05-18-2013 01:27 PM - edited 03-07-2019 01:26 PM
HOME#sho run
Building configuration...
Current configuration : 5558 bytes
!
! Last configuration change at 20:14:39 UTC Sat May 18 2013 by cisco
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname HOME
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$Z.d5$ivzLQJaB6Dp.9n9NOjGhG/
!
no aaa new-model
!
!
!
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-1190003239
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1190003239
revocation-check none
rsakeypair TP-self-signed-1190003239
!
!
crypto pki certificate chain TP-self-signed-1190003239
certificate self-signed 03
3082024B 308201B4 A0030201 02020103 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31313930 30303332 3339301E 170D3133 30353138 32303037
30325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 31393030
30333233 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C002 80BBF151 E095E469 AA7DBB18 2A9E3CC2 4AC223F6 ABE0AF49 876C1203
65D0E246 786F174D E5B7897A 44C5755A 2571E58A 184A6C62 DD992A2A D8A24878
25A8D3C3 03F5D3C2 522EC8BB 302B0CCD 2945087A 7AF01418 D0056679 6F64DB4A
BE2D5DA1 106CD03A 83B422A2 3CCBAE88 F2413123 12269390 6949DFE0 411118E7
8F210203 010001A3 73307130 0F060355 1D130101 FF040530 030101FF 301E0603
551D1104 17301582 13484F4D 452E796F 7572646F 6D61696E 2E636F6D 301F0603
551D2304 18301680 143D2D85 4D1203F5 0D77F4AB C5B61CEA F6C922F4 DF301D06
03551D0E 04160414 3D2D854D 1203F50D 77F4ABC5 B61CEAF6 C922F4DF 300D0609
2A864886 F70D0101 04050003 81810087 5C65BAE3 7BB26FA2 F10124B4 3CFF193D
2AEAF266 33F39B33 62C90404 201CA05E FEA0B579 CCF92971 D2BAE9C1 DA8C36CF
F7A568CD 2FC4B2D0 C57930F4 6A76DA3C CD75E742 DC6CDDF0 B777B502 31DF1DE7
288FDED5 6D529EC5 9D508568 8299D89D 8D683F20 0854955B 92929F19 5150B0A9
1B60D10B 7E96849C 7A97D06A 2ED962
quit
ip source-route
!
!
ip dhcp excluded-address 20.20.20.1 255.255.255.0
ip dhcp excluded-address 20.20.20.1 20.20.20.10
!
ip dhcp pool LAN
import all
network 20.20.20.0 255.255.255.0
default-router 20.20.20.1
dns-server 192.168.1.1
lease 0 2
!
ip dhcp pool LAN2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 192.168.1.1
domain-name www.google.com
!
!
ip cef
no ip domain lookup
ip domain name yourdomain.com
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO881-SEC-K9 sn FCZ1516933C
!
!
username admin privilege 15 password 0 cisco
!
!
!
!
!
!
!
!
!
interface FastEthernet0
switchport access vlan 3
!
!
interface FastEthernet1
!
!
interface FastEthernet2
!
!
interface FastEthernet3
!
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
!
interface Vlan2
description LAN GATEWAY
ip address 20.20.20.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
!
!
interface Vlan3
description LAN3
ip address 192.168.2.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip nat enable
ip virtual-reassembly
ip tcp adjust-mss 1452
!
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
!
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 23 permit 20.20.20.0 0.0.0.255
no cdp run
!
!
!
!
!
control-plane
!
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you
want to use.
-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.
YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE
PUBLICLY-KNOWN CREDENTIALS
Here are the Cisco IOS commands.
username <myuser> privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want
to use.
IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL
NOT BE ABLE TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.
For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
password cisco
login local
transport input telnet ssh
!
scheduler max-task-time 5000
05-18-2013 02:11 PM
Can any one help to me solve this issuee please
05-18-2013 02:14 PM
Can you delete this statement
ip dhcp excluded-address 20.20.20.1 255.255.255.0
and test again?
HTH
05-18-2013 02:28 PM
Hello,
the dhcp exclude list ist wrong. It has to look like this
ip dhcp excluded-address {FirstAddrOfTheRangeWhichToBeExcluded} {LastAddrOfTheRangeToShouldBeExcluded}
This on is correct
ip dhcp excluded-address 20.20.20.1 20.20.20.10
You exclude the address 20.20.20.1 till 20.20.20.10 and because of his the address 20.20.20.11 till 20.20.20.254 will be offered by the DHCP server.
So as Reza wrote, you have to remove the configuration line ip dhcp excluded-address 20.20.20.1 255.255.255.0 by using no ip dhcp excluded-address 20.20.20.1 255.255.255.0. Than should the DHCP Server work. Also you should setup an exclude range for your 192.168.2.0 /24 network.
Kind regards
Kai
05-18-2013 02:31 PM
if i just exclude my default int vlan ip add then it will work or not
05-18-2013 02:49 PM
It should work, you can keep this statement. This exclude the first 10 IPs.
ip dhcp excluded-address 20.20.20.1 20.20.20.10
just remove the one I posted before and try again
HTH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide