Solved: Configuration help on new install - Page 2

gtuccio · ‎09-02-2017

I am introducing an 891FW router into my network in order to build a subnet "behind" it. "Up stream" from it is an ARRIS TG1682 router provide me from my cable provider. It is an integrated router providing service for internet connectivity, set-top box function and 2.4/5.0 wifi. It connects by RG60 cable to street service and has a fixed public IP address and gateway address to the ISP. It has 4 gigabit interfaces. It is my desire to keep this in place for all the personal household stuff

The 891FW is also an integrated router. It has 3 WAN gateway interface options (FE, ISDN and GE). It has a pod of ethernet LAN gigabit interfaces (G0-G7).

I connected WAN G8 to one of the interface ports on the ARRIS. I connected LAN G7 on the 891FW to my unmanaged, simple, netgear gigabit switch on my network. On my network I have a domain controller (Windows 2012 R2) that is DHCP enabled.

I have enabled DHCP on ARRIS router. Its IP address 10.0.0.1 subnet mask of 255.0.0.0.

I have enabled DHCP on Windows 2012 R2 server. It's address 10.0.1.2 mask of 255.255.255.0

I have disabled DHCP on 891FW router. Its IP address (on WAN G8) 10.0.1.1, mask 255.255.255.0.

I have spent days on this and here are my conclusions:

From 891FW, I can ping 10.0.0.1, I canNOT ping anything in the subnet of 10.0.1.0

From my domain controller, 10.0.1.2 I canNOT ping 10.0.1.1 and I canNOT ping 10.0.0.1

I can see some activity on LAN G7 when I sho ip int G7.

It seems like any PING attemps from my 10.0.1.0 subnet to 10.0.1.1 or 10.0.0.1 can't pass LAN G7 to WAN G8 on the 891FW. I am sure the WAN G8 to ARRIS LAN connection is working. Naturally, I have tried to put an IP address on G7 however 891FW prohibits this as G7 is a level 2 interface. Because I cannot affix an IP address to the LAN interfaces (G7 for example) I can't configure this router in the classical IOS/CLI fashion. I would assume that addressing the WAN G8 interface would be sufficient. Seemingly, it is not.

How should I proceed from here?

gtuccio · ‎09-16-2017

Not comcast, Spectrum. Your explanation would explain the similarity in gui look but difference (or "thinning") with regard to features provided. Also, no capability to download another version of the software.

Do you think the overload was required? When I do sho ip nat translation, all the addresses are 10.0.0.2:xxxxx, of course with all different port addresses, mostly in the 50,000-60,000 range. I would imagine the Arris finds this amenable as it's the default subnet it hosts. I'm assuming without the "overload" (PAT) this wouldn't be working. Do you agree? This would've been so much easier if this was all Cisco equipment.

Thanks again Georg for all your help and patience. The early on config stuff was so important. And G0-G7 being defaulted into VLAN1, which was addressable, was a life saver. So was setting G8 with an address in the 10.0.0.0/24 subnet.

It's really fast and totally isolated from the other network now. This way my DHCP on my local DC can do its thing without interference from Arris. DHCP of course is turned off in the Cisco appliance.

You're a lifesaver and thanks again for all your kind help.

George Tuccio

gtuccio@stmart.us.com

Georg Pauwen · ‎09-16-2017

Hello,

the 'overload' statement is required if you need multiple clients at a time to connect to the Internet. Without that keyword, only one person at a time could connect.

Glad that I could help !

Go Bucs (I hope they beat the Bears tomorrow)...:)