I have a centurylink dsl modem in bridge mode connected to my cisco2821 at my home office. Everything was working fine while I was using dhcp on WAN interface. Problem started when I decided that I needed a static IP. Primary reason was for security. I wanted to lock down access to my corporate routers with ACLs but still wanted to manage from home... plus gre tunnel for easy access. The static IP given to me by centurylink was 64.91.6.171 255.255.255.255 which seemed really weird to me due to the subnet mask, but apparently is valid and used in situations with point-to-point and pppoe. My problem is that I cannot assign that IP/Netmask to my dialer interface because it says "Bad Netmask /32". After some research, I created a loopback and assigned the given address with no problem. Then changed the dialer interface from "ip address negotiated" to "ip unnumbered lo1" which accomplished getting the desired IP onto the dialer interface, but I could not pass traffic. Below is a copy of my working config while using dhcp. What am I missing? Didn't think it would be this hard to add a static IP.
----------------------------------------------------------------------------------------
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname TFD-Router
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$9Osk$PoVnOmnac8UFi6fT0ve610
!
no aaa new-model
!
!
dot11 syslog
ip source-route
!
!
ip cef
!
ip dhcp excluded-address 192.168.1.1 192.168.1.99
ip dhcp excluded-address 192.168.1.200 192.168.1.255
!
ip dhcp pool Primary_DHCP_Pool
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.8.8 8.8.4.4
!
!
ip domain name deangelo.local
ip name-server 8.8.8.8
ip name-server 8.8.4.4
no ipv6 cef
!
multilink bundle-name authenticated
!
vpdn enable
!
vpdn-group 1
!
voice-card 0
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO2821 sn FTX1126A47J
!
redundancy
!
interface Tunnel1
ip address 172.16.1.1 255.255.255.0
ip mtu 1400
ip tcp adjust-mss 1360
tunnel source 174.xxxxxxxx
tunnel destination 208.xxxxxxxx
!
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
no cdp enable
!
interface GigabitEthernet0/1
ip address 192.168.1.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
glbp 1 ip 192.168.1.1
glbp 1 priority 110
glbp 1 preempt
duplex auto
speed auto
!
interface Async0/0/0
no ip address
encapsulation slip
!
interface Dialer1
ip address negotiated
no ip unreachables
ip mtu 1492
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname CTLxxxxxx
ppp chap password 0 xxxxxxx
ppp pap sent-username CTLxxxxxx password 0 xxxxxxx
ppp ipcp route default
no cdp enable
!
router ospf 1
network 10.0.0.1 0.0.0.0 area 0
network 172.16.1.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list NAT_INSIDE_ADDRESSES interface Dialer1 overload
!
ip access-list extended NAT_INSIDE_ADDRESSES
permit ip 192.168.1.0 0.0.0.255 any
!
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line 0/0/0
stopbits 1
speed 115200
flowcontrol hardware
line vty 0 4
logging synchronous
login local
transport input ssh
line vty 5 15
logging synchronous
login local
transport input ssh
!
scheduler allocate 20000 1000
end
