Using Cisco 877 behind DSL-modem

[Joost Lauwen]

Hi,

I'm having a business DSL-connection which requires a modem from the provider (It cannot be replaced by another modem/router)

I want to know if it is possible to place the Cisco 877W-G-E-K9 behind the modem and set it up as an VPN-server.

The internet connection wil be established in the modem/router of our provider.

[Joost Lauwen]

Tried the commands below but didn't work.

[johnlloyd_13]

Hi,

Could you check if the Speedtouch modem has a static route towards the 877.

In Cisco, it would look like as below:

ip route 192.168.0.0 255.255.255.0 192.168.2.2.

Sent from Cisco Technical Support iPhone App

[Joost Lauwen]

The Speedtouch we are using is a normal modem/router. ISP has blocked access to this modem, because it's their property.

When my computer is directly connected to the ISP (speedtouch) modem I have internet. Ping to the cisco (192.168.2.2) does not work.

[johnlloyd_13]

hi,

i suspect your speedtouch modem is doing DHCP and NAT. try to configure your 877 as below:

int vl1

no ip nat in

int vl10

no ip nat out

ip add dhcp

no ip nat inside source list 101 interface vlan 10 overload

no ip route 0.0.0.0 0.0.0.0 192.168.2.254

ip route 0.0.0.0 0.0.0.0 dhcp

[Joost Lauwen]

Hi John,

On the speedtouch DHCP is disable. This router has a static IP and is forwarding all ports to the device with IP address 192.168.2.2. The 877 must have 192.168.2.2 as IP address.

[Joost Lauwen]

I've configured the FastEthernet0 to act in trunk mode.

Now i am getting an IP-address from the ISP-modem when connected with the cisco. But i'm not able to access the cisco via telnet or CPE.

ip dhcp pool sdm-pool1
   import all
   network 192.168.0.0 255.255.255.0
   default-router 192.168.254.1
   dns-server 192.168.254.1
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface FastEthernet0
description WAN_Link
switchport mode trunk
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
shutdown
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 192.168.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.254.1
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source list 101 interface FastEthernet0 overload
!