cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
459
Views
0
Helpful
1
Replies

Cannot access random webpages using an Integrated Services Router (877)

felippe_ro
Level 1
Level 1

Hello,

 

I have configured a Cisco 877 router to use it with my ISP (Talk Talk). The problem I have now is that I cannot access certain webpages (a few examples: duckduckgo, tomshardware.com, Instagram and many, many more) but works fine with other pages (Cisco, Google, BBC and many other) - Ping works fine with all of them.

I have configured the router with an MTU of 1432. From Windows ping works fine for all the pages up to a fragment of 1404 (1404 + 28 = 1432).

ping www.google.com -f -l 1404 gives 0% loss

ping www.duckduckgo.com -f -l 1404 gives 0% loss

The TalkTalk router (Hwawei ?) works fine.

I have tried to google for an answer and I have read many solutions but nothing worked. Can anyone help?

Thank you!

 

My router's configuration:

Router#show running-config
Building configuration...

Current configuration : 2876 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
!
!
dot11 syslog
!
!
dot11 ssid <removed>
 vlan 1
 authentication open
 authentication key-management wpa
 guest-mode
 wpa-psk ascii 0 <removed>
!
ip source-route
!
!
ip dhcp excluded-address 10.0.0.1 10.0.0.20
!
ip dhcp pool DHCP-POOL
   network 10.0.0.0 255.255.255.0
   default-router 10.0.0.1
   dns-server 62.24.134.1 62.24.243.2 208.67.222.222 208.67.220.220
   domain-name <removed>
!
!
ip cef
no ip bootp server
ip name-server 62.24.134.1
ip name-server 62.24.243.2
ip name-server 208.67.222.222
ip name-server 208.67.220.220
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
username <removed> secret 5 <removed>
!
!
!
archive
 log config
  hidekeys
!
!
ip ssh version 2
!
bridge irb
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 0/38
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
 no ip address
 !
 encryption vlan 1 mode ciphers aes-ccm
 !
 ssid <removed>
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
 world-mode dot11d country GB indoor
 no cdp enable
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 ip virtual-reassembly
 no cdp enable
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface Vlan1
 no ip address
 ip nat inside
 ip virtual-reassembly
 bridge-group 1
!
interface Dialer1
 mtu 1432
 ip address negotiated
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 ip tcp adjust-mss 1432
 dialer pool 1
 ppp chap hostname <removed>
 ppp chap password 0 <removed>
 ppp pap sent-username <removed> password 0 <removed>
!
interface BVI1
 mtu 1432
 ip address 10.0.0.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 ip tcp adjust-mss 1432
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
no ip http secure-server
!
!
ip dns server
ip nat inside source list 1 interface Dialer1 overload
!
access-list 1 permit 10.0.0.0 0.0.0.255
!
!
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
banner motd ^C
*********************************
**  This is a private network  **
**     Access not permited     **
*********************************^C
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 login local
 transport input ssh
!
scheduler max-task-time 5000
end

 

1 Reply 1

Mark Bracking
Level 1
Level 1

I just did the same thing with my Cisco 881G-K9-3G router after I had completed the configuration I had the same issue you are experiencing now.

 I had two issues:

1) ISP had not properly entered my MAC address to my static IP ADDRESS

2) I had tried using CCP and CCP made some changes to my configuration that I was not aware of. Once I went through the configuration slowly I found the issue, made the changes back to what I had them and it worked fine. I don't think you have this issue since you have  no ip http secure-server  Cisco has a link to this issue on the CCP page.

 

 

Review Cisco Networking for a $25 gift card