02-01-2013 08:14 PM - edited 03-07-2019 11:27 AM
Trying to configure an 891-W on my home network.
Basic TW cable modem ---> 891-W with DHCP
I have done the following and are getting an IP address but no internet.
I have FE8 set as DHCP and VLAN1 as 192.168.1.1 255.255.255.0
I originally thought that "WAN GE 0" would be connected via my modem but I had no luck there either so I set FE8 as WAN?
Building configuration...
Current configuration : 2907 bytes
!
! No configuration change since last restart
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 891
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$NEo3$vKhriHJTWWvuUH91t/4T2/
enable password
!
no aaa new-model
!
service-module wlan-ap 0 bootimage autonomous
crypto pki token default removal timeout 0
!
!
--More-- ip source-route
no ip routing
!
!
!
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool HOME_CLIENTS
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
!
!
no ip cef
no ipv6 cef
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
--More-- !
!
license udi pid CISCO891W-AGN-A-K9 sn FTX163086U5
!
!
username cisco4 privilege 15 secret 4 drWavSXMI9Ae0nTpOhq3JAvEAKC6rTmASLdwwVrkjJ.
username cisco1 privilege 15 secret 4 gMj8cDXfU6CzFI9r1WoD5G6GTI5KwVY2O2lU2DSTP4c
username cisco2 privilege 15 secret 4 6yU7cyZFSWW4QGtgFIB/eBlLIAvZBlES6kZS.IBYhO6
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
no ip address
--More-- !
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
!
interface FastEthernet5
no ip address
!
interface FastEthernet6
no ip address
!
interface FastEthernet7
no ip address
!
interface FastEthernet8
ip address dhcp
--More-- ip nat outside
ip virtual-reassembly in
no ip route-cache
duplex half
speed auto
!
interface GigabitEthernet0
ip address dhcp
ip nat outside
ip virtual-reassembly in
no ip route-cache
duplex auto
speed auto
!
interface wlan-ap0
description Service module interface to manage the embedded AP
no ip address
no ip route-cache
arp timeout 0
!
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
no ip address
!
--More-- interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
no ip route-cache
!
interface Async1
no ip address
encapsulation slip
no ip route-cache
!
ip forward-protocol nd
!
!
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 101 interface Vlan1 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 FastEthernet8
!
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
!
--More-- !
!
!
!
snmp-server community public RO
!
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
line con 0
line 1
modem InOut
stopbits 1
speed 115200
flowcontrol hardware
line 2
--More-- no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin udptn ssh
line aux 0
line vty 0 4
privilege level 15
password 110fall2014
login local
transport input telnet
transport output telnet
line vty 5 15
privilege level 15
login local
transport input telnet
transport output telnet
!
end
891#
02-02-2013 11:38 AM
02-02-2013 12:00 PM
Hi,
can you ping these dns servers from the router? if so can you do it from the PC ?
if this is not the case can you clear ip nat translation * then try again and post output from sh ip nat translation | i x.x.x.x
where x.x.x.x is the dns server ip address.
Regards
Alain
Don't forget to rate helpful posts.
02-02-2013 12:11 PM
I was able to ping the DNS address (209.18.47.61) from the router before and after running:
clear ip nat translation *
I then ran:
sh ip nat translation | i 209.18.47.61 (I think this is what you asked for?)
But nothing happened, it just went back to the 891# prompt.
So here is my config as of now:
show run
Building configuration...
Current configuration : 2884 bytes
!
! No configuration change since last restart
! NVRAM config last updated at 20:04:48 UTC Sat Feb 2 2013
! NVRAM config last updated at 20:04:48 UTC Sat Feb 2 2013
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 891
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$NEo3$vKhriHJTWWvuUH91t/4T2/
enable password
!
no aaa new-model
!
service-module wlan-ap 0 bootimage autonomous
crypto pki token default removal timeout 0
--More-- !
!
ip source-route
!
!
!
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool HOME_CLIENTS
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
!
!
ip cef
no ipv6 cef
!
!
!
!
multilink bundle-name authenticated
!
!
!
--More-- !
!
!
license udi pid CISCO891W-AGN-A-K9 sn FTX163086U5
!
!
username cisco4 privilege 15 secret 4 drWavSXMI9Ae0nTpOhq3JAvEAKC6rTmASLdwwVrkjJ.
username cisco1 privilege 15 secret 4 gMj8cDXfU6CzFI9r1WoD5G6GTI5KwVY2O2lU2DSTP4c
username cisco2 privilege 15 secret 4 6yU7cyZFSWW4QGtgFIB/eBlLIAvZBlES6kZS.IBYhO6
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
--More-- no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
!
interface FastEthernet5
no ip address
!
interface FastEthernet6
no ip address
!
interface FastEthernet7
no ip address
!
interface FastEthernet8
--More-- ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex half
speed auto
!
interface GigabitEthernet0
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface wlan-ap0
description Service module interface to manage the embedded AP
no ip address
arp timeout 0
!
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
no ip address
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
--More-- ip nat inside
ip virtual-reassembly in
!
interface Async1
no ip address
encapsulation slip
!
ip forward-protocol nd
!
!
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface GigabitEthernet0 overload
!
access-list 1 permit 192.168.1.0 0.0.0.225
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
!
!
!
!
!
snmp-server community public RO
--More-- !
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
line con 0
line 1
modem InOut
stopbits 1
speed 115200
flowcontrol hardware
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin udptn ssh
--More-- line aux 0
line vty 0 4
privilege level 15
password
login local
transport input telnet
transport output telnet
line vty 5 15
privilege level 15
login local
transport input telnet
transport output telnet
!
end
891#
02-02-2013 01:26 PM
Hi,
the sh ip nat translation must be done for traffic originated from the PC not from the router.
Can you do this:
int f8
no ip nat out
do wr
do reload
then when the router is rebooted try to ping this dns server from the PC and if it doesn't work then do the sh ip nat trans | i x.x.x.x that I asked before
Regards
Alain
Don't forget to rate helpful posts.
02-02-2013 01:43 PM
Ok I did as you suggested and after reload I tried to ping DNS from PC but it timed out, I then ran command again but again it brought me back to prompt.
I also noticed ( which I'm sure is normal now because if the commands I've been running) that gigabitethernet0 DHCP is now an outside ip (67.255.x.x).
Sent from Cisco Technical Support iPhone App
02-02-2013 02:49 PM
Hi,
can you ping this 67.255.x.x from PC ?
do a sh ip route static and try to ping the next-hop( via x.x.x.x) from the PC, what is it saying ?
Regards
Alain
Don't forget to rate helpful posts.
02-02-2013 02:58 PM
OK I can ping the 67.255.x.x from the PC, I then ran that command and it gave me that "via" address which I could not ping from the PC, it just times out.
"Gateway of last resort is 67.255.x.x to network 0.0.0.0"
"0.0.0.0 254/0 via 67.255.x.x"
"10.0.0.0/32 is subnetted 1 subnets"
"10.227.x.x 254/0 via 67.255.x.x gigabitethernet0"
Thanks for all your help btw.
Sent from Cisco Technical Support iPhone App
02-03-2013 06:43 AM
Perhaps I should revert to factory settings and start from scratch? This just doesnt make any sense to me.
02-04-2013 12:04 PM
Is it possible I have to configure the dialer interface? I know this pertains to other but similar divices.
If I use this guide here couldn't I just substitute "interface FastEthernet 4" with "interface FastEthernet 8"?
I can't believe it's that hard to get a basic config setup here?
02-04-2013 10:14 PM
You should not need to configure a dialer interface if your connection (DHCP cable modem) is as you described.
What router did you use prior to the 891? Does it still work? How did you configure it?
Does Time Warner operate some sort of MAC recognition of the cable modem and/or the device that is behind the cable modem? If it does, have you switched off the cable modem for a few minutes to try to reset this?
02-05-2013 05:49 AM
I have used several "home" routers and still do (Linksys), as for TW and MAC recognition; I highly doubt it but not 100% sure, I have cycled that modem countless times since starting this project.
I'm gonna reset router and start from scratch this evening using that article mentioned above as a reference.
02-05-2013 03:17 PM
Well I am all set, I simply added 8.8.8.8 (as a test) for the DNS and it worked great. Was this overlooked in my 4 or 5 configs I posted? I never added a DNS for whatever reason.
ip dhcp pool vlan1pool
dns-server 8.8.8.8
02-05-2013 09:54 PM
Quite possibly at the end. However this wasn't the only problem with your original config (no routing, incorrect NAT configuration) and the screenshot you posted of ipconfig /all displayed DNS server addresses on your PC which only added to the confusion
02-06-2013 05:23 AM
I appreciate all the help from both of you, I'm sure it can be frustrating working with someone who has minimal knowledge of such things.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide