Configuring my C891F

[Hakim RS]

Hi Everyone,

I have a Cisco 891F router, i need to configure two LAN s segements on this router and connect it with two ISP's router. One ISP will be placed on the Gi8 interface and the other with Fa0

My question is , how can i configure the router so the first LAN will be served from the first ISP. And the second LAN with th other

[Hakim RS]

i should add a route in vrf proximus ? or in the normal routes for 10.0.0.1

[a.alekseev]

should be

#ping vrf voo 8.8.8.8 source GigabitEthernet8

#ping vrf proximus 8.8.8.8 source f0

[Hakim RS]

ah yeah that worked, what about the ip route for proximus u told me i forgot

[a.alekseev]

!
interface FastEthernet0
description **proximus**
ip vrf forwarding proximus
ip address 10.0.0.2 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
!

ip route vrf proximus 0.0.0.0 0.0.0.0 10.0.0.1 name proximus

RouterC891F#sh ip route vrf proximus

Routing Table: proximus
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

192.168.20.0/24 is variably subnetted, 2 subnets, 2 masks
B 192.168.20.0/24
is directly connected (lan-etudiants), 00:30:23, Vlan200
L 192.168.20.1/32 is directly connected, Vlan200

Probably your FastEthernet0 is down. Check it.

[Hakim RS]

Still when i connect PC's to the LAN they don t get any addrees ip 

here s what show ip dhcp binding  shows :

RouterC891F#sh ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name

Bindings from VRF pool proximus:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name

Bindings from VRF pool voo:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name

I m a bit lost now 

[a.alekseev]

You are using wrong vrfs in dhcp pools....

[Hakim RS]

Now it s gets more crazy, the pcs received ip address but doesn t respect the excluded addresses rules. 

exemple :  i configured an addresses-excluded rule to jump of the address 192.168.8.1- 192.168.8.10 but when i attached a pc . the routeur assigned 192.168.8.2 to the machine

and still no internet 

[a.alekseev]

R1(config)#ip dhcp excluded-address ?
  A.B.C.D  Low IP address
  vrf      VRF name for excluded address range

R1(config)#ip dhcp excluded-address vrf lan-employes ?
  A.B.C.D  Low IP address

[Hakim RS]

Thank you, but still don t habve internet. is it  the routing ?

when i tried to ping different destinations here s what i got: 

RouterC891F#ping vrf voo 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/16/16 ms

RouterC891F#ping vrf voo 192.168.8.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.8.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

RouterC891F#ping vrf lan-employes 192.168.8.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.8.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
RouterC891F#

[a.alekseev]

show the outputs: 
sh run 
sh ip dhcp binding 

on the PC run: 
ipconfig /all 
ping 8.8.8.8 -t 

on the router: 
sh ip nat tr 
sh ip route vrf voo 
sh ip route vrf lan-employes

[Hakim RS]

except that i don t have access on the pc, i m configuring the router from distance and i m accessing it trough serial connection via another pc that i m remoting using teamviewer.

but they told me there s no internet in it , even if the dhcp, dns and gateway are all correct

[Hakim RS]

show run : 

RouterC891F#sh ip dhcp binding

Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name

Bindings from VRF pool lan-employes:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
192.168.8.2 0100.23ae.2357.ac May 10 2017 01:28 PM Automatic

Bindings from VRF pool lan-etudiants:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
192.168.20.2 0100.23ae.2357.ac May 10 2017 01:18 PM Automatic

sh ip nat tr   doesn t show anything

RouterC891F#sh ip route vrf voo

Routing Table: voo
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is 192.168.0.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 192.168.0.1
192.168.0.0/24 is variably subnetted, 3 subnets, 2 masks
C 192.168.0.0/24 is directly connected, GigabitEthernet8
S 192.168.0.1/32 [254/0] via 192.168.0.1, GigabitEthernet8
L 192.168.0.4/32 is directly connected, GigabitEthernet8
192.168.8.0/24 is variably subnetted, 2 subnets, 2 masks
B 192.168.8.0/24
is directly connected (lan-employes), 02:43:40, Vlan100
L 192.168.8.1/32 is directly connected, Vlan100

RouterC891F#sh ip route vrf lan-employes

Routing Table: lan-employes
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is 192.168.0.1 to network 0.0.0.0

B* 0.0.0.0/0 [20/0] via 192.168.0.1 (voo), 00:41:32
192.168.0.0/24 is variably subnetted, 2 subnets, 2 masks
B 192.168.0.0/24
is directly connected (voo), 23:58:32, GigabitEthernet8
L 192.168.0.4/32 is directly connected, GigabitEthernet8
192.168.8.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.8.0/24 is directly connected, Vlan100
L 192.168.8.1/32 is directly connected, Vlan100

[a.alekseev · Accepted solution]

no ip nat inside source route-map NAT-proximus interface FastEthernet0 vrf proximus overload
no ip nat inside source route-map NAT-voo interface GigabitEthernet8 vrf voo overload

ip nat inside source route-map NAT-proximus interface FastEthernet0 vrf lan-etudiants overload
ip nat inside source route-map NAT-voo interface GigabitEthernet8 vrf lan-employes overload

and

on PC 
ping 8.8.8.8

on router
sh ip nat tr 

[Hakim RS]

thank you very much for everything u were very helpful. 

It worked , i was mistaking in this

[Hakim RS]

and here s what traceroute command shows: 

RouterC891F#traceroute vrf lan-employes 192.168.8.2 source vlan100
Type escape sequence to abort.
Tracing the route to 192.168.8.2
VRF info: (vrf in name/id, vrf out name/id)
1 * * *
2 * * *
3* * *
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15* * *
16 * * *
17 * * *
18 * * *