Cisco 887VA FTTC/VDSL configuration

[Darkglasses]

Hi folks,

I am currently working on obtaining my Routing and Switching qualification and thought I would replace my existing router with a Cisco 887VA. All was going well when the expected IP address was showing on the dialer interface and able to ping IP and URL. Then no web. 

All LAN ports are in the default VLAN and my laptop is connectd to Fa0 via a straight Ethernet cable. My laptop obtains the correct IP and default gateway but the LAN card shows "Unidentified" which means no traffic. I specified an IP address and ran windows NETSH resets/reinstalled my NIC for the issue t remain. As I have no issues with other routers/switches, I am thinking it is my Cisco 887.

Anyone able to see if I have missed something in my running config or kindly provide a little advice as using these dialer interfaces has thrown me a little

Router#show run
Building configuration...

Current configuration : 1981 bytes
!
! No configuration change since last restart
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
!
!
ip source-route
!
!
!
ip dhcp excluded-address 192.168.1.150 192.168.1.254
!
ip dhcp pool LAN-POOL
network 192.168.1.0 255.255.255.0
default-router 192.168.1.250
!
!
ip cef
ip name-server 8.8.8.8
no ipv6 cef
!
!
license udi pid CISCO887VA-K9 sn FCZ1608C23Q
!
!
username admin privilege 15 secret 5 $1$dDgF$4GuJN1/LLTYzSqCUAV.HM.
!
!
!
!
controller VDSL 0
!
!
!
!
!
!
!
!
interface Ethernet0
no ip address
!
interface Ethernet0.101
encapsulation dot1Q 101
pppoe-client dial-pool-number 1
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
shutdown
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface Vlan1
description VLAN1
ip address 192.168.1.150 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Dialer0
description Dialer for VDSL
mtu 1492
ip address negotiated
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
ppp authentication pap chap ms-chap callin
ppp chap hostname test@btbroadband.com
ppp chap password 0 VDSL
ppp ipcp address accept
no cdp enable
!
interface Dialer1
no ip address
ip nat outside
ip virtual-reassembly in
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat pool LAN-NET 192.168.1.1 192.168.1.254 netmask 255.255.255.0
ip nat inside source list 1 pool LAN-NET overload
ip nat inside source list LAN-POOL interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login local
transport input all
!
end

Router#

[amikat]

Hi,

These are my observations:

1) The default router under "ip dhcp pool LAN-POOL" should be configured as "default-router 192.168.1.150" (ie. your int Vlan1 address).

2) The "ip nat outside" should be configured under "interface Dialer0" (I do not understand why you would need Dialer1 at all).

3) The "ip nat inside source ..." should be configured (only) as follows: "ip nat inside source list 1 interface Dialer0 overload").

4) The default route should be configured as "ip route 0.0.0.0 0.0.0.0 Dialer0".

Will you please try to modify and let me know the result.

Thanks & Regards,

Antonin

[Darkglasses]

Thanks Antonin, 

I really appreciate the help as the router is online with my laptop no longer showing unidentified and can ping IP address. I specified Google DNS on my NIC and now able to get web pages, all be it a little limited as Google searches return results but clicking a URL gives a spinning timer.

I changed my MTU to 1500 (from 1492) as this is the default on my ISP provided router but getting the same issue. 

Next step is to setup the router to provide DNS servers and troubleshoot if that doesn't work

To answer your questions. I was following different guides online where Dialer1 was used a lot. I assume Dialer0 contained their ADSL config which was left in place and shutdown with ATM0. I had not changed my default route back for this reason and got a little twisted for my NAT.

A little further work is needed but progress, thanks for setting me straight.

Router#sh run
Building configuration...

Current configuration : 1997 bytes
!
! Last configuration change at 10:09:57 UTC Tue Apr 3 2018
! NVRAM config last updated at 10:11:17 UTC Tue Apr 3 2018
! NVRAM config last updated at 10:11:17 UTC Tue Apr 3 2018
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
!
!
ip source-route
!
!
!
ip dhcp excluded-address 192.168.1.150 192.168.1.254
!
ip dhcp pool LAN-POOL
network 192.168.1.0 255.255.255.0
default-router 192.168.1.150
!
!
ip cef
ip name-server 8.8.8.8
no ipv6 cef
!
!
license udi pid CISCO887VA-K9 sn FCZ1608C23Q
!
!
username admin privilege 15 secret 5 $1$dDgF$4GuJN1/LLTYzSqCUAV.HM.
!
!
!
!
controller VDSL 0
!
!
!
!
!
!
!
!
interface Ethernet0
no ip address
!
interface Ethernet0.101
encapsulation dot1Q 101
pppoe-client dial-pool-number 1
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface Vlan1
description VLAN1
ip address 192.168.1.150 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Dialer0
description Dialer for VDSL
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
ppp authentication pap chap ms-chap callin
ppp chap hostname test@btbroadband.com
ppp chap password 0 VDSL
ppp ipcp address accept
no cdp enable
!
interface Dialer1
no ip address
ip virtual-reassembly in
shutdown
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
access-class 1 in
login local
transport input ssh
!
end

[Georg Pauwen]

Hello,

I have made a few minor adjustments to your configuration (marked in bold), add those and check if that makes a difference:

Building configuration...

Current configuration : 1997 bytes
!
! Last configuration change at 10:09:57 UTC Tue Apr 3 2018
! NVRAM config last updated at 10:11:17 UTC Tue Apr 3 2018
! NVRAM config last updated at 10:11:17 UTC Tue Apr 3 2018
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
!
ip source-route
!
ip dhcp excluded-address 192.168.1.150 192.168.1.254
!
ip dhcp pool LAN-POOL
network 192.168.1.0 255.255.255.0
default-router 192.168.1.150

dns-server 8.8.8.8 8.8.4.4
!
ip cef
ip name-server 8.8.8.8
no ipv6 cef
!
license udi pid CISCO887VA-K9 sn FCZ1608C23Q
!
username admin privilege 15 secret 5 $1$dDgF$4GuJN1/LLTYzSqCUAV.HM.
!
controller VDSL 0
!
interface Ethernet0
no ip address
!
interface Ethernet0.101
encapsulation dot1Q 101
pppoe-client dial-pool-number 1
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface Vlan1
description VLAN1
ip address 192.168.1.150 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Dialer0
description Dialer for VDSL
ip address negotiated
ip mtu 1460
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1420
dialer pool 1
dialer-group 1
ppp authentication pap chap ms-chap callin
ppp chap hostname test@btbroadband.com
ppp chap password 0 VDSL
ppp ipcp address accept
no cdp enable
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
dialer-list 1 protocol ip permit
!
line con 0
line aux 0
line vty 0 4
access-class 1 in
login local
transport input ssh
!
end

[amikat · Accepted solution]

Hi,

Thanks for the feedback. Your ISP should provide you with his DNS server access and that should be configured under the "ip dhcp pool LAN-POOL" using "dns-server" command, not Google DNS.

But what you are experiencing is almost certainly the MTU issue. My view is that you should configure "ip mtu 1492" not "mtu 1492" under the Dialer0 interface. Also will you please try to add the "ip tcp adjust-mss 1452" under the same interface.

Will you please let me know if there is any progress.

Thanks & Regards,

Antonin

[Darkglasses]

Folks, Victory!

Thanks, my laptop is now connected via Ethernet to Fa0 and getting web pages with IP/DNS set to auto obtain from the router. The fix:

Antomin, I changed the MTU back to 1492 and used the "ip tcp adjust-mss 1452" within the dialer0 interface and got web pages straight away. This is something I have not done in Packet Tracer before (maybe yet!) when configuring switches and routers. I have covered the theory and understand the packet changes routing through different interfaces but thought the router would have handled this automatically. A little reading on my end before quizzing the lecturer :)

Georg Pauwen, you solved my DNS issue nicely. I was going to use my ISP DNS but wasn't sure how to set the router to obtain dynamically. So I thought I would set Google DNS but did it in the wrong place. This is what i need at the moment and will come back to your other highlighted changes when I connect my test lab.

The next step is connect my wireless AP and other devices to ensure all is working. Then sort out the SSH connection refused error and setup port forwarding for my Virtual Machine. After this, connect my Cisco test lab, 2 x 2801 and 2 x 2960 TTL, 1 x 1801 and a L3 switch when I have this setup. 

Packet Tracer is good but doesn't beat bare metal. I appreciate the quality and speed of help here and will post my working config now, then my setup steps once I have sorted through my log.

Router#sh run
Building configuration...

Current configuration : 2060 bytes
!
! Last configuration change at 13:38:20 UTC Tue Apr 3 2018
! NVRAM config last updated at 13:39:23 UTC Tue Apr 3 2018
! NVRAM config last updated at 13:39:23 UTC Tue Apr 3 2018
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
!
!
ip source-route
!
!
!
ip dhcp excluded-address 192.168.1.150 192.168.1.254
!
ip dhcp pool LAN-POOL
network 192.168.1.0 255.255.255.0
default-router 192.168.1.150
dns-server 8.8.8.8 8.8.4.4
!
!
ip cef
ip name-server 8.8.8.8
no ipv6 cef
!
!
license udi pid CISCO887VA-K9 sn FCZ1608C23Q
!
!
username admin privilege 15 secret 5 $1$dDgF$4GuJN1/LLTYzSqCUAV.HM.
!
!
!
!
controller VDSL 0
!
!
!
!
!
!
!
!
interface Ethernet0
no ip address
!
interface Ethernet0.101
encapsulation dot1Q 101
pppoe-client dial-pool-number 1
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface Vlan1
description VLAN1
ip address 192.168.1.150 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Dialer0
description Dialer for VDSL
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
ppp authentication pap chap ms-chap callin
ppp chap hostname test@btbroadband.com
ppp chap password 0 VDSL
ppp ipcp address accept
no cdp enable
!
interface Dialer1
no ip address
ip virtual-reassembly in
shutdown
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
access-class 1 in
login local
transport input ssh
!
end

Router#

[adrian.popa]

Hi all,

I am struggling to get my 887VAG to connect to vodafone UK VDSL2 network and I would really apreciate some help if anyone can spare the time. I have tried various configs but no joy so far. All I am getting is:

Bombur#sh control vDSL 0
Controller VDSL 0 is DOWN

Daemon Status: Establishing Link

XTU-R (DS) XTU-C (US)
Chip Vendor ID: 'BDCM' ' '
Chip Vendor Specific: 0x0000 0x0000
Chip Vendor Country: 0xB500 0x0000
Modem Vendor ID: 'CSCO' ' '
Modem Vendor Specific: 0x4602 0x0000
Modem Vendor Country: 0xB500 0x0000
Serial Number Near: FCZ161393GY C887VAG+ 15.2(4)M
Serial Number Far:
Modem Version Near: 15.2(4)M
Modem Version Far:

Modem Status: Idle
DSL Config Mode: VDSL2
Trained Mode:
TC Mode: UNKNOWN
Selftest Result: 0x00
DELT configuration: disabled
DELT state: not running
Trellis: OFF OFF
SRA: disabled disabled
SRA count: 0 0
Bit swap: enabled enabled

Full inits: 0
Failed full inits: 0
Short inits: 0
Failed short inits: 0

Firmware Source File Name (version)
-------- ------ -------------------
VDSL embedded VDSL_LINUX_DEV_01212008 (1)

Modem FW Version: 130205_1433-4.02L.03.A2pv6C035j.d23j
Modem PHY Version: A2pv6C035j.d23j
Vendor Version: Ap6v35j.23j 68

Training Log : Stopped
Training Log Filename : flash:vdsllog.bin

My config is as follows:

version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Bombur
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
memory-size iomem 10
clock timezone gmt -1 0
clock summer-time BST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
!
!
!
!
!

!
ip dhcp excluded-address 192.168.1.150 192.168.1.254
!
ip dhcp pool LAN-POOL
network 192.168.1.0 255.255.255.0
default-router 192.168.1.150
dns-server 8.8.8.8 8.8.4.4
!
!
!
ip name-server 8.8.8.8
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid C887VAG+7-K9 sn FCZ161393GY
!
!
archive
log config
logging enable
logging size 500
vtp mode transparent
!
!
!
!
!
controller VDSL 0
operating mode vdsl2
modem customUKAnnexM
modem customUKAnnexA
modem UKfeature
!
controller Cellular 0
gsm gps mode standalone
!
vlan 10
name LAN:DATA
!
vlan 15
name LAN:VOICE
!
vlan 999
name NOT_USED
!
!
!
!
!
!
!
!
!
!
interface Ethernet0
no ip address
!
interface Ethernet0.101
bandwidth 70000
encapsulation dot1Q 101
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
description Livingroom-Hub
no ip address
duplex full
!
interface FastEthernet1
description Honeywell-Gateway
no ip address
duplex full
!
interface FastEthernet2
description Bedroom-TV
no ip address
duplex full
!
interface FastEthernet3
description Kids-Room
no ip address
duplex full
!
interface Cellular0
description BackupWAN
no ip address
ip nat outside
ip virtual-reassembly in
encapsulation slip
load-interval 30
shutdown
dialer in-band
dialer pool-member 1
no peer default ip address
async mode interactive
!
interface Vlan1
no ip address
!
interface Dialer0
description Dialer for VDSL
bandwidth 70000
ip mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer idle-timeout 0
dialer persistent
dialer-group 1
ppp authentication pap chap ms-chap callin
ppp chap hostname <xxxxx>@broadband.vodafone.co.uk
ppp chap password 0 <xxxxx>
ppp pap sent-username xxxxx password 0 xxxxx
ppp ipcp dns request accept
ppp ipcp wins request
ppp ipcp route default
ppp ipcp address accept
no cdp enable
!
interface Dialer1
description Cellular
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation slip
shutdown
dialer pool 1
dialer idle-timeout 0
dialer persistent
dialer-group 1
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip dns server
ip nat inside source list 1 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
dialer-list 1 protocol ip permit
!
!
control-plane
!
!
!
line con 0
no modem enable
line aux 0
line 3
no exec
line vty 0 4
login
transport input all
!
!
end

any help if greatly apreciated