Single WAN port assign 3 subnet Public IPs on Cisco 1941

howardwen · ‎01-19-2017

hello all,

I have config a Cisco 1941 with 1 WAN port assign 3 Public subnet IP, so where is wrong? please correct it.

\thanks very much!

!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname cipp
!
!
enable password 123
!
!
ip dhcp excluded-address 192.168.23.81 192.168.23.220
!
ip dhcp pool cipp
network 192.168.23.0 255.255.255.0
default-router 192.168.23.254
dns-server 192.168.23.53 192.168.23.54
lease 0 2
!
!
!
ip domain name cipp.net
ip name-server 192.168.23.54
ip name-server 69.71.48.70
ip cef
no ipv6 cef
!
!
!
!
license udi pid CISCO1941/K9 sn FTX1524D402
!
!
!
!
!
username cipp privilege 15 secret 4 123
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
ip address 192.168.23.254 255.255.255.0
ip nat inside
duplex auto
speed auto
ip virtual-reassembly in
!
interface GigabitEthernet0/1
ip address 75.44.192.36 255.255.255.248
ip nat outside
duplex auto
speed auto
ip virtual-reassembly in
!
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 192.168.23.0
no auto-summary
!
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip dns server
ip nat pool 75 75.44.192.36 75.44.192.38 netmask 255.255.255.248
ip nat pool 76 76.44.192.48 76.44.192.62 netmask 255.255.255.240
ip nat pool 77 77.44.192.16 77.44.192.31 netmask 255.255.255.240
ip nat inside source list 1 pool 75
ip nat inside source list 1 pool 76
ip nat inside source list 1 pool 77
ip route 0.0.0.0 0.0.0.0 75.44.192.33
ip route 172.16.19.0 255.255.255.0 192.168.23.196
ip route 172.16.23.0 255.255.255.0 192.168.23.254
ip route 192.168.23.0 255.255.255.0 172.16.23.254
ip route 192.168.33.0 255.255.255.0 192.168.23.54
ip classless
!
ip flow-export version 9
!
!
access-list 1 permit 0.0.0.0 255.255.255.0
access-list 1 remark INSIDE_IF=GigabitEthernet0/0
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 192.168.23.0 0.0.0.255
access-list 23 permit 192.168.23.0 0.0.0.255
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
password 123
login
transport input all
!
!
!
end

Karsten Iwen · ‎01-19-2017

Has the ISP told you to configure the two additional networks as you did? At least this is a quite uncommon way to implement it.

If not, just remove the subinterfaces. Typically, the ISP-side is configured in a way that the additional networks can be used in your NAT without any additional interfaces.

And don't configure your default route with the interface. Use the ip that the ISP told you as the gateway.

howardwen · ‎01-19-2017

Thank you Karsten,

before M0N0wall configure these 3 public subnet. because 3 public subnet just 1 cable to my Router.

and now change router M0N0wall to Cisco 1941, so I configured 2 subinterfaces.

So I must remove subinterfaces?