How to setup 887G Router with Telstra Gen 2 Smart Modem

[anjanmj]

Hi Gurus,

I am trying to setup the below Network. 

I am at step 1 where i am trying to configure the connection between the Telstra Modem and the 887G Router.

Below is the connection Details

1. The WAN Port on the Telstra Modem is connected to the Wall RJ45 Socket.
2. One of the Telstra Modem LAN Port is Connected to Fast Ethernet 0 which automatically bought VLAN 1 up and running.
3. I have also connected the ADSLoPoTS on the Cisco 887G Router to the DSL port on the Telstra Modem.
4. In the sh run there is no configuration so I am not attaching any configuration details.
5. Whenever I am trying to setup IP on any of the Fast Ethernet Interface i am getting "IP addresses may not be configured on L2 Links FastEthernet.

Any Help is highly Appreciated or if you can direct me to any documentation it would be very helpful.

Thanks

AJ

 

[Flavio Miranda]

Hi

 The message says by itself:  "P addresses may not be configured on L2 Links FastEthernet." which means, you can´t configure an IP address in a Layer 2 interface. You need either change it to L3 interface or setup the IP address on the vlan 1.

Try to do like this:

Router#config t

Router(config)# int Ethernet

Router(config-if)# no switchport

The command no switchport, if supported on the device, will change the L2 behavior to L3 behavior.  However,  if this command were rejected, you can try this:

Router#config t

Router(config)# int vlan 1

Router(config-if)# ip add x.x.x.x 255.255.255.0

x.x.x.x must be an IP address on the same network as your Telstra Modem. Same thing for mask. 

You may also need a default route point to Telstra Modem IP address.

[anjanmj]

Thanks, Flavio Miranda for the Update.

So each of the ports should be in a separate VLAN and then only I can assign the IP address to it and then I need to enable Intervlan routing between them for the communication to happen.

Kindly correct me if my thought is incorrect.

• My next question is how to configure the firewall on the other port.

I also tried to disable the switchport but it is giving me the below options. Can you please tell me which one should i select.

Router(config-if)#no switchport ?
access Set access mode characteristics of the interface
mode Set trunking mode of the interface
priority Set 802.1p priorities
protected Configure an interface to be a protected port
trunk Set trunking characteristics of the interface
voice Voice appliance attributes

Below is the update of the show run

Router#sh run
Building configuration...

Current configuration: 1100 bytes
!
! Last configuration change at 19:50:10 UTC Tue Jan 2 1900
!
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
memory-size iomem 10
crypto pki token default removal timeout 0
!
!
ip source-route
!
ip cef
ip domain name homelab.local
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO887G-K9 sn FHK1441704E
!
!
controller Cellular 0

interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Cellular0
no ip address
encapsulation ppp
!
interface Vlan1
ip address 10.0.1.2 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 10.0.1.1
!
logging esm config
no cdp run

!
control-plane
!
!
line con 0
no modem enable
line aux 0
line 3
no exec
line vty 0 4
login
transport input all
!
end

[Georg Pauwen]

Hello,

the FastEthernet ports are layer 2 only, you cannot convert them to layer 3 ports. What you need to do is connect e.g. FastEthernet1 to the ASA, and then use the config below. You also need a static route pointing towards the firewall, in order to reach the networks on the other side of the firewall.

interface FastEthernet1
--> switchport access vlan 2

!

interface Vlan2
ip address 10.0.3.1 255.255.255.0

!

ip route 10.0.0.0 0.0.0.255 10.0.3.2

[jacamb]

Thanks - just looking for this - will try now