02-22-2013 08:49 AM - edited 03-07-2019 11:53 AM
Hi, I’m somewhat new to Cisco routers this is my first attempt at getting one to work. I work in an environment with multiple locations, most are using the Cisco Model: 2911/K9 or the Model: 2921/K9 routers running IOS Version 15.0.
We just added a new small office and all I had in the way of a router was a Cisco C1841-IPBASE-M router, running IOS Version 12.4.
When setting up the C1841 I kept the configuration pretty much the same as the others allowing for the differences in the OS.
I can remote into the 0/0 (outside port) from over the network, I can ping to that port without fail, but I can’t send or receive traffic from the 0/1 (inside port).
I have checked the interface configuration, the access list, and the eigrp. Still, nothing seems to be going through.
Here’s a copy of the configuration…
Thanks for any help that can resolve this problem.
Current configuration : 2894 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname SMALL_OFFICE-R1
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$/qW7$NQYMxelTOP8DWTFbiwg0I0
!
aaa new-model
!
!
aaa authentication login default group radius local
aaa authentication login clientauth local
aaa authentication enable default group tacacs+ enable
aaa authorization console
aaa authorization exec default group radius local
aaa authorization network clientauth local
aaa accounting exec default start-stop group tacacs+
!
aaa session-id common
!
resource policy
!
clock timezone EST -5
clock summer-time EST recurring 2 Sun Mar 2:00 3 Sun Nov 2:00
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
!
!
no ip domain lookup
!
!
key chain EIGRP
key 1
key-string qW7$NQASxeIFOP8DboFbiwg0I0
username **USER01** privilege 15 secret 5 $1$z.dh$7iPDPg9QcHriJs6wZT5VC.
username **USER02** privilege 15 secret 5 $1$Mf2C$pv4MRjF1vLzUC/dnPfPvK.
!
!
!
interface FastEthernet0/0
description outside (WAN)
ip address 10.20.11.15 255.255.255.0
ip authentication mode eigrp 10 md5
ip authentication key-chain eigrp 10 EIGRP
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
description inside (LAN)
ip address 172.16.214.1 255.255.255.0
ip helper-address 192.168.20.15
ip authentication mode eigrp 10 md5
ip authentication key-chain eigrp 10 EIGRP
duplex auto
speed auto
!
router eigrp 10
passive-interface default
network 10.20.10.0 0.0.0.255
network 10.20.11.0 0.0.0.255
network 172.16.201.0 0.0.0.255
network 172.16.214.0 0.0.0.255
auto-summary
eigrp router-id 172.16.214.1
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.20.11.1
!
no ip http server
ip http access-class 23
ip http authentication local
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip radius source-interface FastEthernet0/1
access-list 23 permit 172.16.0.0 0.0.255.255
access-list 23 permit 172.16.200.0 0.0.0.255
access-list 23 permit 172.16.201.0 0.0.0.255
access-list 23 permit 10.20.10.0 0.0.0.255
access-list 23 permit 10.20.11.0 0.0.0.255
access-list 23 permit 172.16.214.0 0.0.0.255
snmp-server community public RO
!
control-plane
!
line con 0
line aux 0
line vty 0 4
access-class 23 in
transport input telnet
line vty 5 15
access-class 23 in
transport input telnet
!
end
02-22-2013 12:42 PM
Hi,
can you get rid of these 2 LINEs in bold:
router eigrp 10
passive-interface default
network 10.20.10.0 0.0.0.255
network 10.20.11.0 0.0.0.255
network 172.16.201.0 0.0.0.255
network 172.16.214.0 0.0.0.255
auto-summary
eigrp router-id 172.16.214.1
Regards
Alain
Don't forget to rate helpful posts.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide