Re: Connect cisco C921-4P to NBN

Kevork Temisgian · ‎12-18-2019

Hi, am trying to connect my new cisco C921-4P to NBN. I have managed to connect.

Having a bit of issue with it when I try and ping with vlan1. Below is a few lines from the log. If someone can point me in the right direction:

***************************************

Router#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/8/8 ms

********************************

Router#traceroute 8.8.8.8
Type escape sequence to abort.
Tracing the route to dns.google (8.8.8.8)
VRF info: (vrf in name/id, vrf out name/id)
1 gateway.nb14.sydney.asp.telstra.net (x.x.x.x) 6 msec 8 msec 10 msec
2 x.x.x.x 6 msec 8 msec 6 msec
3 bundle-ether25.chw-core10.sydney.telstra.net (x.x.x.x) 14 msec
bundle-ether25.ken-core10.sydney.telstra.net (x.x.x.x) 10 msec
bundle-ether25.chw-core10.sydney.telstra.net (x.x.x.x) 8 msec
4 bundle-ether1.chw-edge903.sydney.telstra.net (x.x.x.x) 8 msec
bundle-ether1.ken-edge903.sydney.telstra.net (203.50.11.173) 50 msec 8 msec
5 74.125.49.138 8 msec 8 msec
72.14.212.22 8 msec
6 * * *
7 dns.google (8.8.8.8) 8 msec 8 msec 8 msec
***************************************************************************

When I use the vlan 1 it seems there is no traffic going out.

What am I missing?

***************************************************************************

Router#ping 8.8.8.8 source vlan 1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of w1.x2.y3.z4
.....
Success rate is 0 percent (0/5)

Thank you for your help.

Kevork

Georg Pauwen · ‎12-18-2019

Hello,

post the full running configuration of your device...

Kevork Temisgian · ‎12-18-2019

Hi Georg,

See Below.

Router#show conf
Using 1229 out of 262144 bytes
!
! Last configuration change at 10:20:09 UTC Wed Dec 18 2019
!
version 15.8
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
!
license udi pid C921-4P sn PSZ23371AD6
!
!
!
redundancy
!
!
!
!
!
!
interface GigabitEthernet0
switchport mode access
no ip address
!
interface GigabitEthernet1
switchport mode access
no ip address
!
interface GigabitEthernet2
switchport mode access
no ip address
!
interface GigabitEthernet3
switchport mode access
no ip address
!
interface GigabitEthernet4
ip address dhcp
duplex auto
speed auto
!
interface GigabitEthernet5
no ip address
duplex auto
speed auto
!
interface Vlan1
ip address xx.xx.xx.81 255.255.255.248
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 GigabitEthernet4 dhcp
!
ip access-list extended Allow
permit tcp any any eq www
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
login
transport input none
!
scheduler allocate 20000 1000
!
end

Georg Pauwen · ‎12-18-2019

Hello,

add the lines marked in bold. Access list 1 needs to allow the IP address space under Vlan 1, since you have blanked that out, make sure the access list matches whatever you have configured:

Using 1229 out of 262144 bytes
!
! Last configuration change at 10:20:09 UTC Wed Dec 18 2019
!
version 15.8
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no aaa new-model
!
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
license udi pid C921-4P sn PSZ23371AD6
!
redundancy
!
interface GigabitEthernet0
switchport mode access
no ip address
!
interface GigabitEthernet1
switchport mode access
no ip address
!
interface GigabitEthernet2
switchport mode access
no ip address
!
interface GigabitEthernet3
switchport mode access
no ip address
!
interface GigabitEthernet4
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface GigabitEthernet5
no ip address
duplex auto
speed auto
!
interface Vlan1
ip address xx.xx.xx.81 255.255.255.248
ip nat inside
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface GigabitEthernet4 overload
!
ip route 0.0.0.0 0.0.0.0 GigabitEthernet4 dhcp
!
access-list 1 permit xx.xx.xx.xx 0.0.0.7
!
ip access-list extended Allow
permit tcp any any eq www
!
control-plane
!
line con 0
line vty 0 4
login
transport input none
!
scheduler allocate 20000 1000
!
end