Cisco C887VA VDSL Client Configuration Issue

[eyalzafrani]

hey i just configured my router .

The vdsl configuration is working and i have successed to config the pppoe.

i can also ping from my router to 8.8.8.8 and i have dns resolve.

the problem is thats my clients dont success to ping 8.8.8.8 or to recive dns resolve.

what am i miss?

ip dhcp excluded-address 10.0.0.138
!
ip dhcp pool NET-POOL
 network 10.0.0.0 255.255.255.0
 default-router 10.0.0.138
 dns-server 8.8.8.8 8.8.4.4
 lease 9
!

ip cef
no ipv6 cef

!
multilink bundle-name authenticated
!

!
controller VDSL 0
!
ip ssh authentication-retries 5

interface ATM0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no ip route-cache
 loopback
 shutdown
 no atm ilmi-keepalive
!
interface Ethernet0
 no ip address
 no ip route-cache
 pppoe enable group global
 pppoe-client dial-pool-number 1
!
interface FastEthernet0
 no ip address
 no cdp enable
!
interface FastEthernet1
 no ip address
 no cdp enable
!
interface FastEthernet2
 no ip address
 no cdp enable
!
interface FastEthernet3
 no ip address
 no cdp enable
!
interface Vlan1
 ip address 10.0.0.138 255.255.255.0
 no ip redirects
 no ip proxy-arp
 ip flow ingress
 ip nat inside
 ip virtual-reassembly in
 ip tcp adjust-mss 1412
!
interface Dialer0
 ip address negotiated
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip nat outside
 ip virtual-reassembly in
 encapsulation ppp
 dialer pool 1
 dialer idle-timeout 0
 dialer persistent
 dialer-group 1
 ppp pap sent-username ******** password 0 *******
 ppp ipcp dns request
 ppp ipcp mask request
 no cdp enable
!
ip forward-protocol nd
no ip http server
ip http authentication local
ip http secure-server
!

ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip access-list extended EXTNAT
 permit ip any any
ip access-list extended extant
 permit ip any any
!
no service-routing capabilities-manager
dialer-list 1 protocol ip permit
no cdp run
!
access-list 100 permit ip any any
!

control-plane
!

mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!

line con 0
 exec-timeout 0 0
 no modem enable
line aux 0
line vty 0 4
 privilege level 15
 password **********
 transport input all
!
scheduler allocate 20000 1000
!
end

Thanks alot.!

[ghostinthenet · Accepted solution]

You're missing a NAT definition in your configuration. The interfaces are appropriately set up with "ip nat inside" and "ip nat outside" but you don't have anything telling the router what to do with these. Try adding the following lines and see if that helps you out.

ip access-list extended ACL_NAT
 permit ip 10.0.0.0 0.0.0.255 any
!
ip nat inside source list ACL_NAT interface Dialer0 overload
!
interface Dialer0
 ip mtu 1492
 ip tcp adjust-mss 1452

The interface settings at the end of that aren't strictly necessary for basic connectivity, but will help non-fragmenting applications to deal with the smaller MTU that your connection uses.

[eyalzafrani]

Thanks alot!

thats fixed my problem :)