how to configure cisco 887vaw router to connect to cable modem !!!

[yaniv]

hi to all,

i am trying to configure my new router to connect to cable modem on FA3

the connectation need to be as DHCP client.

as i understand it right i have to work with vlans

so my inside network is vlan 10

interface FA1

192.168.1.0/24

dhcp is enable

my ISP is cable and i configure the device to work as a modem with no user name and password need.

the modem is connected to FA3

how to configure interface FA3 as DHCP client ?

see whats configure for now,

thanks for the help

yaniv.

Romioffer#show running-config
Building configuration...

Current configuration : 3758 bytes
!
! Last configuration change at 22:35:46 UTC Sat Oct 15 2016
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Romioffer
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ethernet lmi ce
service-module wlan-ap 0 bootimage autonomous
!
crypto pki trustpoint TP-self-signed-4109097357
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4109097357
revocation-check none
rsakeypair TP-self-signed-4109097357
!
!
crypto pki certificate chain TP-self-signed-4109097357
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34313039 30393733 3537301E 170D3136 31303133 30363334
33305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 31303930
39373335 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100F57B 902A857F AEFD12B2 ED414BA1 B04D6C24 11867888 AB3B529B 7C7718C5
ABD943A5 7B0A89A6 A47D4D5B 1B3B569C E2597BBC 820A5612 7CF44EBA 2BFB052A
AF32B3A8 E8423996 0883C285 65E5A94D 9505B580 19DF45DF DBF88924 2859A68A
B94B1276 C91117CC F9E4E997 171E99E7 6B34AEA6 9C2920B6 00CCBD44 8A81473F
4E410203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14F73D1E 7EF9E641 6AEFA206 D2F03707 91292839 81301D06
03551D0E 04160414 F73D1E7E F9E6416A EFA206D2 F0370791 29283981 300D0609
2A864886 F70D0101 05050003 8181009C 01921F54 C3F8F4EA D7617AC7 A1D2EEAD
38EB7143 819E7047 26B80BB9 DFCB55FC 0D8BA1F8 796830F6 BA183ABF 1DB5551C
5EC5F1A8 04D07D75 D319F2A8 5EE842EC A700D933 7CF761A6 510FD54F 3214EC34
6B0DC7FB 8C92EEC8 AFAF1E36 8183B6AF BCEFE842 83AE274A 11FD09F3 73D7E440
1CEE343F E86949A5 9ABDC55B 22ED57
quit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!

!
ip dhcp excluded-address 10.0.0.140
!
ip dhcp pool Vlan10
network 192.168.1.0 255.255.255.0
next-server 192.168.1.254
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C887VA-W-E-K9 sn FGL203723AA
!
!
username ycoms privilege 15 password 0 yan057in
!
!
!
!
!
controller VDSL 0
!
!
!
!
!
!
!
!
!
!
!
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
shutdown
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
description Inside Lan Vlan 10
switchport access vlan 10
no ip address
spanning-tree portfast
!
interface FastEthernet2
description (connect to Vlan30 for checking internet Conectivity outside interface)
switchport access vlan 30
no ip address
!
interface FastEthernet3
description Connect To hot Modem
switchport access vlan 30
no ip address
spanning-tree portfast
!
interface Wlan-GigabitEthernet0
switchport mode trunk
no ip address
!
interface wlan-ap0
no ip address
!
interface Vlan1
ip address 192.168.10.1 255.255.255.0
!
interface Vlan10
ip address 192.168.1.254 255.255.255.0
!
interface Vlan30
ip address dhcp
ip virtual-reassembly in
!
ip forward-protocol nd
ip http server

Romioffer#wr
Building configuration...

[OK]
Romioffer#

Romioffer con0 is now available

Press RETURN to get started.

*Oct 16 05:11:20.083: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to down
*Oct 16 05:11:21.095: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to down
*Oct 16 05:11:23.343: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to up
*Oct 16 05:11:24.343: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to up
Romioffer>
Romioffer>en
Romioffer#show running-config
Building configuration...

Current configuration : 3758 bytes
!
! Last configuration change at 22:35:46 UTC Sat Oct 15 2016
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Romioffer
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ethernet lmi ce
service-module wlan-ap 0 bootimage autonomous
!
crypto pki trustpoint TP-self-signed-4109097357
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4109097357
revocation-check none
rsakeypair TP-self-signed-4109097357
!
!
crypto pki certificate chain TP-self-signed-4109097357
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34313039 30393733 3537301E 170D3136 31303133 30363334
33305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 31303930
39373335 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100F57B 902A857F AEFD12B2 ED414BA1 B04D6C24 11867888 AB3B529B 7C7718C5
ABD943A5 7B0A89A6 A47D4D5B 1B3B569C E2597BBC 820A5612 7CF44EBA 2BFB052A
AF32B3A8 E8423996 0883C285 65E5A94D 9505B580 19DF45DF DBF88924 2859A68A
B94B1276 C91117CC F9E4E997 171E99E7 6B34AEA6 9C2920B6 00CCBD44 8A81473F
4E410203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14F73D1E 7EF9E641 6AEFA206 D2F03707 91292839 81301D06
03551D0E 04160414 F73D1E7E F9E6416A EFA206D2 F0370791 29283981 300D0609
2A864886 F70D0101 05050003 8181009C 01921F54 C3F8F4EA D7617AC7 A1D2EEAD
38EB7143 819E7047 26B80BB9 DFCB55FC 0D8BA1F8 796830F6 BA183ABF 1DB5551C
5EC5F1A8 04D07D75 D319F2A8 5EE842EC A700D933 7CF761A6 510FD54F 3214EC34
6B0DC7FB 8C92EEC8 AFAF1E36 8183B6AF BCEFE842 83AE274A 11FD09F3 73D7E440
1CEE343F E86949A5 9ABDC55B 22ED57
quit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!

!
ip dhcp excluded-address 10.0.0.140
!
ip dhcp pool Vlan10
network 192.168.1.0 255.255.255.0
next-server 192.168.1.254
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C887VA-W-E-K9 sn FGL203723AA
!
!
username CISCO privilege 15 password 0 CISCO
!
!
!
!
!
controller VDSL 0
!
!
!
!
!
!
!
!
!
!
!
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
shutdown
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
description Inside Lan Vlan 10
switchport access vlan 10
no ip address
spanning-tree portfast
!
interface FastEthernet2
description (connect to Vlan30 for checking internet Conectivity outside interface)
switchport access vlan 30
no ip address
!
interface FastEthernet3
description Connect To hot Modem
switchport access vlan 30
no ip address
spanning-tree portfast
!
interface Wlan-GigabitEthernet0
switchport mode trunk
no ip address
!
interface wlan-ap0
no ip address
!
interface Vlan1
ip address 192.168.10.1 255.255.255.0
!
interface Vlan10
ip address 192.168.1.254 255.255.255.0
!
interface Vlan30
ip address dhcp
ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 Vlan30
!
!
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
gateway
!
!
!
line con 0
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
stopbits 1
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
!
end

Romioffer#

[Georg Pauwen]

Hello,

first of all, your cable modem needs to be connected to Ethernet0. There are a few things missing from your config, I am working on it and will send it over.

[Georg Pauwen]

I have made a few additions to your config (in bold). Your VLAN 30 is set to DHCP, the address range of that VLAN needs to be added to access list 10 as well, otherwise traffic from VLAN 30 will not be translated and hence not be able to get to the outside.

To change the operating mode on your VDSL controller, get into controller config mode, which should look something like this:

Romioffer#conf t

Romioffer(config)#controller vdsl0

Romioffer(config-controller)#operating mode vdsl2

Here is the config with additions marked in bold:

Romioffer#show running-config
Building configuration...

Current configuration : 3758 bytes
!
! Last configuration change at 22:35:46 UTC Sat Oct 15 2016
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Romioffer
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ethernet lmi ce
service-module wlan-ap 0 bootimage autonomous
!
crypto pki trustpoint TP-self-signed-4109097357
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4109097357
revocation-check none
rsakeypair TP-self-signed-4109097357
!
!
crypto pki certificate chain TP-self-signed-4109097357
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34313039 30393733 3537301E 170D3136 31303133 30363334
33305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 31303930
39373335 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100F57B 902A857F AEFD12B2 ED414BA1 B04D6C24 11867888 AB3B529B 7C7718C5
ABD943A5 7B0A89A6 A47D4D5B 1B3B569C E2597BBC 820A5612 7CF44EBA 2BFB052A
AF32B3A8 E8423996 0883C285 65E5A94D 9505B580 19DF45DF DBF88924 2859A68A
B94B1276 C91117CC F9E4E997 171E99E7 6B34AEA6 9C2920B6 00CCBD44 8A81473F
4E410203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14F73D1E 7EF9E641 6AEFA206 D2F03707 91292839 81301D06
03551D0E 04160414 F73D1E7E F9E6416A EFA206D2 F0370791 29283981 300D0609
2A864886 F70D0101 05050003 8181009C 01921F54 C3F8F4EA D7617AC7 A1D2EEAD
38EB7143 819E7047 26B80BB9 DFCB55FC 0D8BA1F8 796830F6 BA183ABF 1DB5551C
5EC5F1A8 04D07D75 D319F2A8 5EE842EC A700D933 7CF761A6 510FD54F 3214EC34
6B0DC7FB 8C92EEC8 AFAF1E36 8183B6AF BCEFE842 83AE274A 11FD09F3 73D7E440
1CEE343F E86949A5 9ABDC55B 22ED57
quit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!

!
ip dhcp excluded-address 10.0.0.140
!
ip dhcp pool Vlan10
network 192.168.1.0 255.255.255.0
next-server 192.168.1.254
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C887VA-W-E-K9 sn FGL203723AA
!
!
username CISCO privilege 15 password 0 CISCO
!
!
!
!
!
controller VDSL 0
--> operating mode VDSL2
!
!
!
!
!
!
!
!
!
!
!
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
--> pppoe-client dial-pool number 1
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
description Inside Lan Vlan 10
switchport access vlan 10
no ip address
spanning-tree portfast
!
interface FastEthernet2
description (connect to Vlan30 for checking internet Conectivity outside interface)
switchport access vlan 30
no ip address
!
interface FastEthernet3
description Connect To hot Modem
switchport access vlan 30
no ip address
spanning-tree portfast
!
interface Wlan-GigabitEthernet0
switchport mode trunk
no ip address
!
interface wlan-ap0
no ip address
!
interface Vlan1
ip address 192.168.10.1 255.255.255.0
--> ip nat inside
!
interface Vlan10
ip address 192.168.1.254 255.255.255.0
--> ip nat inside
!
interface Vlan30
ip address dhcp
--> ip nat inside
ip virtual-reassembly in

--> interface Dialer1
--> description vDSL
--> mtu 1492
--> ip address negotiated
--> no ip redirects
--> no ip unreachables
--> no ip proxy arp
--> ip nat outside
--> no ip virtual-reassembly in
--> encapsulation ppp
--> dialer pool 1
--> dialer idle-timeout 0
--> dialer group 1
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
--> ip nat inside source list 10 interface Dialer1 overload
!
--> access-list 10 permit 192.168.1.0 0.0.0.255
--> access-list 10 permit 192.168.10.0 0.0.0.255
--> dialer-list 1 protocol ip permit

--> ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
gateway
!
!
!
line con 0
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
stopbits 1
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
!
end

Romioffer#

[yaniv]

hi

thanks for your reply

the ethernet o port is assign to ADSL port,

i am not connected by ADSL.

as i  configure FA3(internet) as dhcp its working now,

i put also FA2 to Vlan 30 and connect my computer i have internet on FA3 and FA2.

the problem is Vlan 10 connect to the internet, if i understaqnd right i have to 

write "nat inside" on Vlan 10  and "nat ouside" on Vlan 30

and to give access by access list.

so do i need to write access list on my configure ?

thanks

yaniv 

[Georg Pauwen]

Hello,

if your VLAN 30 is the outside and VLAN 10 the inside, then yes:

interface Vlan30

ip nat outside

interface Vlan10

ip nat inside

--> ip nat inside source list 10 interface Vlan30 overload
!
--> access-list 10 permit 192.168.1.0 0.0.0.255 (this allows Vlan 10 to access the Internet)
--> access-list 10 permit 192.168.10.0 0.0.0.255 (this allows Vlan 1 to access the Internet)
--> dialer-list 1 protocol ip permit

--> ip route 0.0.0.0 0.0.0.0 Vlan30

[yaniv]

Hi 

Thanks for your help

i manage to make it work

My Cisco router FA3 connected to home Switch

10.0.0.0/24

gateway 10.0.0.138

so to connected it to Cable Modem i just need now to change the Vlan30 ip address.

see my configure file...

Romioffer#
Romioffer#en
Romioffer#sr
Building configuration...

Current configuration : 4623 bytes
!
! Last configuration change at 19:17:30 UTC Mon Oct 17 2016 by ycoms
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Romioffer
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ethernet lmi ce
service-module wlan-ap 0 bootimage autonomous
!
crypto pki trustpoint TP-self-signed-4109097357
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4109097357
revocation-check none
rsakeypair TP-self-signed-4109097357
!
!
crypto pki certificate chain TP-self-signed-4109097357
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34313039 30393733 3537301E 170D3136 31303133 30363334
33305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 31303930
39373335 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100F57B 902A857F AEFD12B2 ED414BA1 B04D6C24 11867888 AB3B529B 7C7718C5
ABD943A5 7B0A89A6 A47D4D5B 1B3B569C E2597BBC 820A5612 7CF44EBA 2BFB052A
AF32B3A8 E8423996 0883C285 65E5A94D 9505B580 19DF45DF DBF88924 2859A68A
B94B1276 C91117CC F9E4E997 171E99E7 6B34AEA6 9C2920B6 00CCBD44 8A81473F
4E410203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14F73D1E 7EF9E641 6AEFA206 D2F03707 91292839 81301D06
03551D0E 04160414 F73D1E7E F9E6416A EFA206D2 F0370791 29283981 300D0609
2A864886 F70D0101 05050003 8181009C 01921F54 C3F8F4EA D7617AC7 A1D2EEAD
38EB7143 819E7047 26B80BB9 DFCB55FC 0D8BA1F8 796830F6 BA183ABF 1DB5551C
5EC5F1A8 04D07D75 D319F2A8 5EE842EC A700D933 7CF761A6 510FD54F 3214EC34
6B0DC7FB 8C92EEC8 AFAF1E36 8183B6AF BCEFE842 83AE274A 11FD09F3 73D7E440
1CEE343F E86949A5 9ABDC55B 22ED57
quit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!

!
ip dhcp excluded-address 10.0.0.140
ip dhcp excluded-address 192.168.1.254
!
ip dhcp pool Vlan10
import all
network 192.168.1.0 255.255.255.0
next-server 192.168.1.254
default-router 192.168.1.254
dns-server 8.8.8.8 81.199.117.170
!
!
!
ip name-server 8.8.8.8
ip name-server 81.199.117.170
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C887VA-W-E-K9 sn FGL203723AA
!
!
username CISCO privilege 15 password 0 CISCO
!
!
!
!
!
controller VDSL 0
!
!
!
!
!
!
!
!
!
!
!
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
shutdown
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
description Inside Lan Vlan 10
switchport access vlan 10
no ip address
spanning-tree portfast
!
interface FastEthernet2
description (connect to Vlan30 for checking internet Conectivity outside interface)
switchport access vlan 30
no ip address
!
interface FastEthernet3
description Connect To hot Modem
switchport access vlan 30
no ip address
spanning-tree portfast
!
interface Wlan-GigabitEthernet0
switchport mode trunk
no ip address
!
interface wlan-ap0
no ip address
!
interface Vlan1
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan10
ip address 192.168.1.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan30
ip address 10.0.0.140 255.255.255.0
ip nat outside
ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
ip dns server
ip nat inside source list 10 interface Vlan30 overload
ip route 0.0.0.0 0.0.0.0 10.0.0.138
!
ip access-list extended aclAllowNat
remark --- Traffic allowed to be NATed from inside to out.
remark --- Block NAT traffic to RFC1918 addresses verbosely
deny ip any 10.0.0.0 0.255.255.255
deny ip any 172.16.0.0 0.15.255.255
deny ip any 192.168.0.0 0.0.255.255
ip access-list extended aclallownat
permit ip any any
!
!
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 10 permit 192.168.10.0 0.0.0.255
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
gateway
timer receive-rtp 1200
!
!
alias exec s show ip int br
alias exec sr show run
!
line con 0
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
stopbits 1
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
!
end

Romioffer#sr

_______________________

again thanks for your help

yaniv

[Georg Pauwen]

Yaniv,

glad you got it to work ! Thanks for posting the config, I can use it for future reference...