Hello All,
Please help me with this issue I am having. I am helping a friend to setup his 1941 Cisco router and everything works well however after 12 to 14 hours we have to reset the router because it hangs, I know it is down beacuse the cameras and RDP to a PC on site doesn't work anymore. Please take a look at this config and let me know if you see anything out of the ordinary. I have changed the WAN IP for security purposes.Thank you.
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 100 interface gigabitethernet 0/0 overload
ip nat inside source static tcp 192.168.0.250 80 interface gigabitethernet 0/0 80
ip nat inside source static udp 192.168.0.99 3061 interface gigabitethernet 0/0 3061
ip nat inside source static tcp 192.168.0.48 3389 interface gigabitethernet 0/0 3389
ip nat inside source static tcp 192.168.0.254 1028 interface gigabitethernet 0/0 1028
ip nat inside source static tcp 192.168.0.251 1025 interface gigabitethernet 0/0 1025
ip nat inside source static tcp 192.168.0.248 1026 interface gigabitethernet 0/0 1026
ip nat inside source static tcp 192.168.0.247 1027 interface gigabitethernet 0/0 1027
CaboVilla15(config)#exi
CaboVilla15#sh runn
Building configuration...
000038: *Sep 4 15:30:02.355 PCTime: %SYS-5-CONFIG_I: Configured from console by console
Current configuration : 4025 bytes
!
! Last configuration change at 15:30:02 PCTime Fri Sep 4 2015
!
version 15.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime mse localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname CaboVilla15
!
boot-start-marker
boot-end-marker
!
!
enable password 7 05080F1C2243
!
no aaa new-model
clock timezone PCTime -6 0
clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00
service-module wlan-ap 0 bootimage autonomous
!
no ip source-route
!
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.0.1
!
ip dhcp pool ccp-pool1
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 208.67.222.222 208.67.220.220
!
!
!
no ip bootp server
ip domain name yourdomain.com
ip name-server 208.67.222.222
ip name-server 208.67.220.220
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
crypto pki trustpoint TP-self-signed-3038467541
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3038467541
revocation-check none
rsakeypair TP-self-signed-3038467541
!
!
crypto pki certificate chain TP-self-signed-3038467541
license udi pid CISCO1941W-A/K9 sn FGL183223LY
hw-module ism 0
!
!
!
username cisco password 7 05080F1C2243
!
redundancy
!
no cdp run
!
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
bridge irb
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description $FW_OUTSIDE$$ES_WAN$
ip address 187.141.178.67 255.255.255.240
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface wlan-ap0
description Service module interface to manage the embedded AP
no ip address
shutdown
arp timeout 0
no mop enabled
no mop sysid
!
interface GigabitEthernet0/1
description $ES_LAN$$FW_INSIDE$
ip address 192.168.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1412
duplex auto
speed auto
!
interface Wlan-GigabitEthernet0/0
description Internal switch interface connecting to the embedded AP
no ip address
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$FW_INSIDE$
no ip address
ip tcp adjust-mss 1452
bridge-group 1
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source static tcp 192.168.0.250 80 interface GigabitEthernet0/0 80
ip nat inside source static udp 192.168.0.99 3061 interface GigabitEthernet0/0 3061
ip nat inside source static tcp 192.168.0.48 3389 interface GigabitEthernet0/0 3389
ip nat inside source static tcp 192.168.0.254 1028 interface GigabitEthernet0/0 1028
ip nat inside source static tcp 192.168.0.251 1025 interface GigabitEthernet0/0 1025
ip nat inside source static tcp 192.168.0.248 1026 interface GigabitEthernet0/0 1026
ip nat inside source static tcp 192.168.0.247 1027 interface GigabitEthernet0/0 1027
ip nat inside source list 100 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0
!
logging trap debugging
!
!
access-list 100 remark CCP_ACL Category=2
access-list 100 permit ip 192.168.0.0 0.0.0.255 any
access-list 101 remark CCP_ACL Category=128
access-list 101 permit ip host 255.255.255.255 any
access-list 101 permit ip 127.0.0.0 0.255.255.255 any
access-list 101 permit ip 187.141.178.0 0.0.0.15 any
!
control-plane
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line 67
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
login
transport input none
!
scheduler allocate 20000 1000
!
end
