Pinging the upstream default GW and the upstream DNS works fine from IOS, but fails from nodes behind the NAT + Bridge. The setup does work without bridge enabled, but then you can't connect between the wired and wireless segments after that. I'll get the other outputs collected and post them also.
... View more
Hi all, I was trying to set up an ISR 871W to bridge the wireless and three wired ports, with IPv4 upstream through a DSL bridge, via DHCP and IPv6 upstream via 6in4 tunnel. The DSL bridge passes me the upstream IP with DHCP (2WIRE DMZ setup). I got pretty close, but when I tried to configure the wired-wireless bridging things quit working for me. The router can ping things fine with IPv4 or IPv6, but the devices in the LAN can only ping the router IP and are incapable of getting to anything else besides that, including traceroute, no hops possible. Can anybody spot what I must have missed? I'm not as familiar with the ISR products yet. Matthew. ! ! Last configuration change at 06:36:31 UTC Fri Mar 29 2013 ! NVRAM config last updated at 06:40:00 UTC Fri Mar 29 2013 ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname c871w ! boot-start-marker boot-end-marker ! enable secret 5 ... enable password ... ! no aaa new-model ip subnet-zero ip cef ! ! ip dhcp excluded-address 192.168.0.1 192.168.0.10 ! ip dhcp pool inside network 192.168.0.0 255.255.255.0 dns-server 220.127.116.11 18.104.22.168 default-router 192.168.0.1 ! ! ip domain name ... ip name-server 22.214.171.124 ip name-server 126.96.36.199 ip ips po max-events 100 ipv6 unicast-routing no ftp-server write-enable ! ! ! ! ! bridge irb ! ! interface Tunnel0 no ip address ipv6 address 2607:.../64 ipv6 mtu 1472 ipv6 virtual-reassembly tunnel source BVI1 tunnel destination ... ! interface ATM0 no ip address shutdown no atm ilmi-keepalive dsl operating-mode auto ! interface FastEthernet0 switchport access vlan 2 no ip address ! interface FastEthernet1 no ip address ! interface FastEthernet2 no ip address ! interface FastEthernet3 no ip address ! interface Dot11Radio0 no ip address ! broadcast-key change 3600 ! broadcast-key vlan 1 change 600 ! ! encryption mode ciphers tkip ! encryption vlan 1 mode ciphers tkip ! ssid ... vlan 1 authentication open authentication key-management wpa wpa-psk ascii 0 ... ! speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root no cdp enable ! interface Dot11Radio0.1 encapsulation dot1Q 1 native bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Vlan1 no ip address ip nat inside ip virtual-reassembly bridge-group 1 ! interface Vlan2 ip address dhcp ! interface BVI1 ip address 192.168.0.1 255.255.255.0 ip nat inside ip virtual-reassembly ipv6 address 2607:...::1/64 ! ip classless ! ! no ip http server no ip http secure-server ip nat inside source list 1 interface Vlan2 overload ! access-list 1 permit 192.168.0.0 0.0.255.255 ipv6 route ::/0 Tunnel0 ! ! control-plane ! bridge 1 protocol ieee bridge 1 route ip ! line con 0 no modem enable transport preferred all transport output all speed 115200 line aux 0 transport preferred all transport output all line vty 0 4 password ... login transport preferred all transport input all transport output all ! scheduler max-task-time 5000 ntp clock-period 17177913 ntp server 188.8.131.52 end
... View more