How To Allow Internet Browing On Cisco 1721 Routerq, Need Help

Unanswered Question
Jul 27th, 2007
User Badges:

Dear Guys...

I have two Routers One is connected to other through VPN on different cities...

VPN works well i m able to access the LAN on both sides... BUT I CAN NOT BROWSE THE INTERNET

this is the major problem in my network.....

How can i do it...

I have Router 1721 Cisco...

Thanks in Advance... Okies

Dear Guys I have the Router Configuration given below but i can not browse the internet while the VPN works well..

User Access Verification





hyderabad#show ru

hyderabad#show running-config

Building configuration...

Current configuration : 1818 bytes


version 12.3

service timestamps debug uptime

service timestamps log uptime

service password-encryption


hostname hyderabad





enable password 7 14141B180F0B


mmi polling-interval 60

no mmi auto-configure

no mmi pvc

mmi snmp-timeout 180

no aaa new-model

ip subnet-zero

ip cef




ip audit po max-events 100

no ip domain lookup

isdn switch-type basic-net3








interface Tunnel0

description link to karachi

ip address

load-interval 30

keepalive 5 3

tunnel source

tunnel destination


interface BRI0

description connected to internet

no ip address

ip nat outside

encapsulation ppp

dialer rotary-group 1

dialer-group 1

isdn switch-type basic-net3

isdn point-to-point-setup

no cdp enable


interface FastEthernet0

ip address

ip nat inside

speed auto


interface Dialer1

ip address negotiated

ip nat outside

encapsulation ppp

no ip split-horizon

dialer in-band

dialer string 13131212

dialer hold-queue 10

dialer load-threshold 10 outbound

dialer-group 1

no cdp enable

ppp authentication chap pap callin

ppp chap hostname rdpmuhyd

ppp chap password 7 1405161B0111223220

ppp pap sent-username rdpmuhyd password 7 0214004B0613073848

ppp multilink


router rip

version 2

passive-interface Dialer1


no auto-summary


ip nat inside source list 1 interface Dialer1 overload

ip classless

ip route

ip route Dialer1

no ip http server

no ip http secure-server


access-list 1 permit

dialer-list 1 protocol ip permit

snmp-server community public RO


line con 0

exec-timeout 0 0

password 7 05080F1C2243


line aux 0

line vty 0 4

password 7 1511021F0725





  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
EPHRAIM MANI Fri, 07/27/2007 - 19:46
User Badges:
  • Bronze, 100 points or more

Can you please verify you default root.

ip route (local exit interface/next-hop IP address)

Also paste your "show ip route" for analysis.

Thanks EM

Kindly rate this post if its helpful

purohit_810 Mon, 07/30/2007 - 10:49
User Badges:
  • Silver, 250 points or more

Are bhai in earlier chat also we said you

Default route dialer1

access-list 101 permit

dialer-list 101 protocol ip permit


Dharmesh Purohit


This Discussion