pppoe configuration problem

[CSCO10825585]

Hello!

I have this configuration in my Cisco827.

I have managed to go out to Internet to some pages but it does not go out for great others.

If I remove the access list 1 does not go out at all.

In what interface is this access list applied?

It can be a problem of safety or of mtu ...?

Thanks.

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

!

ip subnet-zero

!

vpdn enable

!

vpdn-group pppoe

request-dialin

protocol pppoe

!

!

!

!

interface Ethernet0

ip address 192.168.1.1 255.255.255.0

ip nat inside

hold-queue 100 out

!

interface ATM0

no ip address

no atm ilmi-keepalive

bundle-enable

dsl operating-mode auto

hold-queue 224 in

!

interface ATM0.1 point-to-point

pvc 8/32

pppoe-client dial-pool-number 1

!

!

interface Dialer1

ip address negotiated

ip mtu 1492

ip nat outside

encapsulation ppp

dialer pool 1

ppp chap hostname adslppp@telefonicanetpa

ppp chap password 0 adslppp

!

ip nat inside source list 1 interface Dialer1 overload

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer1

no ip http server

ip pim bidir-enable

!

!

access-list 1 permit 192.168.1.0 0.0.0.255

access-list 1 deny any

!

!

line con 0

password indartsu99

stopbits 1

line vty 0

access-class 1 in

exec-timeout 120 0

password xxx

login

line vty 1 4

password xxx

login

!

scheduler max-task-time 5000

end

Javier Calleja.

[stephen.stack]

HI Javier,

Just wondering if you have a proplem displaying webpages like Hotmail.com.

Try adding the following command under ethernet0

ip tcp adjust-mss 1452

This should fix your issue. If this helps.. please rate post.

PS you may want to remove your passwords from yuor config before posting it on a public forum. (just a tip :) )

Thanks

Stephen

[CSCO10825585]

Hello Stephen!

Thanks for your recommendations.

The router works perfectly with your solution.

The message " dynamic configuration problem " I have answered it after creating this one since I have not seen it.

On the other hand I have a doubt, and have learned that in order that an access list should be executed it is necessary to put in the interface access-group and n ?.

Is not it necessary to do it?..

Thanks for everything.

Happy new year.

Javier Calleja.

[stephen.stack]

Hi Javier,

I just noticed the duplicate post too. We'll stick with this thread.

Glad to hear it fixed the issue. It is a very common issue with DSL and Cisco routers.

In relation to the last part of you message...

If you are talking about access-list 1, this access-list is realted to the NAT statment.

--------

!

ip nat inside source list 1 interface Dialer1 overload

!

access-list 1 permit 192.168.1.0 0.0.0.255

access-list 1 deny any

--------

'Source List 1' Refers to access-ist 1. This access-list tells NAT which IP address range is allowed to partake in NAT translations.

Access-lists do not always have to be bound to interfaces. In fact they are bound more to routing policies, QOS statements, and the likes more than restrictions for traffic on interfaces.

One more tip for you. Install SDM on your PC and setup and configure the Cisco IOS firewall for security.

Have a happy new year.

Don't forget to rate posts :)

Thanks

Stephen

[CSCO10825585]

Hello Stephen!

I?m afraid that I cannot install the SDM because I have a cisco 800 series (827).

Can i use extended access list with Nat as the standard?

[stephen.stack]

You can use an extended Access-list.

Cisco SDM (Security Device Manager) will work with the Cisco 827. you can download it from here

http://www.cisco.com/en/US/products/sw/secursw/ps5318/index.html

and just click on the 'download software' link on the right side of the page. install it on your PC only. and get it talking to your 827.

Regards

Stephen