cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1020
Views
0
Helpful
9
Replies

Configuring a 881 router

VelaphiMasoha
Level 1
Level 1

I have a cisco 881 router directly connected to a vsat modem router which gives out ip addresses dynamically.

My problem is that i cannot ping or access internet through FE4 which is the WAN connection.The problem is how do i allow traffic to pass and access internet.I know i cannot configure frame-relay because the router does not have serial intrefaces help!!!!

9 Replies 9

Edison Ortiz
Hall of Fame
Hall of Fame

Have you configured NAT on this router?

Can you ping the internet from the router itself?

Does the router obtain a public internet IP on its FE4 interface?

Can you post configs?

__

Edison.

Thank you for response,

Yes i have configured NAT on the router.

I cannot ping internet from the router itself.

The router picks up IP add through DHCP on its fE4 interface.

I have attached my config file

I can ping the internet from the router. Just to clrify from my previous report

Your NAT config looks fine.

Can you drop some of the security features under Vlan 1 and see if the connection works?

zone-member security out-zone for instance.

Also, I don't see the corresponding ACL for this

ip access-group 189 in

ip access-group 189 out

In the external interface (F4), you have:

ip access-group Outside in

This ACL has no deny and a permit ip any any at the end - what's the point for this access-group?

ip access-group Inside out

Corresponding ACL is missing. Remove this access-group from the interface.

Also, try pinging the internet from the host by using IP instead of DNS and see if it works.

HTH,

__

Edison.

i have disabled the access-list on Vlan 1.

I am failing to disable access-list on the FE4

when i type

no ip access-group inside out-

i get a error message that- Access-group outside is not configured.

That is on both access-lists.

I can ping the server using the ip from a host machine but cannot ping the net still i guess because of the access-list on FE4.

i am and i am studying my CCNA its fun.

I waiting for you reply.

HTH

What server are you pinging? 4.2.2.1? If so, you are connecting to the internet just fine. The problem may be DNS related. What DNS is configured in the workstation?

__

Edison.

I am ping the vsat modem which i cannot reach.

But the FE4 i can reach.

The DNS that i am using is the ISP DNS add that they provided.

Do you think the access-list that i did not disable are blocking me

Can you ping 4.2.2.1 from the workstation? (Yes|No)

What's the default gateway set on the workstation?

As for the ACL, try create a dummy ACL in the router with the same name and remove the access-group, then remove the ACL. I never seen that error before, you should be able to remove the access-group without a corresponding ACL being configured.

__

Edison.

NO i cannot ping the 4.2.2.1 from the workstation.

The default gateway is my VLAN IP Address.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: