cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2545
Views
20
Helpful
22
Replies

Cisco 806 - Beginner questions

bence8810
Level 1
Level 1

Hi,

First please excuse my lack of knowledge, today is my 2nd day ever touching a Cisco equipment.

I got this router, and i want to use it at home for my 8 static IPs. I will have one firewall behind this router, which connects me to the corporate VPN, I will have another wireless router behind the cisco for my home network, and a few servers, mail www, etc. All these on a different static IP.

I established a Console connection to the 806, and I am able to log in, etc. I believe that Factory Default would enable DHCP service, and allow me to manage through the Web on 10.10.10.1 . Now, when I reset it to factory (I hope I did), I wasnt able to connect through the web, so went back to the console, and I see that the setting is completely blank, no default settings applied. How can I get it back to real factory default? Being a beginner, a web interface would help me a lot I believe.

Through the console I managed to set up IP addresses for both interfaces, and DHCP on eth0, and I am able to reach the router via Web, but it isnt working. It loads, asks a username and password. I supply the password I gave with "enable secret" command, and it goes on, then says router is not connected, check cables, etc. I am able to see the Cisco opening site, so I am 100% sure the connection is live, however it wouldnt let me do anything there. Also I noted that when I connect via web, it asks for username and password, although I only have a password I think.

I am sure my post is full of nonsense, again, please excuse this for me.

Thanks a lot for any help,

Ben

22 Replies 22

Ben,

The CLI on Cisco routers is definetely more powerful and the best mode for configuration and troubleshooting. The GUI is much newer and does not have the same level of control/capabilities as the CLI.

Please provide the complete filename for the IOS image that you are using and I can check if it has firewall feature.

-Vaibhav

Hi

This is what I currently have:

Router>enable

Router#show flash

System flash directory:

File Length Name/status

1 2678124 c806-y6-mz.122-2.XK.bin

[2678188 bytes used, 5710420 available, 8388608 total]

8192K bytes of processor board System flash (Read/Write)

Router#

The memory of the router:

CISCO C806 (MPC855T) processor (revision 0x202) with 14848K/1536K bytes of memor

y.

128K bytes of non-volatile configuration memory.

8192K bytes of processor board System flash (Read/Write)

2048K bytes of processor board Web flash (Read/Write)

I dont know what IOS will fit, but this is what I am looking for if possible:

I would like to use it for my 8 static IPs, one for the router, one for a VPN equipment (Juniper Netscreen), one for my WiFi router and the rest for some servers. I hope that this Cisco will take care of the routing for the 8 IPs.

I would also like a firewall feature, where I can open and or block ports to specific static IPs from the 8 I have, and also if possible, to set up a VPN to my home. VPN can be missed if have to.

Do you think this is possible? If so, with which IOS?

Thanks for your help,

Ben

This image has FW features and can fit in the memory you have:

c806-oy6-mz.12.2-11.T11.bin

If you want the latest image ( see my other post), then you have to upgrade your RAM to 32MB.

Hi

I would like to download it, I already have the TFTP server. Where do I find it? I am on Cisco's site, but unable to locate the same IOS. Do I need a logon to Cisco? I think I am not registered, thus dont have a login.

Thanks

Ben

You'll find it here:

http://www.cisco.com/public/sw-center/

But you need special login priviliges to be able to download it.

Hi

Thanks, yes, that I dont have, I mean the login. So I guess I stay with current firmware.

I got the router home, here I have an ADSL line. I configured the router with PPPOE login, or at least I think so. The IP address is set to negotiated, and when I connect with console, I do get the IP address, which is good. However, I am unable to ping anything outside. So I guess it isnt fully working. My goal is to have the first IP in my pool of 8 (6 useable), and the rest can be obtained from the router without DHCP.

This is what my config looks like, if you could suggest a change, I would appreciate any help. I am also lost in terms of the PPP authentication, but i guess since I get the ISPs IP, it might be good?

p.s. In the config you will see many incorrect things, like ETH0 is not yet configured, but I will do that after ETH1 is up and running. Also there are some entries commented out, I left them as they might be useful later.

Thanks

Ben

!

version 12.2

no parser cache

no service single-slot-reload-enable

no service pad

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname router

!

logging buffered 4096 informational

!

ip subnet-zero

!

!!!!!!!!!!!!! This is the ISP's DNS IP addresses

ip name-server isp dns

ip name-server isp dns

!!!!!!!!!!!!!

!

!!!!!!!!!!!!! Configuring the router as DHCP server

!ip dhcp excluded-address 10.10.10.1

!

!ip dhcp pool hubud1bfrankpool01

!network 192.168.1.0 255.255.255.0

!default-router someip

!dns-server 1.1.1.2 1.1.1.3

!dns-server 192.168.1.254

!!!!!!!!!!!!!

!

!no ip dhcp-client network-discovery

vpdn enable

!

vpdn-group 1

request-dialin

protocol pppoe

!

!

!

!!!!!!!!!!!! This is the LAN side

interface Ethernet0

!!!!!!!!!!!! The IP address for the router

ip address 192.168.1.254 255.255.255.0

!!!!!!!!!!!!

ip nat inside

ip tcp adjust-mss 1452

no cdp enable

hold-queue 32 in

!

!!!!!!!!!!!! Note that e1 has no IP address

interface Ethernet1

no ip address

!!!!!!!!!!!!

pppoe enable

pppoe-client dial-pool-number 1

no cdp enable

!

!!!!!!!!!!!! The ISP's given IP address will be configured via d1

interface Dialer1

ip address negotiated

!!!!!!!!!!

ip mtu 1492

ip nat outside

encapsulation ppp

ip tcp adjust-mss 1452

dialer pool 1

dialer-group 1

no cdp enable

ppp authentication chap pap callin

!ppp chap hostname *********

!ppp chap password 7 *******

ppp pap sent-username mylogin@tvnet.hu password 0 mypassword

ppp ipcp route default

!

ip nat inside source list 102 interface Dialer1 overload

!

!!!!!!!!! This is the important part:

!!!!!!!!! The server is an FTP running generic FTP software

!!!!!!!!! The FTP server is in inside network using IP address 10.10.10.2

!!!!!!!!! This configuration uses PAT (Port Address Translation) which deploys

!!!!!!!!! port 20 and 21 (standard ports for FTP)

!!!!!!!!!

!!!!!!!!! The "ip nat inside source static" is the actual PAT command for running servers with Cisco router

!!!!!!!!!

!!!!!!!!! Note that the word "extendable" is automatically added by the router

!!!!!!!!! You don't have to enter the word when you configure the router

!!!!!!!!!

!ip nat inside source static tcp 10.10.10.2 20 1.0.0.13 20 extendable

!ip nat inside source static tcp 10.10.10.2 21 1.0.0.13 21 extendable

ip classless

!!!!!!!!! This command is to make the router configurable using web browser

!!!!!!!!! such as Internet Explorer or Netscape, which is totally optional.

!!!!!!!!! You can turn the feature off by entering "no ip http server"

!!!!!!!!!

ip http server

!!!!!!!!!

!

!access-list 102 permit ip 10.10.10.0 0.0.0.255 any

!dialer-list 1 protocol ip permit

no cdp run

!

line con 0

exec-timeout 120 0

stopbits 1

line vty 0 4

exec-timeout 0 0

login local

length 0

!

scheduler max-task-time 5000

end

Hi

I hope everyone had a good weekend.

I am also getting closer to completion. I now know there is no way for me to upgrade the IOS, as I have no account at Cisco, so I just try to live with no firewall support for now.

The thing I am stuck on, besides that I dont have a working network behind my router, is that I would like to take use of the 8 IPs I have. First, I need one IP on the wan side. The second IP will be on the LAN side I imagine, the third IP will be my corp firewall, 4th IP my home wireless router, and the rest will be used at my servers.

How do I configure this router to actualy take control of this 8 IPs?

Thanks

Ben

The web interface in Cisco router is not the best. I guess most net admins use the CLI.

The fact that firewall features are sipported or not is dependents about the feature set you have loaded in the router. What version do you have loaded? Use "show version" and paste the output here. This one supports Firewall features:

c806-o3sy6-mz.12.3-14.T7.bin

And this one does not: c806-sy6-mz.12.3-14.T7.bin