Hello, I have a device that connects to the wireless network (WLAN1), with static IP (192.168.1.10), but cannot send emails using several SMTP servers, like smtp.google.com. Is there anything at the router that blocks the SMTP port (25) ? I have appended the configuration of the router below: router#sh run Building configuration... Current configuration : 7770 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname router ! boot-start-marker boot-end-marker ! logging message-counter syslog logging buffered 32768 informational ! no aaa new-model ! crypto pki trustpoint TP-self-signed-61071307 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-61071307 revocation-check none rsakeypair TP-self-signed-61071307 ! ! crypto pki certificate chain TP-self-signed-61071307 certificate self-signed 01   30820240 308201A9 ….. omitted 63DED965 BF9ED7BF A567E004               quit dot11 syslog ! dot11 ssid WLAN1 vlan 1   authentication open authentication key-management wpa mbssid guest-mode wpa-psk ascii 7 0707244543084852320444659 ! no ip source-route ! ! ip dhcp excluded-address 192.168.1.254 ! ip dhcp pool pool    import all    network 192.168.1.0 255.255.255.0    default-router 192.168.1.254    dns-server 195.170.0.1 195.170.2.2    update arp ! ! ip cef no ip bootp server ip domain name local ip name-server 192.168.1.254 ip name-server 4.4.4.2 ip name-server 4.4.4.6 ip inspect name firewall tcp ip inspect name firewall udp ip inspect name firewall cuseeme ip inspect name firewall h323 ip inspect name firewall rcmd ip inspect name firewall realaudio ip inspect name firewall streamworks ip inspect name firewall vdolive ip inspect name firewall sqlnet ip inspect name firewall tftp ip inspect name firewall ftp ip inspect name firewall icmp ip inspect name firewall sip ip inspect name firewall esmtp max-data 52428800 ip inspect name firewall fragment maximum 256 timeout 1 ip inspect name firewall netshow ip inspect name firewall rtsp ip inspect name firewall pptp ip inspect name firewall skinny ip ddns update method no-ip HTTP   add http://xxxxxx/password%40dynupdate.no-ip.com/nic/update%3FURL.no-ip.org= <h>&myip=<a> interval maximum 0 0 5 0 ! login block-for 30 attempts 3 within 15 login delay 3 login on-failure log no ipv6 cef ! multilink bundle-name authenticated ! ! username admin privilege 15 secret 5 $1$xZ7X$IXrtcnY1U7wU32eT1inUW4jY0 ! ! archive log config   hidekeys path flash:config write-memory ! ! ip tcp selective-ack ip tcp timestamp ! bridge irb ! ! interface ATM0 no ip address no atm ilmi-keepalive ! interface ATM0.1 point-to-point pvc 8/35   pppoe-client dial-pool-number 1 ! ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface Dot11Radio0 no ip address ! encryption vlan 1 mode ciphers aes-ccm ! broadcast-key vlan 1 change 30 ! ! ssid WLAN1 ! mbssid speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root ! interface Dot11Radio0.1 encapsulation dot1Q 1 native no cdp enable bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Vlan1 no ip address bridge-group 1 bridge-group 1 spanning-disabled ! interface Dialer0 ip ddns update hostname URL.no-ip.org ip ddns update no-ip ip address negotiated no ip redirects no ip unreachables ip mtu 1492 ip nat outside ip inspect firewall out ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 no cdp enable ppp pap sent-username xxxxxxxxx password 7 11184efc05D52101D1E ppp ipcp dns request ppp ipcp route default ! interface Dialer1 no ip address ip nbar protocol-discovery ! interface BVI1 ip address 192.168.1.254 255.255.255.0 ip access-group 102 in ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 ! ip forward-protocol nd ip http server ip http authentication local ip http secure-server ! ! ip nat inside source list 1 interface Dialer0 overload ip nat inside source static tcp 192.168.1.10 8080 interface Dialer0 9595 ! ! logging trap warnings access-list 1 remark The local LAN. access-list 1 permit 192.168.1.0 0.0.0.255 access-list 2 remark Where management can be done from. access-list 2 permit 192.168.1.0 0.0.0.255 access-list 101 remark Traffic allowed to enter the router from the Internet access-list 101 deny   ip 0.0.0.0 0.255.255.255 any access-list 101 deny   ip 10.0.0.0 0.255.255.255 any access-list 101 deny   ip 127.0.0.0 0.255.255.255 any access-list 101 deny   ip 169.254.0.0 0.0.255.255 any access-list 101 deny   ip 172.16.0.0 0.15.255.255 any access-list 101 deny   ip 192.0.2.0 0.0.0.255 any access-list 101 deny   ip 192.168.0.0 0.0.255.255 any access-list 101 deny   ip 198.18.0.0 0.1.255.255 any access-list 101 deny   ip 224.0.0.0 0.15.255.255 any access-list 101 deny   ip any host 255.255.255.255 access-list 101 permit tcp any any eq 1723 access-list 101 permit gre any any access-list 101 permit tcp any any eq 22 access-list 101 permit tcp any any eq telnet access-list 101 permit tcp any any eq domain access-list 101 permit udp any any eq domain access-list 101 deny   icmp any any echo access-list 101 deny   ip any any log access-list 102 remark Traffic allowed to enter the router from the Ethernet access-list 102 permit ip any host 192.168.1.254 access-list 102 deny   ip any host 192.168.1.255 access-list 102 deny   udp any any eq tftp log access-list 102 deny   ip any 0.0.0.0 0.255.255.255 log access-list 102 deny   ip any 10.0.0.0 0.255.255.255 log access-list 102 deny   ip any 127.0.0.0 0.255.255.255 log access-list 102 deny   ip any 169.254.0.0 0.0.255.255 log access-list 102 deny   ip any 172.16.0.0 0.15.255.255 log access-list 102 deny   ip any 192.0.2.0 0.0.0.255 log access-list 102 deny   ip any 192.168.0.0 0.0.255.255 log access-list 102 deny   ip any 198.18.0.0 0.1.255.255 log access-list 102 deny   udp any any eq 135 log access-list 102 deny   tcp any any eq 135 log access-list 102 deny   udp any any eq netbios-ns log access-list 102 deny   udp any any eq netbios-dgm log access-list 102 deny   tcp any any eq 445 log access-list 102 permit tcp any any eq domain access-list 102 permit udp any any eq domain access-list 102 permit ip 192.168.1.0 0.0.0.255 any access-list 102 permit ip any host 255.255.255.255 access-list 102 deny   ip any any log dialer-list 1 protocol ip permit no cdp run ! ! ! control-plane ! bridge 1 route ip ! line con 0 no modem enable line aux 0 line vty 0 4 access-class 2 in login local transport input telnet ssh ! scheduler max-task-time 5000 end Thank you !! ... View more

Hello, I have the below configuration and would like to find out why I cannot pass web traffic from the ADSL conncection. Do I miss anything on the conf below? Thank you in advance. Building configuration... Current configuration : 4815 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname router ! boot-start-marker boot-end-marker ! logging message-counter syslog ! no aaa new-model ! ! dot11 syslog ! dot11 ssid wifi vlan 1 authentication open authentication key-management wpa mbssid guest-mode wpa-psk ascii 7 0707244543084850444659 ! no ip source-route ! ! ip dhcp excluded-address 192.168.1.254 ! ip dhcp pool wifipool import all network 192.168.1.0 255.255.255.0 default-router 192.168.1.254 dns-server x.x.x.x y.y.y.y update arp ! ! ip cef no ip bootp server no ip domain lookup ip domain name local ip name-server 192.168.1.254 no ipv6 cef ! multilink bundle-name authenticated ! ! ! username …. ! ! ! archive log config hidekeys path flash:config write-memory ! ! ip tcp selective-ack ip tcp timestamp ! bridge irb ! ! interface ATM0 no ip address no atm ilmi-keepalive ! interface ATM0.1 point-to-point pvc 8/35 pppoe-client dial-pool-number 1 ! ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface Dot11Radio0 no ip address ! encryption vlan 1 mode ciphers aes-ccm ! broadcast-key vlan 1 change 30 ! ! ssid wifi ! mbssid speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root ! interface Dot11Radio0.1 encapsulation dot1Q 1 native no cdp enable bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Vlan1 no ip address bridge-group 1 bridge-group 1 spanning-disabled ! interface Dialer0 ip address negotiated ip access-group 101 in no ip redirects no ip unreachables ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 no cdp enable ppp pap sent-username xxxxxxxxxxxx password 7 xxxxxxxxxxx ppp ipcp dns request ppp ipcp route default ! interface BVI1 ip address 192.168.1.254 255.255.255.0 ip access-group 102 in ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip nat inside source list 1 interface Dialer0 overload ! access-list 1 remark The local LAN. access-list 1 permit 192.168.1.0 0.0.0.255 access-list 2 remark Where management can be done from. access-list 2 permit 192.168.1.0 0.0.0.255 access-list 101 remark Traffic allowed to enter the router from the Internet access-list 101 deny ip 0.0.0.0 0.255.255.255 any access-list 101 deny ip 10.0.0.0 0.255.255.255 any access-list 101 deny ip 127.0.0.0 0.255.255.255 any access-list 101 deny ip 169.254.0.0 0.0.255.255 any access-list 101 deny ip 172.16.0.0 0.15.255.255 any access-list 101 deny ip 192.0.2.0 0.0.0.255 any access-list 101 deny ip 192.168.0.0 0.0.255.255 any access-list 101 deny ip 224.0.0.0 0.15.255.255 any access-list 101 deny ip any host 255.255.255.255 access-list 101 permit tcp any any eq 1723 access-list 101 permit gre any any access-list 101 permit tcp any any eq 22 access-list 101 permit tcp any any eq telnet access-list 101 permit tcp any any eq domain access-list 101 permit udp any any eq domain access-list 101 deny icmp any any echo access-list 101 deny ip any any log access-list 102 remark Traffic allowed to enter the router from the Ethernet access-list 102 permit ip any host 192.168.1.254 access-list 102 deny ip any host 192.168.1.255 access-list 102 deny udp any any eq tftp log access-list 102 deny ip any 0.0.0.0 0.255.255.255 log access-list 102 deny ip any 10.0.0.0 0.255.255.255 log access-list 102 deny ip any 127.0.0.0 0.255.255.255 log access-list 102 deny ip any 169.254.0.0 0.0.255.255 log access-list 102 deny ip any 172.16.0.0 0.15.255.255 log access-list 102 deny ip any 192.0.2.0 0.0.0.255 log access-list 102 deny ip any 192.168.0.0 0.0.255.255 log access-list 102 deny udp any any eq 135 log access-list 102 deny tcp any any eq 135 log access-list 102 deny udp any any eq netbios-ns log access-list 102 deny udp any any eq netbios-dgm log access-list 102 deny tcp any any eq 445 log access-list 102 permit ip 192.168.1.0 0.0.0.255 any access-list 102 permit ip any host 255.255.255.255 access-list 102 deny ip any any log dialer-list 1 protocol ip permit ! ! ! ! ! control-plane ! bridge 1 route ip ! line con 0 no modem enable line aux 0 line vty 0 4 access-class 2 in login local ! scheduler max-task-time 5000 end ... View more

Hello, How can someone remove "address-family ipv4" from a bgp configuration without affecting the bgp peering. In other words, the "address-family ipv4" was added to the router bgp config, and it changed a bit the outline of the configuration. For example the below conf was initially setup: router bgp 1000 neighbor x.x.x.x remote-as 5555 neighbor x.x.x.x timers 10 30 30 neighbor x.x.x.x soft-reconfiguration inbound neighbor x.x.x.x route-map ROUTE_MAP_IN in neighbor x.x.x.x route-map ROUTE_MAP_OUT out neighbor y.y.y.y remote-as 4444 neighbor y.y.y.y update-source Loopback0 neighbor y.y.y.y version 4 neighbor y.y.y.y next-hop-self neighbor y.y.y.y send-community neighbor y.y.y.y soft-reconfiguration inbound and when the "address-family ipv4" was activated, it changed the bgp configuration completely: router bgp 1000 neighbor x.x.x.x remote-as 5555 neighbor x.x.x.x timers 10 30 30 neighbor y.y.y.y remote-as 4444 neighbor y.y.y.y update-source Loopback0 neighbor y.y.y.y version 4 ! address-family ipv4   neighbor x.x.x.x activate   neighbor x.x.x.x soft-reconfiguration inbound   neighbor x.x.x.x route-map ROUTE_MAP_IN in   neighbor x.x.x.x route-map ROUTE_MAP_OUT out   neighbor y.y.y.y activate   neighbor y.y.y.y send-community   neighbor y.y.y.y next-hop-self   neighbor y.y.y.y soft-reconfiguration inbound How can I revert it to the previous state without affecting the BGP peers? Because if I remove the "address-family ipv4", the bgp connections will be torn off affecting the connectivity. Thank you in advance. ... View more