891w not working with isp cable modem

[matabei89]

probly something simple i am not getting. I cannot ping out or go online. isp modem gives ip addres 192.168.0.5. i think ip route that is wrong. please advise Thank you 

Last configuration change at 08:55:12 UTC Thu Nov 12 2015 by cisco
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
!
!
service-module wlan-ap 0 bootimage autonomous
!
crypto pki trustpoint TP-self-signed-2515254870
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2515254870
revocation-check none
rsakeypair TP-self-signed-2515254870
!
!
crypto pki certificate chain TP-self-signed-2515254870
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32353135 32353438 3730301E 170D3135 31313132 30363331
32385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35313532
35343837 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A146 1DD6C0A2 F949B784 7244F2FD 9E2D4788 199E9A01 0B129847 4006856C
B4027FCF 53CF57BD 5E413734 4284D91F EC9823FD EF127077 95D91675 B58D3EC8
30D83BE7 A2270BBF A01FAA1E 682333C8 A4B15691 FA0291AF 6E999FE9 E9AB9140
82ADC074 286B3D60 1DB61AA3 DBD1D999 F782B258 0E531D16 D07331E0 172D622B
06EF0203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 14B1AAEA 17EB85C0 D0CF77AC 172A36D0 4E90083D
D3301D06 03551D0E 04160414 B1AAEA17 EB85C0D0 CF77AC17 2A36D04E 90083DD3
300D0609 2A864886 F70D0101 04050003 81810099 1795EF70 FCA9FEC8 4D47DF8F
BA4A8B34 DA53C9A1 9DF34C22 C9165709 73694A85 5C8E618F F840FA4D 4780D571
83B48422 8B06D78B 82684539 3BBD75A0 E9F55377 07787785 54239B42 5B5AAE79
4355ABCD 55C566FB 4F340EF7 FECFF175 C869A60C 3F607DED 6433BFC3 4316AE89
89B1203A 4DC69993 914EBCFC F37BABAF 69DDFE
quit
ip source-route
!
!
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 10.20.30.1 10.20.30.99
ip dhcp excluded-address 10.20.30.201 10.20.30.254
!
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
!
ip dhcp pool DATA
import all
network 10.20.30.0 255.255.255.0
default-router 10.20.30.1
dns-server 8.8.8.8 8.8.4.4
!
!
ip cef
no ip domain lookup
ip domain name renthome.org
ip name-server 8.8.8.8
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO891W-AGN-A-K9 sn FTX161982QK
!
!
vtp mode transparent
username admin privilege 15 secret 5 $1$JM9E$zqEBym1SN/QOuIv1YKNJC0
!
!
vlan 10
!
!
!
!
!
!
!
!
interface FastEthernet0
switchport mode trunk
!
!
interface FastEthernet1
!
!
interface FastEthernet2
!
!
interface FastEthernet3
!
!
interface FastEthernet4
!
!
interface FastEthernet5
!
!
interface FastEthernet6
!
!
interface FastEthernet7
!
!
interface FastEthernet8
no ip address
duplex auto
speed auto
!
!
interface GigabitEthernet0
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
!
interface wlan-ap0
description Service module interface to manage the embedded AP
ip unnumbered Vlan1
arp timeout 0
!
!
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
switchport mode trunk
!
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-FE 1$
ip address 10.20.30.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
!
interface Async1
no ip address
encapsulation slip
!
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list 23 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 dhcp
!
access-list 23 permit 10.20.30.0 0.0.0.255
no cdp run

!
!
!
!
!
!
control-plane
!
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------

Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.

It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.

username <myuser> privilege 15 secret 0 <mypassword>

Replace <myuser> and <mypassword> with the username and password you want to
use.

-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.

YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE PUBLICLY-KNOWN
CREDENTIALS

Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want
to use.

IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE
TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.

For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
login local
line 1
modem InOut
stopbits 1
speed 115200
flowcontrol hardware
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin udptn ssh
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end

router#copy run start
Destination filename [startup-config]?
Building configuration...
[OK]

[Mark Malone]

Hey your ip route should be pointing to the public ip address of your modem

your nat statement is wrong as well it should be the interface where the outside is set

ip nat inside source list 23 interface G0 overload

HTH

[matabei89]

ip nat inside source list 23 interface GigabitEthernet0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 wlan-ap0
ip route 0.0.0.0 0.0.0.0 Vlan1
!
access-list 23 permit 10.20.30.0 0.0.0.255
no cdp run

** i had ip route 0.0.0.0 0.0.0.0 dhcp**

with that  i was getting 1 or 2 pings success but dropping pings. removed that statment. now i cannot ping out at all. Thanks for your help. what am i missing break it down for me. im taking a class right now to get my ccna hopefullly down the road ccnie.

ip address im getting 192.168.0.10 from isp modem. set to static to this mac 891w. shouldnt change now

Thank you 

[Mark Malone]

you should only require 1 default route and it should be pointing to your public ip address not the interface as best practice , the 192 address is private address , there should be a public outside ip address on your modem , connect a laptop directly to the modem and check website whats my ip address and it will give it to you

what interfcae is connected to the modem that should be the interface where ip nat outside is set and your nat overload should be coming off that

ip route 0.0.0.0 0.0.0.0 x.x.x.x

[matabei89]

gigabitethernet0 is connected to isp modem 

ip nat inside source list 23 interface GigabitEthernet0 overload
ip route 0.0.0.0 0.0.0.0 72.*>*>*>*  i got my public ip address. * for security
!
access-list 23 permit 10.20.30.0 0.0.0.255
no cdp run

So my wlan-ap0 doenst need to have ip route to wan port ?

is that correct  aka only showing config what we are changing. 

thank you again

[Mark Malone · Accepted solution]

Yes that looks right 1 default route pointing to public internet address and lan interface set as inside and wan (modem interface) set to outside

Been a while since i setup the wireless on these devices but from what i remember no need for ip route and you need to get into the module section and configure that theres a bit in it

follow this guide for the wireless it should get you going

https://supportforums.cisco.com/document/62176/configuration-example-861w881w891w-series-isrs

[matabei89]

Thank you so much it now works perfect.i hope to get this ip route down. i just use to private netoworking with it out config it self. anyways. thank you so much wish there was a donate button. or star bucks coffee i could send ya. may i follow you and reach at times for help ?

[Mark Malone]

Yes follow away and if you need to know anything just ping me a message il try answer it once im free it helps me remember it too :)