cisco 881

[danut.nastasa]

Who can help me in configurating a cisco 881 router?

I'm connected to the internet with a static ip, but i dont have acces to internet from my pc..:D

[John Blakley]

How are you configuring it? Through the cli? You'll need to configure nat in order for you computer to get out. Can you post what you have configured already? (Get rid of private information though.)

HTH,
John

*** Please rate all useful posts ***

[jawad-mukhtar]

u can add default route

0.0.0.0 0.0.0.0 (Next Hope Your ISP GW)

IP Access-list Internet

Permit ip any any

ip nat inside source list internet (Interface to which ur ISP is connected) fastethernet 0/0 overload

Your Inside Interface

ip nat inside

Your Outside Interface

Ip nat outside

*** Please rate all useful posts ***

[danut.nastasa]

this is what i've tried so far but with no luck! 
i did this from youtube tutorials, i'm a noob in cisco configuration 

!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
crypto pki trustpoint TP-self-signed-2263202332
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2263202332
revocation-check none
rsakeypair TP-self-signed-2263202332
!
crypto pki certificate chain TP-self-signed-2263202332
certificate self-signed 01
quit
ip source-route
!
ip dhcp excluded-address 192.168.250.0
ip dhcp excluded-address 192.168.250.1

!
no ip domain lookup
!
ip dhcp pool DHCP
import all
network 192.168.250.0 255.255.255.0
default-router 192.168.250.1 
dns-server 192.168.250.253 192.168.250.254
lease 0 2
!
ip cef 
no ipv6 cef 
!
license udi pid CISCO881-K9 sn FCZ1417C10S
licence boot module c880-data level adviperservices

!
username cisco privilege 15 secret 0 cisco
username dan privilege 15 password 0 admin
!
interface FastEthernet0
description OPT0
switchport mode access
switchport access vlan 1 
no shutdown
!
interface FastEthernet1
description OPT1
switchport mode access
switchport access vlan 1 
no shutdown
!
interface FastEthernet2
description OPT2
switchport mode access
switchport access vlan 1 
no shutdown
!
interface FastEthernet3
description OPT3
switchport mode access
switchport access vlan 1 
no shutdown
!
interface FastEthernet4
description WAN
ip address 89.X.X.X 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto 
no shutdown

!
interface Vlan1
ip address 192.168.250.1 255.255.255.0
ip tcp adjust-mss 1452 
ip nat inside
ip virtual-reassembly 
!
archive
log config
hidekeys
!
!
ip forward-protocol nd 
ip http server
ip http access-class 23
ip http secure-server
ip http authentication local
ip http timeout-policy idle 60 life 86400 requests 10000
!
access-list 23 permit any
access-list 100 permit ip any any
!
ip nat pool NATPOOL 89.X.X.X netmask 255.255.255.248
ip nat inside source list 23 pool NATPOOL overload 
!
ip routing
!
alias exec sr show run
alias exec si show interfaces
alias exec sip show ip protocols
alias exec sir show ip route
alias exec sia show ip arp
alias exec s show ip int br
alias exec sd show debugging
alias exec st show ip nat translations
!
no cdp run
!
line con 0
logging synchronous
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet
transport input telnet ssh
!
scheduler max-task-time 5000
end

[danut.nastasa]

if i'm connected to a lan network (192.168.1.1, 255.255.255.0, gw 192.168.1.50 dhcp enabled)  how can i assign an ip address to my FA4 (wan) interface ?

[blau grana · Accepted solution]

Hi

replace

access-list 23 permit any

with

access-list 23 permit 192.168.250.0 0.0.0.255

add static default route

ip route 0.0.0.0 0.0.0.0 NEXT_HOP_IP Fa4

And last thing, your nat POOL looks strange, I assume that you own only one IP from defined range.

Delete this line:

ip nat pool NATPOOL 89.X.X.X netmask 255.255.255.248

And next line replace like this:

no ip nat inside source list 23 pool NATPOOL overload

ip nat inside source list 23 interface Fa4 overload 

Best Regards

Please rate helpful posts

[danut.nastasa]

still doesnt work...now i'm conncted to a LAN network with internet access....(192.168.1.50-def gw, 192.168.1.200 dns server , dhcp server enable) but i still can't  connect my pc to the internet via cisco which is connected on lan. but i can ping all the others pc's on LAN. Any ideeas ?

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname R1

!

boot-start-marker

boot-end-marker

!

logging message-counter syslog

!

no aaa new-model

!

crypto pki trustpoint TP-self-signed-2263202332

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-2263202332

revocation-check none

rsakeypair TP-self-signed-2263202332

!

!

ip source-route

ip dhcp excluded-address 192.168.250.0

ip dhcp excluded-address 192.168.250.1

!

ip dhcp pool DHCP

   import all

   network 192.168.250.0 255.255.255.0

   default-router 192.168.250.1

   dns-server 192.168.250.253 192.168.250.254

   lease 0 2

!

!

ip cef

no ip domain lookup

no ipv6 cef

!

!

!

!

username cisco privilege 15 secret 5 $1$yFuG$cio0V5RCGol./4BVWEp0G0

username dan privilege 15 password 0 admin

!

!

!

archive

log config

  hidekeys

!

!

!

!

!

interface FastEthernet0

description OPT0

!

interface FastEthernet1

description OPT1

!

interface FastEthernet2

description OPT2

!

interface FastEthernet3

description OPT3

!

interface FastEthernet4

description WAN

ip address dhcp

ip nat outside

ip virtual-reassembly

duplex auto

speed auto

!

interface Vlan1

ip address 192.168.250.1 255.255.255.0

ip nat inside

ip virtual-reassembly

ip tcp adjust-mss 1452

!

ip forward-protocol nd

ip route 0.0.0.0 0.0.0.0 192.168.1.50

ip route 0.0.0.0 0.0.0.0 192.168.1.200

ip route 0.0.0.0 0.0.0.0 192.168.1.1

ip route 0.0.0.0 0.0.0.0 192.168.1.0

ip route 0.0.0.0 0.0.0.0 dhcp

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

!

ip nat inside source list 23 interface FastEthernet4 overload

!

access-list 23 permit 192.168.250.0 0.0.0.255

access-list 100 permit ip any any

no cdp run

!

[blau grana · Accepted solution]

Hi

ip route 0.0.0.0 0.0.0.0 192.168.1.50

ip route 0.0.0.0 0.0.0.0 192.168.1.200

ip route 0.0.0.0 0.0.0.0 192.168.1.1

ip route 0.0.0.0 0.0.0.0 192.168.1.0

ip route 0.0.0.0 0.0.0.0 dhcp

Why are you pointing default route to LAN? Your WAN interface is Fa4 so entire internet traffic should go out through that interface.

I noticed that you obtain WAN IP from DHCP, do you also obtain default route same way?

If you do not configure routing to internet properly, your internet connection will not work.

Best Regards

Please rate helpful posts

[danut.nastasa]

above are all the settings that are made on the router...so i'm not realy sure how to do what u just said...

[turnera · Accepted solution]

Get rid of all these:

ip route 0.0.0.0 0.0.0.0 192.168.1.50

ip route 0.0.0.0 0.0.0.0 192.168.1.200

ip route 0.0.0.0 0.0.0.0 192.168.1.1

ip route 0.0.0.0 0.0.0.0 192.168.1.0

And just keep this one:

ip route 0.0.0.0 0.0.0.0 dhcp

You must be in configuration mode to do this:

at the router prompt, enter the word 'enable' then hit return:

To remove them use the no command in front of each line:

no ip route 0.0.0.0 0.0.0.0 192.168.1.50

no ip route 0.0.0.0 0.0.0.0 192.168.1.200

no ip route 0.0.0.0 0.0.0.0 192.168.1.1

no ip route 0.0.0.0 0.0.0.0 192.168.1.0

[jawad-mukhtar · Accepted solution]

ip dhcp pool DHCP

   import all

   network 192.168.250.0 255.255.255.0

   default-router 192.168.250.1

   dns-server 192.168.250.253 192.168.250.254

   lease 0 2

.

192.168.250.253

192.168.250.254

Are u sure that DNS will works.  I think so u must contact you ISP and confirm DNS Server IP from them.

[danut.nastasa]

it apears that my dns was with problem...thanks to alll for your help!!