Need help with routing Cisco 867vae-k9 with Public WAN and LAN IP Addresses

[Sanga62]

Hello,

We recently changed our ISP but unfortunately they didn't provide any routing. So, i had a Cisco 867vae-k9 in spare.

My new ISP provided me Static WAN IP with DNS and Gateway and Static LAN IPs.

I tried several tutorials and i am unable to get it to work.

Can someone help me out to configure this router.

[Georg Pauwen]

Hello,

below is a sample configuration:

Current configuration : 2041 bytes
!
! Last configuration change at 02:17:41 UTC Sat Feb 27 2016
version 15.2
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname mrciscorouter
!
boot-start-marker
boot-end-marker
!
enable secret xxxxxxxxxxxxxxxxxxxx
enable password xxxxxxxxxxxx
!
no aaa new-model
wan mode ethernet
!
ip cef
no ipv6 cef
!
controller VDSL 0
shutdown
!

ip dhcp excluded-address 192.168.1.1

!

ip dhcp pool LAN

network 192.168.1.0 255.255.255.0

default-router 192.168.1.1

dns-server 8.8.8.8 8.8.4.4

!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
shutdown
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface GigabitEthernet0
no ip address
!
interface GigabitEthernet1

description Uplink to ISP
ip address x.x.x.x y.y.y.y
ip mtu 1492
duplex auto
speed auto
!
interface Vlan1
description LAN Interface
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
no ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip dns server
ip nat inside source list 10 interface GigabitEthernet1 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet1
!
access-list 10 permit 192.168.1.0 0.0.0.255
!
snmp-server community xxxxxxxxxxxxxxxxx
!
line con 0
no modem enable
line aux 0
line vty 0 4
password xxxxxxxxxxxxxxx
login
transport input all
!
scheduler allocate 60000 1000
!
end

[Sanga62]

Hello,

Thank you very much for your reply, maybe i am a noob or maybe i didn't understood the example so let me provide you some more details.

Wan IP Details:

WAN IP: 136.xxx.xxx.xxx

GATEWAY IP: 136.xxx.xxx.xxx

SUB-NET MASK: 255.255.255.252

DNS:49.xx.xx.x

PUBLIC LAN IP:

LAN IP POOL : 115.xxx.x.xxx/29

Subnet: 255.255.255.248

115.xxx.x.xxx (Gateway)

Usable LAN IPs
115.xxx.x.xxx - For firewall
115.xxx.x.xxx - For Exchange Server
115.xxx.x.xxx - Chat Server
115.xxx.x.xxx - File Server
115.xxx.x.xxx - FTP Server

IF the info i provided makes any sense can you provide the configuration steps.

Also this is what i have done so far.

Current configuration : 1501 bytes

!

! Last configuration change at 16:27:54 UTC Thu Dec 12 2019

version 15.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

!

!

no aaa new-model

wan mode ethernet

!

!

!

!

ip dhcp pool LAN

 network 115.xxx.1.0 255.255.255.0

 default-router 115.xxx.1.209

 dns-server 8.8.8.8 8.8.4.4

!

!

!

ip cef

no ipv6 cef

!

!

!

!

!

!

!

!

!

controller VDSL 0

 shutdown

!

!

!

!

!

!

!

!

!

!

!

!

!

interface ATM0

 no ip address

 shutdown

 no atm ilmi-keepalive

!

interface Ethernet0

 no ip address

 shutdown

!

interface FastEthernet0

 no ip address

!

interface FastEthernet1

 no ip address

!

interface FastEthernet2

 no ip address

!

interface FastEthernet3

 no ip address

!

interface GigabitEthernet0

 no ip address

!

interface GigabitEthernet1

 description Uplink to ISP

 ip address 136.xxx.xxx.xxx 255.255.255.252

 ip mtu 1492

 shutdown

 duplex auto

 speed auto

!

interface Vlan1

 description LAN Interface

 ip address 115.xxx.x.xxx 255.255.255.248

 ip nat inside

 ip virtual-reassembly in

!

no ip forward-protocol nd

no ip http server

no ip http secure-server

!

!

ip dns server

ip nat inside source list 10 interface GigabitEthernet1 overload

ip route 0.0.0.0 0.0.0.0 GigabitEthernet1

!

access-list 10 permit 115.xx.1.0 0.0.0.248

mac-address-table aging-time 15

!

!

line con 0

 no modem enable

line aux 0

line vty 0 4

 login

 transport input all

!

scheduler allocate 60000 1000

!

end

[Sanga62]

Still cant get it to work.

Here are some info provided to me by ISP.

Wan IP Details:
WAN IP: 136.xxx.xxx.xxx
GATEWAY IP: 136.xxx.xxx.xxx
SUB-NET MASK: 255.255.255.252
DNS:49.xx.xx.x

PUBLIC LAN IP:
LAN IP POOL : 115.xxx.x.xxx/29
Subnet: 255.255.255.248
115.xxx.x.209 (Gateway)
Usable LAN IPs
115.xxx.x.xxx - For firewall
115.xxx.x.xxx - For Exchange Server
115.xxx.x.xxx - Chat Server
115.xxx.x.xxx - File Server
115.xxx.x.xxx - FTP Server
Here is my Current Configuration

Current configuration : 1880 bytes
!
! Last configuration change at 18:18:36 UTC Thu Dec 12 2019
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Agile-Jio
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$iReF$.u/Yok6mUgHgSFi8nOlEn1
enable password XXXXXXX
!
no aaa new-model
wan mode ethernet
no ip routing
!
!
!
ip dhcp excluded-address 115.xxx.x.209
!
ip dhcp pool LAN
network 115.xxx.x.0 255.255.255.248
default-router 115.xxx.x.209
dns-server 8.8.8.8 8.8.4.4 49.45.0.1
!
!
!
no ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
controller VDSL 0
shutdown
!
!
!
!
!
!
!
!
!
!
!
!
!
interface ATM0
no ip address
no ip route-cache
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
no ip route-cache
shutdown
!
interface FastEthernet0
no ip address
shutdown
!
interface FastEthernet1
no ip address
shutdown
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface GigabitEthernet0
no ip address
shutdown
!
interface GigabitEthernet1
description Uplink to ISP
ip address 136.xxx.xxx.206 255.255.255.252
ip mtu 1492
ip nat outside
ip virtual-reassembly in
no ip route-cache
shutdown
duplex auto
speed auto
!
interface Vlan1
description LAN Interface
ip address 115.xxx.x.209 255.255.255.248
ip nat inside
ip virtual-reassembly in
no ip route-cache
shutdown
!
ip default-gateway 136.xxx.xxx.205
no ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip dns server
ip nat inside source list 10 interface GigabitEthernet1 overload
ip route 0.0.0.0 0.0.0.0 136.xxx.xxx.205
!
access-list 10 permit 115.xxx.x.0 0.0.0.252
dialer-list 1 protocol ip permit
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password XXXXXX
login
transport input all
!
scheduler allocate 60000 1000
!
end

[Georg Pauwen]

Hello,

your access list 10 is wrong. It needs to be:

access-list 10 permit 115.xxx.x.0 0.0.0.7

[Sanga62]

Thanks Again for your reply.
I am still unable to get the internet running.
Here are the Details from My ISP.

WAN Details From ISP:
WAN IP: 136.xxx.xxx.206
GATEWAY IP: 136.xxx.xxx.205
SUB-NET MASK: 255.255.255.252
DNS:49.xx.xx.1

I want to use above mentioned IP to setup internet Connection.

Question: How do we enter Default gateway and Dns for interface "GigabitEthernet1"

LAN IP Pool provided by IP.

IP1: 115.XXX.X.209 Need to use this IP for gateway for below mentioned LAN IPs.
IP2: 115.XXX.X.210 Need to assign to a Client PC on network behind router.
IP3: 115.XXX.X.211 Need to assign to a Client PC on network behind router.
IP4: 115.XXX.X.212 Need to assign to a Client PC on network behind router.
IP5: 115.XXX.X.213 Need to assign to a Client PC on network behind router.
IP6: 115.XXX.X.214 Need to assign to a Client PC on network behind router.
Subnet Mask: 255.255.255.248

Then i guess we'll need NAT between WAN IP and LAN IPs
I am sorry i am new to Cisco configuration so bear with me.

[Georg Pauwen]

Hello,

can you ping 8.8.8.8 from the router ? Post the config with the real IP addresses...

[Sanga62]

Unable to Ping 8.8.8.8

Config is as below:

Agile-Jio#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Agile-Jio#sh run
Building configuration...

Current configuration : 1862 bytes
!
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Agile-Jio
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$iReF$.u/Yok6mUgHgSFi8nOlEn1
enable password XXXXXXXX
!
no aaa new-model
wan mode ethernet
no ip routing
!
!
!
ip dhcp excluded-address 115.xxx.x.209
!
ip dhcp pool LAN
network 115.XXX.X.0 255.255.255.248
default-router 115.XXX.X.209
dns-server 8.8.8.8 8.8.4.4 49.45.0.1
!
!
!
no ip cef
no ipv6 cef
!
!
controller VDSL 0
shutdown
!
!
!
interface ATM0
no ip address
no ip route-cache
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
no ip route-cache
shutdown
!
interface FastEthernet0
no ip address
shutdown
!
interface FastEthernet1
no ip address
shutdown
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface GigabitEthernet0
no ip address
shutdown
!
interface GigabitEthernet1
description Uplink to ISP
ip address 136.xxx.xxx.206 255.255.255.252
ip mtu 1492
ip nat outside
ip virtual-reassembly in
no ip route-cache
shutdown
duplex auto
speed auto
!
interface Vlan1
description LAN Interface
ip address 115.xxx.x.209 255.255.255.248
ip nat inside
ip virtual-reassembly in
no ip route-cache
shutdown
!
ip default-gateway 136.xxx.xxx.205
no ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip dns server
ip nat inside source list 10 interface GigabitEthernet1 overload
ip route 0.0.0.0 0.0.0.0 136.xxx.xxx.205
!
access-list 10 permit 115.241.1.0 0.0.0.252
access-list 10 permit 115.241.1.0 0.0.0.7
dialer-list 1 protocol ip permit
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password XXXXXXXX
login
transport input all
!
scheduler allocate 60000 1000
!
end

[Georg Pauwen]

Post the running configuration again. You have misconfigured access list 10 twice, we need to check if you got it right now...

[Sanga62]

Can you correct the things in my Config that i posted then I'll reset the router and rewrite the configuration.

[Georg Pauwen · Accepted solution]

Hello,

make sure your configuration looks exactly like the one below, line by line, character by character. When you are finished, post the configuration again so we can double check...

Building configuration...

Current configuration : 1862 bytes
!
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Agile-Jio
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$iReF$.u/Yok6mUgHgSFi8nOlEn1
enable password XXXXXXXX
!
no aaa new-model
wan mode ethernet
ip routing
!
ip dhcp excluded-address 115.xxx.x.209
!
ip dhcp pool LAN
network 115.XXX.X.0 255.255.255.248
default-router 115.XXX.X.209
dns-server 8.8.8.8 8.8.4.4 49.45.0.1
!
no ip cef
no ipv6 cef
!
controller VDSL 0
shutdown
!
interface ATM0
no ip address
no ip route-cache
shutdown
no atm ilmi-keepalive
!
interface Ethernet0
no ip address
no ip route-cache
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface GigabitEthernet0
no ip address
!
interface GigabitEthernet1
description Uplink to ISP
ip address 136.xxx.xxx.206 255.255.255.252
ip mtu 1492
ip nat outside
ip virtual-reassembly in
no ip route-cache
duplex auto
speed auto
!
interface Vlan1
description LAN Interface
ip address 115.xxx.x.209 255.255.255.248
ip nat inside
ip virtual-reassembly in
no ip route-cache
!
no ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 10 interface GigabitEthernet1 overload
ip route 0.0.0.0 0.0.0.0 136.xxx.xxx.205
!
access-list 10 permit 115.241.1.0 0.0.0.7
!
line con 0
no modem enable
line aux 0
line vty 0 4
password XXXXXXXX
login
transport input all
!
scheduler allocate 60000 1000
!
end

[Sanga62]

Sir,

You are a Life and Job Saver.

Thank You Very Much for Your Assist and your time.

Would you mind if i bother you again in future if i get into any trouble with this router.

I can't thank you enough.

All is working fine all the IPs and Everything

Thanks Again

Have a wonderful day ahead.

[Georg Pauwen]

Hello,

glad that it is working. Post in the forum anytime you need assistance...

[amikat]

Hi,

Both your GigabitEthernet1 and Vlan1 interfaces are at the shutdown status you should configure "no shut". Your network command under the "ip dhcp pool LAN" should read "network 115.XXX.X.208 255.255.255.248" and also your "access-list 10" should read "access-list 10 permit 115.241.1.208 0.0.0.7" and not "access-list 10 permit 115.241.1.0 0.0.0.7" as advised.

Good Luck!

Best regards,

Antonin