cisco 887va router config

[dparker127]

Hi there,

I am trying to configure a Cisco 887va router, initially I am trying to get it to route between my adsl connection (ppp over ATM) and my Ethernet lan (only the one default vlan to start with).

Here is my running config:

EVC_R1#sh running-config
Building configuration...

Current configuration : 1965 bytes
!
! Last configuration change at 14:32:46 UTC Wed Jun 11 2014
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname EVC_R1
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 PoXaLzKVosUFI2FS5/CPK/sLYb1wgi0LIF6SRnWhVa2
!
no aaa new-model
memory-size iomem 10
!
!
!
!
!
!
!
!
ip domain name emmaus.local
ip cef
no ipv6 cef
!
!
password encryption aes
license udi pid CISCO887VA-K9 sn FCZ1733C2CL
!
!
username xxx password 0 xxx
username xxx password 0 xxx
!
!
!
!
!
controller VDSL 0
!
ip ssh version 1
!
!
!
!
!
!
!
!
!
interface Ethernet0
 ip address 192.168.52.254 255.255.255.0
!
interface ATM0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 atm vc-per-vp 128
 no atm ilmi-keepalive
 hold-queue 224 in
 pvc 0/38
  oam-pvc 0
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
 switchport mode trunk
 no ip address
!
interface FastEthernet1
 no ip address
!
interface FastEthernet2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface Vlan1
 no ip address
!
interface Dialer0
 ip address negotiated
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip nat outside
 ip virtual-reassembly in
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname xxx@plusdsl.net
 ppp chap password 0 xxx
 ppp pap sent-username xxx@plusdsl.net password 0 xxx
 ppp ipcp dns request
 ppp ipcp wins request
 hold-queue 224 in
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 permit 192.168.52.0 0.0.0.255
!
!
!
line con 0
 password $upp0rt100
 login
 no modem enable
line aux 0
line vty 0 4
 login local
 transport input ssh
line vty 5 15
 login local
 transport input ssh
!
!
end

First off I am aware that the fastethernet interfaces are layer 2 ports on an integrated switch. I assume that ethernet0 should be treated as an actual router port. It seems to support subinterfaces eg ethernet0.1. So what I had envisaged was using fa0/0 as a trunk port and eventually adding vlan router addresses to subinterfaces of ethernet0.

At present my dialer0 interface acquires the correcty ip address from my isp but pings  fail to hosts in both my local network 192.168.52.0/24 and to internet hosts. Can anyone look at my config and advise?

thanks very much

Dan

[SANTHOSHKUMAR SARAVANAN]

Hi Dan ,

 Connect your LAN Cable on your router Ethernet port  . You Should able to ping your Local Network 192.168.52.0/24 , Similarly when you create sub interface on your router , switch port  of layer 2/layer 3 switch connecting to your router must be trunk port , not your router port . 

Router port must be configured for dot1q encapsulation not as trunk port . 

Look into below url for more understanding 

http://www.cisco.com/c/en/us/support/docs/lan-switching/inter-vlan-routing/14976-50.html

HTH

Sandy

[kcnajaf]

Hi Dan,

Please modify the configurations as below.

config terminal

int Ethernet 0

no  ip address 192.168.52.254 255.255.255.0

int vlan 1

 ip address 192.168.52.254 255.255.255.0

ip nat inside

!

ip route 0.0.0.0 0.0.0.0 dialer0

!

ip classless

Hope that helps.

Regards

Najaf

[dparker127]

Thanks Najaf, you changes have improved things however i'm not quite there yet. With your changes I can ping external ip addresses successfully (not hostnames although messages show that the router has acquired dns server addresses from my isp) but other than the router's own ip (192.168.52.254) nothing on the internal lan responds to pings.

A show ip nat translations command reveals that no nat translations are occurring and internal hosts can not access the internet.

At present running config reads as:

EVC_R1#sh running-config
Building configuration...

Current configuration : 2039 bytes
!
! Last configuration change at 19:09:24 UTC Wed Jun 11 2014
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname EVC_R1
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 PoXaLzKVosUFI2FS5/CPK/sLYb1wgi0LIF6SRnWhVa2
!
no aaa new-model
memory-size iomem 10
!
!
!
!
!
!
!
!
ip domain name emmaus.local
ip cef
no ipv6 cef
!
!
password encryption aes
license udi pid CISCO887VA-K9 sn FCZ1733C2CL
!
!
username xxx password 0 xxx
username xxx password 0 xxx
!
!
!
!
!
controller VDSL 0
!
ip ssh version 1
!
!
!
!
!
!
!
!
!
interface Ethernet0
 no ip address
!
interface ATM0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 atm vc-per-vp 128
 no atm ilmi-keepalive
 hold-queue 224 in
 pvc 0/38
  oam-pvc 0
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
 switchport mode trunk
 no ip address
!
interface FastEthernet1
 no ip address
!
interface FastEthernet2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface Vlan1
 ip address 192.168.52.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
interface Dialer0
 ip address negotiated
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip nat outside
 ip virtual-reassembly in
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname xxx@plusdsl.net
 ppp chap password 0 xxx
 ppp pap sent-username xxx@plusdsl.net password 0 xxx
 ppp ipcp dns request
 ppp ipcp wins request
 hold-queue 224 in
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
access-list 1 permit 192.168.52.0 0.0.0.255
!
!
!
line con 0
 password xxx
 login
 no modem enable
line aux 0
line vty 0 4
 login local
 transport input ssh
line vty 5 15
 login local
 transport input ssh
!
!
end

Can anyone help further?

Thanks

[kcnajaf]

Hi Dan,

Good to know that there is some improvement :-)

How is LAN devices connected to this router? Is this trough a switch? If it through switch do you have any VLANs configured on the switch? Also which interface on the router you are connecting the LAN device?

For testing you can connect a single machine to Fastethernet3 and check if NAT transaction is working fine.

With regards to Hostname not getting resolved try using a public DNS manually (4.2.2.2) rather than ISP DNS and check if things are improving.

Regards

Najaf

[eaglemobiles1]

Hi,

We have brand new cisco 887va- M router its not been configure can any one help us to povide remote support to configure this router. We would like to use this router for internet use and SIP trunks some kind of sip policy need to be create to prioritise sip traffic.

Any help will be greatly appreciated.

Thanks

Regards

Akbar

[SANTHOSHKUMAR SARAVANAN]

Hi Akbar,

        Share me your new device configuration .let me help you with device configuration

HTH

Sandy

[eaglemobiles1]

Hi Sandy,

Many thanks for reply, as I said this is brand new router unconfigured so there isnt any config we will nedd your help to configure from the scratch.

Regards

Akbar

[SANTHOSHKUMAR SARAVANAN]

Share me show version and show running for your new brand new router . share me topology diagram if you have any .

Need to know about LAN IP address segment and other things

HTH

Sandy

[eaglemobiles1]

Hi Sandy,

our lan details

enable

conf t

!

parser config cache interface

no service pad

!

errdisable detect cause all

errdisable recovery cause all

!

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

no service password-encryption

!

hostname COMMSSOURCE

!

ip http secure-server

no ip http secure-server

!

logging buffered 999999

!

enable secret {a&C}uat69!

!

no aaa new-model

!

vtp domain cisco

vtp mode transparent

!

!

clock timezone GMT 0 0

clock summer-time BST recurring last Sun Mar 2:00 last Sun Oct 2:00

!

ip cef

ip name-server 8.8.8.8

!

ip dns server

!

username commssource secret commssource 

username commssource priv 15

!

interface ATM0

 no ip address

 no atm ilmi-keepalive

 pvc 0/38 

  dialer pool-member 1

  protocol ppp dialer

  no shut

!

!

interface FastEthernet0

 spanning-tree portfast

!

interface FastEthernet1

 spanning-tree portfast

!

interface FastEthernet2

 spanning-tree portfast

!

interface FastEthernet3

 spanning-tree portfast

!

Interface Vlan1

 ip address 10.10.14.1 255.255.255.0

 ip nat inside

NO SHUT

!

controller vdsl 0

sra

!

!

ip dhcp excluded-address 10.1010.1 10.10.141.9

!

!

!

ip dhcp pool vlan1

network 10.10.14.0 255.255.255.0

default-router 10.10.14.1

dns-server 8.8.8.8 8.8.4.4

domain dot.akbar

!option 176 ascii "MCIPADD=10.149.14.50,TFTPSRVR=10.149.14.137"

interface Dialer1

 ip address negotiated

 ip nat outside

 encapsulation ppp

 dialer pool 1

 dialer-group 1

 ppp authentication chap callin

 ppp chap hostname <our_isp_username> 

 ppp chap password our_isp_password

 no shut

!

ip nat inside source list 110 interface dialer 1 overload

!

no ip http server

no ip http secure-server

ip route 0.0.0.0 0.0.0.0 Dialer1

access-list 1 permit 10.0.0.0 0.255.255.255

access-list 1 permit 192.168.0.0 0.0.255.255

dialer-list 1 protocol ip permit

!

access-list 110 deny   ip 10.0.0.0 0.255.255.255 10.0.0.0 0.255.255.255

access-list 110 deny   ip 10.0.0.0 0.255.255.255 192.168.0.0 0.0.255.255

access-list 110 deny   ip 10.0.0.0 0.255.255.255 172.16.0.0 0.15.255.255

access-list 110 deny   ip 192.168.0.0 0.0.255.255 10.0.0.0 0.255.255.255

access-list 110 deny   ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255

access-list 110 deny   ip 192.168.0.0 0.0.255.255 172.16.0.0 0.15.255.255

access-list 110 deny   ip 172.16.0.0 0.15.255.255 10.0.0.0 0.255.255.255

access-list 110 deny   ip 172.16.0.0 0.15.255.255 192.168.0.0 0.0.255.255

access-list 110 deny   ip 172.16.0.0 0.15.255.255 172.16.0.0 0.15.255.255

access-list 110 permit ip any any

!

snmp-server community public RO 1

snmp-server ifindex persist

snmp-server enable traps tty

snmp-server host 10.200.200.200 version 2c public 

!

interface Ethernet0

 no ip address

 NO SHUT

!

interface Ethernet0.101

 encapsulation dot1Q 101

 pppoe-client dial-pool-number 1

!

!

ip ssh version 2

ip ssh time-out 120

!

line con 0

 no modem enable

line aux 0

line vty 0 4

 password cisco

 login local

 transport input telnet ssh

 ip access-class 1 in

wr

!

exit

exit

wr

we can connect to VDSL but cant visit websites NAT issue.

what we want is

1- setup this router with lan details above

2- Cretae Vlan1 for Data 

3- Vlan2 for Voice

4- QoS for SIP trunks

5- Firewall for our internal network

Thanks

Regards

Akbar

[eaglemobiles1]

Hi,

Please can any one help in this issue we urgently need this router to be configureed. 

Many thanks

Regards

Akbar

[SANTHOSHKUMAR SARAVANAN]

Hi Akbar,

 Kindly let me know , where you have got stuck ?

HTH

Sandy

[eaglemobiles1]

Hi Sandy,

As I replied to your previous post you were asking for our lan details i will repeat the issue again.

This is a brand new router unconfigured we need some one to configure it from scartch the configuration we need are below.

what we want is

1- setup this router with lan details (Rourer 10.10.14.1 255.255.255.0) DHCP 10.10.14.10 )

2- Cretae Vlan1 for Data

3- Vlan2 for Voice

4- QoS for SIP trunks

5- Firewall for our internal network

Thanks

Regards

Akbar

[eaglemobiles1]

what a useless forum :(

[SANTHOSHKUMAR SARAVANAN]

Hi Akbar ,

 Kindly open a webex session or schedule a time slot for supporting you on this . 

HTH

Sandy