04-17-2006 04:37 PM - edited 03-03-2019 12:26 PM
Hello,
I have a client that currently is running a 1700 series router. In turn this router seems to be having problems so the client decided to purchase a new router (1841).
After getting the config from the older router I have placed this into the new router and now it seems as if the router refuses to talk to the outside world.
I can ping the gateway from clients internally as well as the IP address of the router itself but can not ping past that. From the router I can ping te gateway, it's own IP address but can not ping outside.
Please look below and see if anything sticks out that might be getting in the way.
The ISP is Cinci Bell and I have also chatted with them as well but unfortunately they have nothing to add other than "return the new router"?
Here is the config and I will be happy to add additional comments if needed. Thanks a Bunch....
From Old Router...
Current configuration : 1757 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname owned
!
no logging buffered
no logging console
no logging monitor
no logging on
enable secret xxxx
!
ip subnet-zero
ip telnet hidden addresses
!
!
!
!
interface FastEthernet0
description --- Ditman Adams LAN ---
ip address 10.1.1.1 255.255.255.0
ip nat inside
shutdown
speed auto
!
interface Serial0
description --- Dittman Adams to Fuse ---
ip address 66.161.x.x.x.255.252
ip nat outside
shutdown
no fair-queue
!
ip nat pool natpool 216.x.x.129 216.68.126.158 netmask 255.255.255.224
ip nat inside source list 100 pool natpool overload
ip classless
ip route 0.0.0.0 0.x.x.x.161.130.165
no ip http server
!
!
no logging trap
access-list 3 deny 209.102.214.0 0.0.0.255
access-list 3 deny 193.163.220.0 0.0.0.255
access-list 3 deny 146.20.37.0 0.0.0.255
access-list 3 deny 66.51.129.0 0.0.0.255
access-list 3 deny 66.51.135.0 0.0.0.255
access-list 3 deny 209.171.61.0 0.0.0.255
access-list 3 deny 216.133.249.0 0.0.0.255
access-list 3 deny 217.10.143.0 0.0.0.255
access-list 3 deny 193.111.120.0 0.0.0.255
access-list 3 deny 204.89.131.0 0.0.0.255
access-list 3 deny 209.221.59.0 0.0.0.255
access-list 3 permit any
access-list 100 permit ip 10.1.1.0 0.0.0.255 any
banner motd ^C
You have accessed a private internetwork.
Unauthorized access to this internetwork
is prohibited and will be prosecuted in
accordance with Title 18, U.S.C. -- if you
are not explicitly authorized to access
this internetwork, log off now!
^C
!
line con 0
exec-timeout 1 1
password xxxx
login
line aux 0
line vty 0 4
access-class 3 in
password xxxx
login
04-17-2006 04:47 PM
The config indicates that both of your interfaces are shutdown. I presume that is not the case in reality, is it ?
If the interfaces are un-shut, can you advise if you can ping 66.161.130.165 from the router itself ?
Pls do rate posts that help.
Paresh
04-18-2006 03:05 AM
This config was taken from the old router during password recovery. Yes I can ping the router itself.
04-17-2006 05:14 PM
Typically the nat pool would be set up to use the serial interface address for all translations. Where did the 216.68.126.129-158 come from? Does the ISP route this subnet back to you?
Try this and see what happens:
ip nat pool natpool 66.161.130.166 66.161.130.166 netmask 255.255.255.252
Please rate helpful posts.
04-18-2006 03:09 AM
Not sure, I have sent this post to the tech at Cinci Bell for a clarification.
Thanks
04-18-2006 08:05 AM
Clayton
Perhaps I am a bit confused. In the original post you state that the 1700 had some problems but did not specify what the problems were. You state that the new router is not able to get connectivity to outside. You post the config of the old router but not the config of the new router. Which router do you want us to make suggestions about? If it is the new router (as I assume it is) then please post the config from the new router.
It would also be helpful if you would post the output of show ip interface brief.
HTH
Rick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide