wic 4esw in 1721 trying to configure

[randy kruen]

                   Hi. I am not a Cisco pro, only a user. I have a pair of 1721's, 1 is connected to the internet, the other is connected to the first via T1 (with repeaters, about 30 miles). It also has a wic 4esw card in it, and I am trying to configure the ports on that card to route to the internet. I understand that I have to configure a vlan for the ports on that card, I have, and also made the ports hand out dhcp. When connected to a port on that card, though, I can only ping through to the ip address of the T1 card 192.168.2.1, as well as the vlan ip of 192.168.3.1. I seem to be missing something. Sorry if this is a stupid question. See a running config. Serial0 is my T1 access, The serial port on the far 1721 is ip 192.168.2.2. Fastethernet0 connects through, no problem. Thanks for your time!

Randy

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname C1721-Home

!

boot-start-marker

boot-end-marker

!

enable secret xxx

enable password xxx

!

no aaa new-model

memory-size iomem 25

clock timezone EST -5

clock summer-time EDT recurring

mmi polling-interval 60

no mmi auto-configure

no mmi pvc

mmi snmp-timeout 180

!

no ip dhcp use vrf connected

!

ip dhcp pool vlan1

   network 192.168.3.0 255.255.255.0

   default-router 192.168.2.1

!

ip cef

!

username xxx nopassword

!

interface FastEthernet0

ip address 192.168.1.1 255.255.255.0

ip helper-address 192.168.2.2

speed 100

full-duplex

!

interface FastEthernet1

duplex full

speed 100

!

interface FastEthernet2

duplex full

speed 100

!

interface FastEthernet3

duplex full

speed 100

!

interface FastEthernet4

duplex full

speed 100

!

interface Serial0

ip address 192.168.2.1 255.255.255.0

service-module t1 fdl ansi

!

interface Vlan1

ip address 192.168.3.1 255.255.255.0

ip helper-address 192.168.2.2

!

ip forward-protocol nd

ip route 0.0.0.0 0.0.0.0 192.168.2.2

no ip http server

!

control-plane

!

line con 0

password xxx

line aux 0

line vty 0 4

password xxx

login local

!

ntp clock-period 17180010

ntp server 129.6.15.29

ntp server 129.6.15.28

end

[Reza Sharifi]

Glad to help Randy.

I had the static route for you on the first post and thought you had add it.

Good to see it is working now.

Reza

[randy kruen]

Yep, I didnt quite understand that static route. However, when I looked at the remote machine, I then saw the existing static route, and it started to make more sense.

[Richard Burts]

Randy

Here is how the remote router is doing its address translation.

ip nat inside source list 1 interface FastEthernet0 overload

!

access-list 1 permit 192.168.0.0 0.0.255.255

access-list 1 permit any

The good news is that  it will translate for your new addresses without any changes. I have seen some issues come up when the access list for NAT used the permit any. So I might suggest that you take that line out. (be aware that when you take that line out that it will probably remove the entire access list and you will probably need to reconfigure the first line of the access list.)

HTH

Rick

[randy kruen]

Yep, that was cool. I must have been having nat issues, because I had to add dns-server info to the local router dhcp pool vlan2, to get it to work. I removed that line from the remote router, & rebooted the router just to be sure, and all is good. So I removed the dns-server info from the local router, & rebooted it just to be sure, and all is good. Thanks again for helping me to clean up the config files! Each time I play with these, it really helps to understand what is going on.

Randy