2900 router problems

[sirEgGhEaD]

howdy. i'm fairly new to cisco stuff. i have an entire collection of cisco books, but i'm not too far in them. currently i'm deployed to iraq and one of my warrant officers here is a cisco instructor. i've learned some stuff from him and learned some stuff on my own. i've presented my situation to him, but it's extremely hard to learn from him in the first place because he's a little off the wall. but besides that, i don't know enough.

i'm a systems adminstrator here in iraq and head of the helpdesk. i've been in IT for over 20 years. i have experience, just not when it comes to this.

so enough of the intro. we have the internet here in our rooms that we pay way too much for. there is one cable for my roommate and myself. we sign into a radius server with a 24 hour lease. the ip addresses are obviously assigned via dhcp. the cable from our room runs to a "dumb" switch. from the switch, a cat5 runs to a line of site radio that shoots to their office down the road. from there they host the internet via satellite obviously.

currently i have a linksys wrt300 acting as my router with the antennas disabled. i need to send this router home to my wife, so my whole grand plan for this expensive router is only to catch the outside ip address given by my isp, and run a dhcp server to host my inside lan. on this switch there are, of course, 2 built-in fastethernet interfaces, a t1/dsu port on the serial interface, and something else that says t1 on the voice interface.

i've tried a few things. i've created an access list, configured nat on the 2 fe interfaces, and semi-setup the dhcp. i have a few problems. obviously, i can't pull up a webpage. i don't receive ping from everything, even from the router console. for instance yahoo.com i cannot receive a ping from. even the default gateway for the isp i can't receive a ping from. but i've randomly pinged a few ips here from behind their radio. another problem is i don't know how to get dhcp to push itself (192.168.1.1) as the gateway down to the computer connected to it. i have to set it manually.

a few other problems that don't really regard the internet side of my problem is somehow i must have fat-fingered my password when i initially set it up, so i had to follow the recovery instructions at cisco.com. since then, the router won't hold a password when it reboots. show config shows the password, but it still doesn't hold. another thing is dir doesn't show anything other than a .bin file. i don't remember which one, but it isn't my ios.

i know this is quite a lot for one post, but i would definately appreciate some help.

thomas

[vaisharm]

Please check the last line for 'show version' command. If its 0x2142, the router wont hold the config on reboot. It needs to be changed to 0x2102.

router#conf t

router(config)#config-register 0x2102

router(config)#exit

Now if you do show version the last line would say that the configuration-register would be set to 0x2102 on next reload. The next time when you reload, the config would be there.

Here's what the two config register values mean:

0x2142 - Boot from Flash, *Ignore NVRAM*, Ignore break, Boot into ROM if initial boot fails, Console baud rate 9600

0x2102 - Boot from Flash, Ignore break, Boot into ROM if initial boot fails, Console baud rate 9600

The startup-config is saved in NVRAM, if the config resiter is 0x2142, the NVRAM would be ignored on boot-up and the startup-config would not be loaded into the DRAM.

-Vaibhav

[sirEgGhEaD]

awesome. i'd tried copy run config before. still did no good. changing the config register did. i'd just realized that spremkumar had mentioned that in his first post. but that did it. thanks again.

so any ideas on how to get my router to cooperate with the inet around here? i don't want anything fancy, just operation.

thomas

[vaisharm]

Thomas,

From the configuration I see that you have 192.168.1.1 assigned on Serial0/0. I thought 192.168.1.1 was your DHCP server on the lan? Are you trying to use this router as a DHCP server?

Please answer the following questions to better understand the problem:

- What would this Cisco 2600 router connect to on the outside (for internet) and using which interface?

- If a static IP is not assigned, is the Cisco 2600 successfully receiving the IP from the DHCP server/remote end? If yes, what's the IP?

- Will the remote source provde a dynamic IP to this Cisco 2600? If not, then what's the static IP on the remote/local end?

- Would you connect to this router directly or via switch?

- Are you able to ping the remote device or your public IP from the router?

There are some conflicting/missing details and the above information should be helpful in moving further.

- Vaibhav

[sirEgGhEaD]

yeah i guess i made a mistake. i've typed that config so many times just messing with it. but yes, i would like fa0/1 my internal lan with an address of 192.168.1.1 and of course my machines on that lan with addresses assigned via a dhcp server.

yeah, my router is receiving the outside ip successfully via dhcp. it's a 10.68.3 address. changes a lot. right now it's .28.

i will be connecting to the router via a 2900 series cisco switch.

no, i'm not able to ping much of anything. i was able to ping a 10.68.3 address once. but never .1(the gateway assigned by the isp).

hopefully this answered your questions pretty well. if you need any more info, i'll be happy to provide it. thanks for all the help.

thomas

[sirEgGhEaD]

i figured i'd post a copy of the log i got 2 nights ago when i was messing around with a fresh config and a few pings. 192.168.1.102 is another machine on my internal net.

show run

Building configuration...

Current configuration : 1243 bytes

!

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname InSayneRouter

!

boot-start-marker

boot-end-marker

!

enable password cisco

!

no aaa new-model

!

resource policy

!

no network-clock-participate slot 1

no network-clock-participate wic 0

voice-card 1

!

--More-- ip subnet-zero

ip cef

!

!

no ip dhcp use vrf connected

ip dhcp excluded-address 192.168.1.100 192.168.1.199

!

ip dhcp pool 1

network 192.168.1.0 255.255.255.0

default-router 192.168.1.1

!

!

no ip domain lookup

no ftp-server write-enable

!

!

!

!

!

!

!

!

!

--More-- !

!

!

!

!

controller T1 1/0

framing sf

linecode ami

!

!

!

interface FastEthernet0/0

description DaInet

ip address dhcp

duplex auto

speed auto

!

interface Serial0/0

no ip address

shutdown

no dce-terminal-timing-enable

!

interface FastEthernet0/1

--More-- description MyNet

ip address 192.168.1.1 255.255.255.0

duplex auto

speed auto

!

router rip

version 2

network 10.0.0.0

network 192.168.1.0

no auto-summary

!

ip classless

!

no ip http server

!

snmp-server community public RO

!

!

control-plane

!

!

!

!

--More-- !

!

!

banner motd ^CWelcome To InSayne LAN!

Obey the rules or pay the price!

Enjoy!^C

!

line con 0

line aux 0

line vty 0 4

!

!

end

InSayneRouter#ping 192.168.1.102

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.102, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

InSayneRouter#ping 10.3.68.28

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.3.68.28, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

InSayneRouter#ping 10.3.68.28 1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.3.68.1, timeout is 2 seconds:

UUUU.

Success rate is 0 percent (0/5)

InSayneRouter#ping 10.3.68.1 yahoo.com

Translating "yahoo.com"

% Unrecognized host or address, or protocol not running.

InSayneRouter#ping yahoo.com 80.67.87.23

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 80.67.87.23, timeout is 2 seconds:

UUUUU

Success rate is 0 percent (0/5)

InSayneRouter#

[vaisharm]

Okay, so you have a DHCP server in your lan (192.168.1.x). Let's do this first.

- Connect your machine/laptop directly in place of the router and see if you are able to get on to the internet or ping your DG or try 4.2.2.2. If yes, move to the next step. Else, the problem is not with the router.

- Take out all your existing configuration.

router#wr erase

router#reload (do NOT save the changes)

- Once the router is up, configure fa0/0 to receive IP from the DHCP. After the interface successfully receives the IP, try pinging the gateway, 4.2.2.2 or any other public IP.

If this works, we will then work on the local DHCP part.

Please try the above and let us know the results.

-Vaibhav

[sirEgGhEaD]

ok, i unplugged my inet cable from my linksys wrt 300 and plugged it into fa0/0 of my 2600. then i unplugged my computer from the 2900 switch and plugged it into fa0/1. from there i went to my command prompt and tried a few pings with no success. so i consoled to my router and tried a few pings with the same results. (note that all previous pings posted have been from console) next i wr erase and reload without running initial config. from there, i have a log:

Router>en

Router#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#int fa0/0

Router(config-if)#

%Error opening tftp://10.3.68.1/cisconet.cfg (Timed out)

Router(config-if)#ip address dhcp

Router(config-if)#no shut

Router(config-if)#exit

Router(config)#exit

Router#

*Aug 2 03:47:19.320: %SYS-5-CONFIG_I: Configured from console by console

Router#ping

*Aug 2 03:47:21.828: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0/0 assigned DHCP address 10.3.68.30, mask 255.255.255.0, hostname Router

yahoo.com

Translating "yahoo.com"...domain server (255.255.255.255)

% Unrecognized host or address, or protocol not running.

Router#ping 4.2.2.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:

UU.UU

Success rate is 0 percent (0/5)

Router#ping 80.67.87.23

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 80.67.87.23, timeout is 2 seconds:

U

%Error opening tftp://10.3.68.1/router-confg (Timed out).U.U

Success rate is 0 percent (0/5)

Router#

note that pings are still from the console. a couple of other notes. i plugged my machine and the inet cable back into my linksys and logged into the isp's radius server, then quickly switched cables again and retried the pings with the same results, also trying to ping 10.3.68.1. one other thing is i know the isp is running a cisco 2800.

thanks again for the help

thomas

[vaisharm]

Are we able to ping the same IP addreses when connected using linksys wrt 300? May be ICMP is being blocked somewhere.

Can you get on to the internet using the linksys box?

Also, it looks like its an ethernet cable (RJ45 port) which plugs into your router from the ISP. If that's the case, I am assuming your router is only being used to NAT or lets say as a firewall to segregate your LAN from the internet and no special configuration (like for ISDN/ADSL/DSL) is needed? In this scenario, we should be able to plug-in the computer directly to the inet cable and get on to the internet? Does that work for you?

Also, what credentials are passed on to the radius for access. I din't see anything for radius in your config. Or is it just some web based authentication? Can you ping the radius through or from any of the routers?

-Vaibhav

[vaisharm]

Thomas, the log that you have provided, was it captured after the configuration was erased and router rebooted or before the erase and reboot. The right sequence is :

- erase config

- reload without saving changes

- exit out of initial configuration setup

- enable fa0/0 to receive IP from DHCP.

- after fa0/0 is up/up (show ip int brief), and the IP is assinged, ping the ISP edge and 4.2.2.2

-Vaibhav

[sirEgGhEaD]

yeah, i can get online using my linksys. and also yes, i can plug the inet cable directly to my computer to connect.

the log was taken directly after i erased my config, reloaded my router and exited from the initial config.

the log shows me typing enable, then configing my fa0/0 and trying a ping.

sorry the replies are so slow. my speed drops to below 1k/s during peak hours.

after fa0/0 is up and i get a good ip, i still can't ping anything. also note that i cannot ping 10.68.3.1 even with a good working inet config on my linksys. i can however with my working config ping 80.67.87.23 which is yahoo. but i cannot ping it from my 2600

[vaisharm]

You've mentioned 10.68.3.1 is your DG. Is this a typo? Looks like the correct IP should be in the 10.3.68.0 network. I see this in the following log:

*Aug 2 03:47:21.828: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0/0 assigned DHCP address 10.3.68.30, mask 255.255.255.0, hostname Router

Please try pinging 10.3.68.1 instead.

If you have access to your linksys router GUI, you can find the exact default gateway/DNS, etc.

If 10.3.68.1 is your default gateway (ie. your next hop for internet), include the following command in the config:

ip route 0.0.0.0 0.0.0.0 10.3.68.1

Once you have this in the configuration try pinging 80.67.87.23 or 4.2.2.2

Please include "show ip route' output, if you are still unable to ping.

[sirEgGhEaD]

for your question earlier, the radius login is web-based.

yeah, that was a typo. i'm sick with the flu right now and am prone to more mistakes. :o(

from my linksys running dd-wrt v24

dg is 10.3.68.1

dns1 is 208.67.222.222

dns2 is 208.67.220.220

tried ip route 0.0.0.0 0.0.0.0 10.3.68.1 on my 2600 and pinging the same set of ips again with no luck.

[vaisharm]

This is really strange, we haven't been able to ping anything from this router.

The simplest test would be to ping anything that you are able to ping when you connect your computer directly without any router.

On the 2600, modify the current default route:

router(config)# no ip route 0.0.0.0 0.0.0.0 10.3.68.1

router(config)# ip route 0.0.0.0 0.0.0.0 fa0/0

Can you please forward the following outputs:

show ip route

trace route 10.3.68.1

trace route 80.67.87.23

Use ctrl+shift+6+x to break out of trace if you start seeing * (asterisks).

[sirEgGhEaD]

i'm afraid the traces from my 2600 won't be of much help. but here it is nonetheless. also, once i plugged back into my linksys, i pulled the same traces from my pc and they are posted after the 2600 results.

Router#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.3.68.1 to network 0.0.0.0

10.0.0.0/24 is subnetted, 1 subnets

C 10.3.68.0 is directly connected, FastEthernet0/0

S* 0.0.0.0/0 [1/0] via 10.3.68.1

Router#traceroute 10.3.68.1

Type escape sequence to abort.

Tracing the route to 10.3.68.1

1 * ? ?

2 ? * ?

3 ? ? ?

4 ? ? *

5 ? ? ?

6 * * *

7 * ? ?

8 * ? *

9 * ? *

10

Router#traceroute 80.67.87.23

Type escape sequence to abort.

Tracing the route to 80.67.87.23

1 10.3.68.1 32 msec 101 msec 104 msec

2 ? ? ?

3 ? ? ?

4 * ? ?

5 ? * ?

6 ? ?

Router#

Tracing route to 10.3.68.1 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms InSayneLAN [192.168.1.1]

2 71 ms * * 10.3.68.1

3 * * * Request timed out.

4 * * * Request timed out.

5 * * * Request timed out.

6 ^C

Tracing route to 80.67.87.23 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms InSayneLAN [192.168.1.1]

2 84 ms * 78 ms 10.3.68.1

3 79 ms 77 ms 82 ms 213.255.230.129

4 * * 599 ms gw-lsv.sky-vision.net [217.194.128.37]

5 628 ms 619 ms 635 ms rs1.afl.sky-vision.net [217.194.129.3]

6 614 ms 592 ms 615 ms 217.194.135.142

7 604 ms 601 ms 637 ms 80.120.208.129

8 * 602 ms 661 ms 195.3.118.113

9 587 ms 594 ms 634 ms 195.3.70.106

10 691 ms * 650 ms vix1.interoute.net [193.203.0.106]

11 * 637 ms 642 ms po9-0.vie-per-access-3.interoute.net [212.23.43.

21]

12 670 ms * * gi3-0.fra-006-core-1.interoute.net [212.23.43.9]

13 630 ms * 668 ms po10-0.lon-wal-core-2.interoute.net [212.23.42.1

58]

14 664 ms 639 ms 677 ms 217.118.119.34

15 638 ms 623 ms 642 ms 84.233.153.126

16 646 ms 634 ms 609 ms 80.67.87.23

Trace complete.

also, i have a packet sniffer here that i was running the other night if that would be of some use. i think i remember seeing some rip v2 in there...

[sirEgGhEaD]

i just sifted through the sniff results from the other night and didn't see the rip reference in there. i guess i was mistaken.