1841 Internet Router config issues

Joel Strawn · ‎04-28-2014

I have an 1841 router connected to Verizon DIA for Internet. I can SSH to the router but I can not ping a device with a static IP address in the same block of IP's that Verizon gave me. Device I try to ping is 63.86.5.251. router config is below. I should not need any NAT statements??

version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Milwaukee
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$pGaG$aL8.vsAZpzIVirVJBoM0h.
enable password XXXXXX
!
no aaa new-model
dot11 syslog
ip cef
!
!
!
!
multilink bundle-name authenticated
!
crypto pki trustpoint TP-self-signed-2544040765
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2544040765
revocation-check none
rsakeypair TP-self-signed-2544040765
!
!
crypto pki certificate chain TP-self-signed-2544040765
certificate self-signed 01
30820241 308201AA A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32353434 30343037 3635301E 170D3134 30343238 31333135
31325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35343430
34303736 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100E0F9 99CAACF4 1D0BCB38 ECD68343 A7686F51 1B555499 7E3BE26D 592C77CE
5B3110DE 01E08E14 5DEFAFA1 14804235 7311D49C D141A993 16159D20 3F98DBB0
E1E856D7 108B670A 7D3D56AC 51F956A8 EE24AE09 4F876FC9 FF31DBA0 11112F02
1987A5F4 A98BF9EC E6856A81 D64E5022 1840509E E1D81B9F 92963692 BF490D6A
78E90203 010001A3 69306730 0F060355 1D130101 FF040530 030101FF 30140603
551D1104 0D300B82 094D696C 7761756B 6565301F 0603551D 23041830 1680140D
86411152 2571C485 DE154FA4 D2C09B3F 62E4E630 1D060355 1D0E0416 04140D86
41115225 71C485DE 154FA4D2 C09B3F62 E4E6300D 06092A86 4886F70D 01010405
00038181 0008142F 5D4CF40F 415EEAE7 D872D17B 4C6FE99B 5BC16FA4 20F0FD9F
2A2CFF87 165DAF65 0B1AB16C E565F1BA 38184B26 0689E974 EF5415B3 3BA93566
B6636172 691CD5CF 135E374D 447C031D 6DF8F179 7FAB134F 253F4E77 57F8781B
BE8A9CE9 AF2545A3 4C70FFB0 C255E96F C5C527B1 D0ED6DAE EA55BDEC 7B1A3309
C9E3C7BC 9B
quit
!
!
username netadmin password 0 XXXXXXX
username admin password 0 level 15 XXXXXXX
archive
log config
hidekeys
!
!
ip ssh version 2
!
!
!
interface FastEthernet0/0
ip address 63.86.5.250 255.255.255.248
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 1536
no ip address
encapsulation frame-relay IETF
service-module t1 clock source internal
service-module t1 timeslots 1-24
frame-relay lmi-type ansi
!
interface Serial0/0/0.500 point-to-point
ip address 157.130.101.222 255.255.255.252
snmp trap link-status
frame-relay interface-dlci 500 IETF
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Serial0/0/0.500
!
!
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
exec-timeout 0 0
privilege level 15
password XXXXXX
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
end

Peter Paluch · ‎04-28-2014

Hi Joel,

Where is the 63.86.5.251 device actually connected? Is it really down the Fa0/0 interface? And by the way, is the Fa0/0 in the up/up state? Can you ping any other device connected to Fa0/0?

Best regards,
Peter

Joel Strawn · ‎05-01-2014

the fa0/0 interface is 63.86.5.250, and from there a cable goes to a WAN port on a VPN device and that has the address of 63.86.5.251. from the fa0/0 interface I ping just fine to the internet, but if I swap out the VPN device and attach a laptop to the fa0/0 interface and statically assign 63.86.5.251 to the laptop, I can ping 63.86.5.250, but it will not get out to the Internet.

I am confused, it should go right out, no access lists or anything, just a very basic config on the router shown above. Verizon had me change to ip route 0.0.0.0 0.0.0.0 157.130.101.221 which is the Verizon side of the WAN block. Still no go.

Roger De Couto · ‎05-01-2014

Hi Joel,

You don't need to perform NAT in this scenario as your using public IP's.

Can you confirm that when you plugged your laptop to the fa0/0 port on the router, these were the static IP details configured on the laptop?

Laptop IP: 63.86.5.251
Subnet mask: 255.255.255.248
Default gateway: 63.86.5.250

If not, try it and ping 8.8.8.8

Next, can you run the following command from the router please.

traceroute 8.8.8.8 source FastEthernet0/0

Let us know how you go.

Joel Strawn · ‎05-01-2014

on the laptop I have the default gateway as 63.86.5.249 as provided by Verizon. .250 is the fa0/0 port on the router. Should I use that instead of .249?

Roger De Couto · ‎05-01-2014

Hi Joel, yes please re-test with your laptop connected to port fa0/0 on the router, using 63.86.5.250 as the default gateway on your laptop.

'After' you try the above, ping 63.86.5.249 - do you get a response?

Joel Strawn · ‎05-01-2014

and the router pings to the internet just fine. just the laptop wont

Joel Strawn · ‎05-01-2014

Milwaukee#traceroute 8.8.8.8 source fa0/0

Type escape sequence to abort.
Tracing the route to 8.8.8.8

1 157.130.101.221 8 msec 8 msec 8 msec
2 152.63.0.138 32 msec 32 msec 32 msec
3 152.63.35.225 32 msec
    152.63.33.193 32 msec 32 msec
4 152.179.50.50 32 msec 32 msec 64 msec
5 209.85.252.46 32 msec 28 msec 28 msec
6 72.14.236.146 [MPLS: Label 444486 Exp 4] 32 msec 32 msec
    72.14.236.152 [MPLS: Label 659928 Exp 4] 32 msec
7 72.14.235.12 [MPLS: Label 370796 Exp 4] 40 msec
    66.249.95.229 [MPLS: Label 468932 Exp 4] 40 msec
    72.14.235.12 [MPLS: Label 468732 Exp 4] 36 msec
8 72.14.234.67 36 msec 36 msec 36 msec
9 * * *
10 8.8.8.8 36 msec 40 msec 40 msec