07-30-2017 08:23 PM - edited 03-05-2019 08:55 AM
I am quite new to Cisco equipment but found this one cheap and got it and now struggling to set it up to work with internet. I am using cable internet modem which is connected to a cheap wifi router and assigning ip addresses to rest of the network. I wanted to replace it with the Cisco one. I would appreciate a lot just basic router setup using WAN port. Here is the setup:
version 15.6
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SimpleActsRouter
!
boot-start-marker
boot-end-marker
!
!
no logging buffered
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip dhcp excluded-address 192.168.10.1 192.168.10.99
ip dhcp excluded-address 192.168.10.201 192.168.10.254
!
ip dhcp pool SA_Clients
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 192.168.10.100
!
ip dhcp pool vlan2
!
!
!
ip name-server 210.158.149.33
ip name-server 210.158.150.33
ip ddns update method ccp_ddns1
DDNS both
!
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
license udi pid CISCO892-K9 sn FGL153928B8
!
!
username ccpuser privilege 15 secret 5 $1$Zklk$gYdJlJmZmtKA7VK9UqZx8.
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
isdn termination multidrop
!
interface FastEthernet0
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet1
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet2
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet3
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet4
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet5
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet6
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet7
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet8
description Service Connection$ETH-WAN$
ip address 192.168.30.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0
description WAN$ETH-WAN$
ip address dhcp client-id GigabitEthernet0 hostname ai202-45-170-198.ccnet-ai.ne.jp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 192.168.10.1 255.255.255.0
!
router rip
version 2
passive-interface GigabitEthernet0
network 192.168.1.0
no auto-summary
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip dns server
ip dns spoofing 192.168.10.1
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0 dhcp
ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr
ip ssh client algorithm encryption aes128-ctr aes192-ctr aes256-ctr
!
ipv6 ioam timestamp
!
!
access-list 191 remark permit DNS traffic
access-list 191 remark CCP_ACL Category=1
access-list 191 permit tcp any any eq domain
access-list 191 permit udp any any eq domain
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login local
transport input telnet
!
scheduler max-task-time 5000
!
end
thank you so much!
Solved! Go to Solution.
08-01-2017 03:55 AM
08-01-2017 04:01 AM
Hello,
your interface GigabitEthernet0 has a WAN IP address, which means you are connected to the Internet. I have posted a simplified configuration earlier, try and implement that:
Here it is again:
version 15.6
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SimpleActsRouter
!
boot-start-marker
boot-end-marker
!
no logging buffered
!
no aaa new-model
!
ip dhcp excluded-address 192.168.10.1 192.168.10.99
ip dhcp excluded-address 192.168.10.201 192.168.10.254
!
ip dhcp pool SA_Clients
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 8.8.8.8 8.8.4.4
!
ip name-server 210.158.149.33
ip name-server 210.158.150.33
ip ddns update method ccp_ddns1
DDNS both
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
license udi pid CISCO892-K9 sn FGL153928B8
!
username ccpuser privilege 15 secret 5 $1$Zklk$gYdJlJmZmtKA7VK9UqZx8.
!
redundancy
!
interface BRI0
no ip address
encapsulation hdlc
isdn termination multidrop
!
interface FastEthernet0
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet1
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet2
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet3
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet4
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet5
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet6
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet7
switchport access vlan 2
no ip address
speed 100
!
interface FastEthernet8
description Service Connection$ETH-WAN$
ip address 192.168.30.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0
description WAN$ETH-WAN$
ip address dhcp client-id GigabitEthernet0 hostname ai202-45-170-198.ccnet-ai.ne.jp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan2
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip dns server
ip dns spoofing 192.168.10.1
ip nat inside source list 10 interface GigabitEthernet0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0
ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr
ip ssh client algorithm encryption aes128-ctr aes192-ctr aes256-ctr
!
access-list 10 permit 192.168.10.0 0.0.0.255
!
ipv6 ioam timestamp
!
access-list 191 remark permit DNS traffic
access-list 191 remark CCP_ACL Category=1
access-list 191 permit tcp any any eq domain
access-list 191 permit udp any any eq domain
!
control-plane
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
line con 0
line aux 0
line vty 0 4
login local
transport input telnet
!
scheduler max-task-time 5000
!
end
08-01-2017 04:39 AM
08-01-2017 07:19 AM
Hello,
where are you pinging from ? The router or the client ? Do the clients get the proper IP address and default gateway ?
Try:
ping 8.8.8.8 source GigabitEthernet0
What is the result ?
08-03-2017 04:58 AM
This is the result of ping. I am pinging from a client connected via lan cable to FastEthernet8 with a static IP address
08-04-2017 02:30 PM
Hi
Can you post the output of show ip route?
Thanks
08-04-2017 08:02 PM
08-05-2017 12:17 AM
Hello,
I lost track of your physical setup. The Cisco is now directly connected...to what ? The cable modem ? Or the ISP through GigabitEthernet0, without the cable modem ?
08-05-2017 05:28 AM
On Cisco's 892 router Fa8 and Gi0 are WAN interfaces.
Interfaces Fa0-7 are switched interfaces. Fa0-7 are in down down state and that is the reason why VLAN 2 is also in down down state. You should connect your hosts to ports Fa0-7.
But, anyway, if you obtained IP address on WAN port you should be able to ping 8.8.8.8 from router (try also some other WAN IP address e.g 4.2.2.2 , 8.8.4.4). Try to issue
traceroute 8.8.8.8
traceroute 4.2.2.2
and paste output.
NVI0 typically should have IP address from WAN interfaces, try for testing, to remove IP address from Fa8 and reload router.
08-10-2017 02:28 AM
Hi guys. Sorry for the delay. I have drawn a simple diagram showing the situation. Will do the commands later on and show outputs
08-06-2017 03:54 PM
Hi
What crni00000 says it's right for the LAN side.
However this doesn't explain why you can't ping 8.8.8.8 from your router even by sourcing the ping with gig0.
Have you tried
ip route 0.0.0.0 0.0.0.0 dhcp
Instead of
ip route 0.0.0.0 0.0.0.0 gig0
Can you modify this default route and send back the output of show ip route?
Thanks
08-01-2017 10:20 PM
Hi
I ask again for the show ip route as i asked at the beginning. Can you paste the output of this command please?
I think the public IP was already there since the beginning.
Also try the ping Georg asked to validate that you're router can access internet.
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide