cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
7532
Views
0
Helpful
3
Replies

1921 basic configuration --- need desperately help

Hi,

I've bought a CISCO 1921 K9/SEC a few days ago. But I'm unable to setup my first CISCO device on my own:

Network-overview:

ISP                                                  CISCO 1921                                                    LAN

192.168.15.1                    192.168.15.10               10.10.10.1                              DHCP-client

1) By using CISCO Configuration Professional I'm unable to change the default IP address (10.10.10.1)

I'd like to change it to 192.168.0.1 (with no dhcp server)

How can I change this IP address?

2) I've configured basic NAT. I can ping any 192.168.15.1 device, but I unable to ping any external IP address (eg. 8.8.8.8).

Internet access, etc. isn't working too...

Here is my Startup configuration:

! Last configuration change at 20:00:31 UTC Mon Apr 29 2013 by admin

version 15.2

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname CISCO1921

!

boot-start-marker

boot-end-marker

!

!

logging buffered 51200 warnings

!

aaa new-model

!

!

aaa authentication login default local

aaa authorization exec default local

!

!

aaa session-id common

!

ip cef

!

ip dhcp excluded-address 10.10.10.1

!

ip dhcp pool ccp-pool

import all

network 10.10.10.0 255.255.255.248

default-router 10.10.10.1

dns-server 192.168.15.1 213.143.96.1

netbios-name-server 10.10.10.1

domain-name 10.10.10.1

lease 0 2

!

!

!

ip domain name xxxxxxxx

ip name-server 192.168.15.1

ip name-server 195.202.128.2

ip name-server 195.202.128.3

ip name-server 213.143.96.1

!

no ipv6 cef

!

multilink bundle-name authenticated

!

!

!

interface Embedded-Service-Engine0/0

no ip address

shutdown

!

interface GigabitEthernet0/0

description $ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$$ETH-LAN$

ip address 10.10.10.1 255.255.255.248

ip nat inside

ip virtual-reassembly in

duplex auto

speed auto

!

interface GigabitEthernet0/1

description $ETH-WAN$

ip address 192.168.15.10 255.255.255.0

ip nat outside

ip virtual-reassembly in

duplex auto

speed auto

!

ip forward-protocol nd

!

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

!

ip nat inside source list 3 interface GigabitEthernet0/1 overload

!

access-list 1 remark INSIDE_IF=GigabitEthernet0/0

access-list 1 remark CCP_ACL Category=2

access-list 1 permit 10.10.10.0 0.0.0.7

access-list 2 remark CCP_ACL Category=2

access-list 2 permit 10.10.10.0 0.0.0.7

access-list 3 remark CCP_ACL Category=2

access-list 3 permit 10.10.10.0 0.0.0.7

access-list 23 permit 10.10.10.0 0.0.0.7

!

!

!

!

!

control-plane

!

!

!

line con 0

line aux 0

line 2

no activation-character

no exec

transport preferred none

transport input all

transport output pad telnet rlogin lapb-ta mop udptn v120 ssh

stopbits 1

line vty 0 4

access-class 23 in

transport input telnet ssh

line vty 5 15

access-class 23 in

transport input telnet ssh

!

scheduler allocate 20000 1000

ntp update-calendar

ntp server 0.at.pool.ntp.org

!

end

Can anybody please give me a hint?

Thanks,

Christoph

3 Replies 3

You will have to paste this into the CLI of your Cisco router:

!!!This changes your LAN interface IP to 192.168.0.1/24

interface GigabitEthernet0/0

ip address 192.168.0.1 255.255.255.0

!

!

!!!!!This changes your NAT setup to NAT addresses coming from the 192.168.0.0/24 range to the IP address of gi0/1.

no access-list 3

access-list 3 remark CCP_ACL Category=2

access-list 3 permit 192.168.0.0 0.0.0.255

!

!

!

!!!!You need a default route to tell your router how to get to routes it doesn't know about.  This route will tell your router to send anything it doesn't know about to 192.168.15.1 since that seems to be your default gateway.

!

ip route 0.0.0.0 0.0.0.0 192.168.15.1

Once you enter those commands in via the CLI you should be all set.

Thanks Brandon,

By "ip route 0.0.0.0 0.0.0.0 192.168.15.1" NAT works really well!

Actioally I simply can not change my LAN ip address, because I only can configure my Router by LAN ethernet0/0 controller. I'm unable to configure it, by WAN-ethernet0/1 or RS232.

If I do change my IP address to 192.168.0.1 (by eg. Putty SSH or CISCO CP) the connection terminates. After that I can ping the routers new IP address, but I can not configure it anymore or surf through the web.

Have you got a hint on that too?

Thanks,

Christoph

Hi,

ip address 192.168.0.1 255.255.255.0 secondary

then connect  with an IP in same subnet then once connected modify the NAT ACL accordingly and make the primary address in same subnet and  save your config.Reconnect to primary and get rid of secondary address and save config and you're done.

Regards

Alain

Don't forget to rate helpful posts.