Hi Everyone,
i just purchased my Cisco Router 871 K9 Version running this System image flash:c870-advsecurityk9-mz.124-4.T8.bin"
I am trying to configure this Router for Home use so that i can block some Web traffic (Porn sites, Movie sites because of Children) but i realised i was unable to apply the Access list Match-class version url (http host).
My major problem is even the basic config on the router. The WAN has a DHCP IP assignment with Network 192.168.1.0
The Lan is expected to have 192.168.3.0 Network. The IPs appears to be correctly assigned but not able to ping the internet on the Router. Local client also cannot resolve DNS. here is my cofig file.
Please assist.
Richard#sh run
Building configuration...
Current configuration : 1727 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Richard
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
no ip dhcp use vrf connected
!
ip dhcp pool Richard-Pool
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
domain-name richardedet.com
dns-server 192.168.1.1
lease 0 2
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
spanning-tree portfast
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address dhcp
ip verify unicast source reachable-via rx allow-default 100
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
speed auto
full-duplex
!
interface Vlan1
description Local Network VLAN
ip address 192.168.3.1 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet4
ip route 192.168.3.0 255.255.255.0 FastEthernet4
!
no ip http server
no ip http secure-server
ip nat inside source list 101 interface FastEthernet4 overload
ip nat inside source route-map RMAP-NAT interface FastEthernet4 overload
ip dns server
!
logging trap debugging
logging facility local2
access-list 100 permit udp any any eq bootpc
access-list 100 permit tcp any any
access-list 100 permit icmp any any
access-list 101 permit ip 192.168.3.0 0.0.0.255 any
!
control-plane
!
!
line con 0
password richard
login
no modem enable
transport output telnet
line aux 0
password richard
login
transport output telnet
line vty 0 3
password richard
login
transport input ssh
line vty 4
password richard
login
!
scheduler max-task-time 5000
end
