02-21-2007 03:53 AM - edited 03-05-2019 02:29 PM
Hi,
First please excuse my lack of knowledge, today is my 2nd day ever touching a Cisco equipment.
I got this router, and i want to use it at home for my 8 static IPs. I will have one firewall behind this router, which connects me to the corporate VPN, I will have another wireless router behind the cisco for my home network, and a few servers, mail www, etc. All these on a different static IP.
I established a Console connection to the 806, and I am able to log in, etc. I believe that Factory Default would enable DHCP service, and allow me to manage through the Web on 10.10.10.1 . Now, when I reset it to factory (I hope I did), I wasnt able to connect through the web, so went back to the console, and I see that the setting is completely blank, no default settings applied. How can I get it back to real factory default? Being a beginner, a web interface would help me a lot I believe.
Through the console I managed to set up IP addresses for both interfaces, and DHCP on eth0, and I am able to reach the router via Web, but it isnt working. It loads, asks a username and password. I supply the password I gave with "enable secret" command, and it goes on, then says router is not connected, check cables, etc. I am able to see the Cisco opening site, so I am 100% sure the connection is live, however it wouldnt let me do anything there. Also I noted that when I connect via web, it asks for username and password, although I only have a password I think.
I am sure my post is full of nonsense, again, please excuse this for me.
Thanks a lot for any help,
Ben
02-23-2007 01:20 AM
Ben,
The CLI on Cisco routers is definetely more powerful and the best mode for configuration and troubleshooting. The GUI is much newer and does not have the same level of control/capabilities as the CLI.
Please provide the complete filename for the IOS image that you are using and I can check if it has firewall feature.
-Vaibhav
02-23-2007 01:38 AM
Hi
This is what I currently have:
Router>enable
Router#show flash
System flash directory:
File Length Name/status
1 2678124 c806-y6-mz.122-2.XK.bin
[2678188 bytes used, 5710420 available, 8388608 total]
8192K bytes of processor board System flash (Read/Write)
Router#
The memory of the router:
CISCO C806 (MPC855T) processor (revision 0x202) with 14848K/1536K bytes of memor
y.
128K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash (Read/Write)
2048K bytes of processor board Web flash (Read/Write)
I dont know what IOS will fit, but this is what I am looking for if possible:
I would like to use it for my 8 static IPs, one for the router, one for a VPN equipment (Juniper Netscreen), one for my WiFi router and the rest for some servers. I hope that this Cisco will take care of the routing for the 8 IPs.
I would also like a firewall feature, where I can open and or block ports to specific static IPs from the 8 I have, and also if possible, to set up a VPN to my home. VPN can be missed if have to.
Do you think this is possible? If so, with which IOS?
Thanks for your help,
Ben
02-23-2007 02:05 AM
This image has FW features and can fit in the memory you have:
c806-oy6-mz.12.2-11.T11.bin
If you want the latest image ( see my other post), then you have to upgrade your RAM to 32MB.
02-23-2007 07:45 AM
Hi
I would like to download it, I already have the TFTP server. Where do I find it? I am on Cisco's site, but unable to locate the same IOS. Do I need a logon to Cisco? I think I am not registered, thus dont have a login.
Thanks
Ben
02-23-2007 09:38 AM
You'll find it here:
http://www.cisco.com/public/sw-center/
But you need special login priviliges to be able to download it.
02-23-2007 11:14 PM
Hi
Thanks, yes, that I dont have, I mean the login. So I guess I stay with current firmware.
I got the router home, here I have an ADSL line. I configured the router with PPPOE login, or at least I think so. The IP address is set to negotiated, and when I connect with console, I do get the IP address, which is good. However, I am unable to ping anything outside. So I guess it isnt fully working. My goal is to have the first IP in my pool of 8 (6 useable), and the rest can be obtained from the router without DHCP.
This is what my config looks like, if you could suggest a change, I would appreciate any help. I am also lost in terms of the PPP authentication, but i guess since I get the ISPs IP, it might be good?
p.s. In the config you will see many incorrect things, like ETH0 is not yet configured, but I will do that after ETH1 is up and running. Also there are some entries commented out, I left them as they might be useful later.
Thanks
Ben
!
version 12.2
no parser cache
no service single-slot-reload-enable
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname router
!
logging buffered 4096 informational
!
ip subnet-zero
!
!!!!!!!!!!!!! This is the ISP's DNS IP addresses
ip name-server isp dns
ip name-server isp dns
!!!!!!!!!!!!!
!
!!!!!!!!!!!!! Configuring the router as DHCP server
!ip dhcp excluded-address 10.10.10.1
!
!ip dhcp pool hubud1bfrankpool01
!network 192.168.1.0 255.255.255.0
!default-router someip
!dns-server 1.1.1.2 1.1.1.3
!dns-server 192.168.1.254
!!!!!!!!!!!!!
!
!no ip dhcp-client network-discovery
vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
!
!
!
!!!!!!!!!!!! This is the LAN side
interface Ethernet0
!!!!!!!!!!!! The IP address for the router
ip address 192.168.1.254 255.255.255.0
!!!!!!!!!!!!
ip nat inside
ip tcp adjust-mss 1452
no cdp enable
hold-queue 32 in
!
!!!!!!!!!!!! Note that e1 has no IP address
interface Ethernet1
no ip address
!!!!!!!!!!!!
pppoe enable
pppoe-client dial-pool-number 1
no cdp enable
!
!!!!!!!!!!!! The ISP's given IP address will be configured via d1
interface Dialer1
ip address negotiated
!!!!!!!!!!
ip mtu 1492
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
!ppp chap hostname *********
!ppp chap password 7 *******
ppp pap sent-username mylogin@tvnet.hu password 0 mypassword
ppp ipcp route default
!
ip nat inside source list 102 interface Dialer1 overload
!
!!!!!!!!! This is the important part:
!!!!!!!!! The server is an FTP running generic FTP software
!!!!!!!!! The FTP server is in inside network using IP address 10.10.10.2
!!!!!!!!! This configuration uses PAT (Port Address Translation) which deploys
!!!!!!!!! port 20 and 21 (standard ports for FTP)
!!!!!!!!!
!!!!!!!!! The "ip nat inside source static" is the actual PAT command for running servers with Cisco router
!!!!!!!!!
!!!!!!!!! Note that the word "extendable" is automatically added by the router
!!!!!!!!! You don't have to enter the word when you configure the router
!!!!!!!!!
!ip nat inside source static tcp 10.10.10.2 20 1.0.0.13 20 extendable
!ip nat inside source static tcp 10.10.10.2 21 1.0.0.13 21 extendable
ip classless
!!!!!!!!! This command is to make the router configurable using web browser
!!!!!!!!! such as Internet Explorer or Netscape, which is totally optional.
!!!!!!!!! You can turn the feature off by entering "no ip http server"
!!!!!!!!!
ip http server
!!!!!!!!!
!
!access-list 102 permit ip 10.10.10.0 0.0.0.255 any
!dialer-list 1 protocol ip permit
no cdp run
!
line con 0
exec-timeout 120 0
stopbits 1
line vty 0 4
exec-timeout 0 0
login local
length 0
!
scheduler max-task-time 5000
end
02-25-2007 12:15 PM
Hi
I hope everyone had a good weekend.
I am also getting closer to completion. I now know there is no way for me to upgrade the IOS, as I have no account at Cisco, so I just try to live with no firewall support for now.
The thing I am stuck on, besides that I dont have a working network behind my router, is that I would like to take use of the 8 IPs I have. First, I need one IP on the wan side. The second IP will be on the LAN side I imagine, the third IP will be my corp firewall, 4th IP my home wireless router, and the rest will be used at my servers.
How do I configure this router to actualy take control of this 8 IPs?
Thanks
Ben
02-23-2007 01:23 AM
The web interface in Cisco router is not the best. I guess most net admins use the CLI.
The fact that firewall features are sipported or not is dependents about the feature set you have loaded in the router. What version do you have loaded? Use "show version" and paste the output here. This one supports Firewall features:
c806-o3sy6-mz.12.3-14.T7.bin
And this one does not: c806-sy6-mz.12.3-14.T7.bin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide