Hello !!
I need you help.
I get some trouble to configure the 881 router...
I will explain :
I get the WAN access x.x.x.58 255.255.255.252
On the router x.x.x.57 255.255.255.252
I get VLAN 1 on 10.10.10.1 255.255.255.248 on Fa0
I add a default static route to the WAN and I can access to internet.
After that i create a VLAN 2 192.168.5.1 255.255.255.0 for Fa1 & fa2
But impossible to access to internet.
I can ping the x.x.x.57, but not the x.x.x.58 and also not google ...
I tried many configuration, i put here the simple configuration...
Is it maybe ACLS ? I tried things from other forums but nothing is working
Did i need to put in trunk my port2 ?
Thank you...
no cdp run
crypto isakmp policy 1
interface FastEthernet0
no ip address
spanning-tree portfast
!
interface FastEthernet1
switchport access vlan 2
no ip address
spanning-tree portfast
!
interface FastEthernet2
switchport access vlan 2
no ip address
spanning-tree portfast
!
interface FastEthernet3
no ip address
spanning-tree portfast
!
interface FastEthernet4
description PrimaryWANDesc_$ES_WAN$$FW_OUTSIDE$
ip address x.x.x.57 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$CVO$
ip address 10.10.10.1 255.255.255.248
ip access-group 100 in
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
interface Vlan2
ip address 192.168.5.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list 1 interface FastEthernet4 overload
ip nat inside source list nat-list interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 x.x.x.58
!
!
access-list 1 permit 10.10.10.0 0.0.0.7
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 permit udp any eq bootps any eq bootpc
access-list 101 deny ip 10.10.10.0 0.0.0.255 any
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip any any
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
-----------------------------------------------------------------------
