09-26-2015 10:21 AM - edited 03-05-2019 02:23 AM
Hello,
I have configured a Cisco 877 router to use it with my ISP (Talk Talk). The problem I have now is that I cannot access certain webpages (a few examples: duckduckgo, tomshardware.com, Instagram and many, many more) but works fine with other pages (Cisco, Google, BBC and many other) - Ping works fine with all of them.
I have configured the router with an MTU of 1432. From Windows ping works fine for all the pages up to a fragment of 1404 (1404 + 28 = 1432).
ping www.google.com -f -l 1404 gives 0% loss
ping www.duckduckgo.com -f -l 1404 gives 0% loss
The TalkTalk router (Hwawei ?) works fine.
I have tried to google for an answer and I have read many solutions but nothing worked. Can anyone help?
Thank you!
My router's configuration:
Router#show running-config
Building configuration...
Current configuration : 2876 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
!
!
dot11 syslog
!
!
dot11 ssid <removed>
vlan 1
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 0 <removed>
!
ip source-route
!
!
ip dhcp excluded-address 10.0.0.1 10.0.0.20
!
ip dhcp pool DHCP-POOL
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1
dns-server 62.24.134.1 62.24.243.2 208.67.222.222 208.67.220.220
domain-name <removed>
!
!
ip cef
no ip bootp server
ip name-server 62.24.134.1
ip name-server 62.24.243.2
ip name-server 208.67.222.222
ip name-server 208.67.220.220
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
username <removed> secret 5 <removed>
!
!
!
archive
log config
hidekeys
!
!
ip ssh version 2
!
bridge irb
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid <removed>
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
world-mode dot11d country GB indoor
no cdp enable
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
ip virtual-reassembly
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Vlan1
no ip address
ip nat inside
ip virtual-reassembly
bridge-group 1
!
interface Dialer1
mtu 1432
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1432
dialer pool 1
ppp chap hostname <removed>
ppp chap password 0 <removed>
ppp pap sent-username <removed> password 0 <removed>
!
interface BVI1
mtu 1432
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1432
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
no ip http secure-server
!
!
ip dns server
ip nat inside source list 1 interface Dialer1 overload
!
access-list 1 permit 10.0.0.0 0.0.0.255
!
!
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
banner motd ^C
*********************************
** This is a private network **
** Access not permited **
*********************************^C
!
line con 0
no modem enable
line aux 0
line vty 0 4
login local
transport input ssh
!
scheduler max-task-time 5000
end
09-27-2015 12:48 PM
I just did the same thing with my Cisco 881G-K9-3G router after I had completed the configuration I had the same issue you are experiencing now.
I had two issues:
1) ISP had not properly entered my MAC address to my static IP ADDRESS
2) I had tried using CCP and CCP made some changes to my configuration that I was not aware of. Once I went through the configuration slowly I found the issue, made the changes back to what I had them and it worked fine. I don't think you have this issue since you have no ip http secure-server Cisco has a link to this issue on the CCP page.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide