04-29-2013 01:24 PM - edited 03-04-2019 07:45 PM
Hi,
I've bought a CISCO 1921 K9/SEC a few days ago. But I'm unable to setup my first CISCO device on my own:
Network-overview:
ISP CISCO 1921 LAN
192.168.15.1 192.168.15.10 10.10.10.1 DHCP-client
1) By using CISCO Configuration Professional I'm unable to change the default IP address (10.10.10.1)
I'd like to change it to 192.168.0.1 (with no dhcp server)
How can I change this IP address?
2) I've configured basic NAT. I can ping any 192.168.15.1 device, but I unable to ping any external IP address (eg. 8.8.8.8).
Internet access, etc. isn't working too...
Here is my Startup configuration:
! Last configuration change at 20:00:31 UTC Mon Apr 29 2013 by admin
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CISCO1921
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
!
aaa session-id common
!
ip cef
!
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
dns-server 192.168.15.1 213.143.96.1
netbios-name-server 10.10.10.1
domain-name 10.10.10.1
lease 0 2
!
!
!
ip domain name xxxxxxxx
ip name-server 192.168.15.1
ip name-server 195.202.128.2
ip name-server 195.202.128.3
ip name-server 213.143.96.1
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description $ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$$ETH-LAN$
ip address 10.10.10.1 255.255.255.248
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
description $ETH-WAN$
ip address 192.168.15.10 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source list 3 interface GigabitEthernet0/1 overload
!
access-list 1 remark INSIDE_IF=GigabitEthernet0/0
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.7
access-list 2 remark CCP_ACL Category=2
access-list 2 permit 10.10.10.0 0.0.0.7
access-list 3 remark CCP_ACL Category=2
access-list 3 permit 10.10.10.0 0.0.0.7
access-list 23 permit 10.10.10.0 0.0.0.7
!
!
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class 23 in
transport input telnet ssh
line vty 5 15
access-class 23 in
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp update-calendar
ntp server 0.at.pool.ntp.org
!
end
Can anybody please give me a hint?
Thanks,
Christoph
04-29-2013 06:56 PM
You will have to paste this into the CLI of your Cisco router:
!!!This changes your LAN interface IP to 192.168.0.1/24
interface GigabitEthernet0/0
ip address 192.168.0.1 255.255.255.0
!
!
!!!!!This changes your NAT setup to NAT addresses coming from the 192.168.0.0/24 range to the IP address of gi0/1.
no access-list 3
access-list 3 remark CCP_ACL Category=2
access-list 3 permit 192.168.0.0 0.0.0.255
!
!
!
!!!!You need a default route to tell your router how to get to routes it doesn't know about. This route will tell your router to send anything it doesn't know about to 192.168.15.1 since that seems to be your default gateway.
!
ip route 0.0.0.0 0.0.0.0 192.168.15.1
Once you enter those commands in via the CLI you should be all set.
04-30-2013 11:04 AM
Thanks Brandon,
By "ip route 0.0.0.0 0.0.0.0 192.168.15.1" NAT works really well!
Actioally I simply can not change my LAN ip address, because I only can configure my Router by LAN ethernet0/0 controller. I'm unable to configure it, by WAN-ethernet0/1 or RS232.
If I do change my IP address to 192.168.0.1 (by eg. Putty SSH or CISCO CP) the connection terminates. After that I can ping the routers new IP address, but I can not configure it anymore or surf through the web.
Have you got a hint on that too?
Thanks,
Christoph
04-30-2013 12:50 PM
Hi,
ip address 192.168.0.1 255.255.255.0 secondary
then connect with an IP in same subnet then once connected modify the NAT ACL accordingly and make the primary address in same subnet and save your config.Reconnect to primary and get rid of secondary address and save config and you're done.
Regards
Alain
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide