11-05-2015 12:23 AM - edited 03-05-2019 02:40 AM
Hello, I encounter a problem with the configuration of my Cisco C887VA-K9. All interfaces are up, but I have no internet access.
I updated the firmware and use the HTML interface to generate configuration settings below. Can you help me find a solution?
Thank you
configuration:
Current configuration : 4090 bytes
!
! Last configuration change at 09:04:31 UTC Mon Sep 28 2015
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 xxxxxxxxxxxx
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-2696967511
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2696967511
revocation-check none
rsakeypair TP-self-signed-2696967511
!
!
crypto pki certificate chain TP-self-signed-2696967511
certificate self-signed 01
xxxxxxxx 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32363936 39363735 3131301E 170D3135 30393238 30373333
35325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36393639
36373531 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D0C5 0FE9FFD6 0182BE7E 2C0CBF7B C510FEA0 9B66125F 48E3DFEF E23B5C35
DFF9D8C3 9DF3D64F 5F862490 A85A33C9 6918C799 C7F8DC20 313F0654 E9CC44AB
3F8B59A0 C8F5BB7A C75418DC 5FF6597A F4CC846B 4218B2E1 47FF8482 3A565436
06CE11CA 43CA8F8E 2EEC7D0C 70204D59 E25BD75B DA5CB851 09BF00AB 062A3C7D
46C10203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14E84BCD FC27791B B4E8100B 23CEFC59 F0131734 63301D06
03551D0E 04160414 E84BCDFC 27791BB4 E8100B23 CEFC59F0 13173463 300D0609
2A864886 F70D0101 05050003 818100BF F661A88E 5BE67459 5BA7C558 D1AD14E4
6079D529 43B33760 AF6446F1 D8319553 080A947A 505DED42 6D16E487 0BEFD15C
54450098 9D6BAD63 2216E309 ABF7757A AE88EF39 268C41CF 470852B8 E41B9475
70F42B7B 1AC84AA9 AFBBFF39 44A618FF 117373D4 53E1A6DA D22FB3C6 E0F77DD4
69D5DB01 66E60D36 9BEEE445 BA2CC7
quit
!
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
!
license udi pid C887VA-K9 sn FCZ18xxxxx
!
!
username admin privilege 15 secret 5 $1$bpzn$2SYp.TRvFYxxxxxxx
!
!
controller VDSL 0
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
description PrimaryWANDesc_WAN
pvc 8/35
pppoe-client dial-pool-number 1
!
!
interface Ethernet0
no ip address
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Vlan1
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1412
!
interface Dialer1
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1412
dialer pool 1
dialer-group 1
ppp mtu adaptive
ppp authentication chap pap callin
ppp chap hostname login
ppp chap password 7 password
ppp pap sent-username login password 7 password
ppp ipcp dns request
!
ip forward-protocol nd
no ip http server
ip http authentication local
ip http secure-server
!
!
ip nat inside source list nat-list interface Dialer1 overload
ip nat inside source static udp 192.168.10.2 4500 interface Dialer1 4500
ip nat inside source static tcp 192.168.10.2 822 interface Dialer1 822
ip nat inside source static udp 192.168.10.2 500 interface Dialer1 500
ip nat inside source static tcp 192.168.10.2 1750 interface Dialer1 1750
ip nat inside source static tcp 192.168.10.2 1751 interface Dialer1 1751
ip route 0.0.0.0 0.0.0.0 Dialer1
!
dialer-list 1 protocol ip permit
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
line con 0
password 7 0624001455xxxxxxxx
login
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
!
end
11-05-2015 04:13 AM
Hi,
Based on your NAT config. You're missing access-list nat-list which defines your private ip address or LAN segment.
11-05-2015 08:43 PM
Hello,
As Terence metioned, you need to add access-list nat-list. Add this command.
ip access-list standard nat-list
permit 192.168.10.0 0.0.0.255
Masoud
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide