex full
speed 100
!
interface Vlan1
no ip address
ip virtual-reassembly in
no ip route-cache
bridge-group 1
!
no ip forward-protocol nd
no ip http server
no ip http secure-server
!
logging trap debugging
!
!
!
bridge 1 protocol ieee
!
!
end
897 Config:
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service internal
service sequence-numbers
!
hostname
!
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200
logging console critical
enable secret
enable password
!
aaa new-model
!
!
aaa authentication login local_authen local
aaa authorization exec local_author local
!
!
!
!
!
aaa session-id common
memory-size iomem 25
clock timezone GMT 0 0
!
!
no ip source-route
no ip routing
no ip domain lookup
no ip cef
no ipv6 cef
!
username
!
controller VDSL 0
operating mode vdsl2
modem ukfeature
!
bridge irb
!
interface Ethernet0
no ip address
no ip route-cache
!
interface Ethernet0.101
encapsulation dot1Q 101
no ip route-cache
bridge-group 1
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface GigabitEthernet0
no ip address
duplex full
speed auto
!
interface GigabitEthernet1
no ip address
duplex full
speed auto
!
interface GigabitEthernet2
no ip address
duplex full
speed auto
!
interface GigabitEthernet3
no ip address
duplex full
speed auto
!
interface GigabitEthernet4
no ip address
duplex full
speed auto
!
interface GigabitEthernet5
no ip address
duplex full
speed auto
!
interface GigabitEthernet6
no ip address
duplex full
speed auto
!
interface GigabitEthernet7
no ip address
duplex full
speed auto
!
interface GigabitEthernet8
no ip address
duplex full
speed auto
!
interface Vlan1
no ip address
ip virtual-reassembly in
no ip route-cache
bridge-group 1
!
no ip forward-protocol nd
no ip http server
no ip http secure-server
!
logging trap debugging
!
!
bridge 1 protocol ieee
!
!
!
end
Cheers
Tony
