Cisco Support Community
Community Member

1841 Internet Router config issues

I have an 1841 router connected to Verizon DIA for Internet.  I can SSH to the router but I can not ping a device with a static IP address in the same block of IP's that Verizon gave me.  Device I try to ping is  router config is below.  I should not need any NAT statements??


version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Milwaukee
enable secret 5 $1$pGaG$aL8.vsAZpzIVirVJBoM0h.
enable password XXXXXX
no aaa new-model
dot11 syslog
ip cef
multilink bundle-name authenticated
crypto pki trustpoint TP-self-signed-2544040765
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2544040765
 revocation-check none
 rsakeypair TP-self-signed-2544040765
crypto pki certificate chain TP-self-signed-2544040765
 certificate self-signed 01
  30820241 308201AA A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32353434 30343037 3635301E 170D3134 30343238 31333135
  31325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35343430
  34303736 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100E0F9 99CAACF4 1D0BCB38 ECD68343 A7686F51 1B555499 7E3BE26D 592C77CE
  5B3110DE 01E08E14 5DEFAFA1 14804235 7311D49C D141A993 16159D20 3F98DBB0
  E1E856D7 108B670A 7D3D56AC 51F956A8 EE24AE09 4F876FC9 FF31DBA0 11112F02
  1987A5F4 A98BF9EC E6856A81 D64E5022 1840509E E1D81B9F 92963692 BF490D6A
  78E90203 010001A3 69306730 0F060355 1D130101 FF040530 030101FF 30140603
  551D1104 0D300B82 094D696C 7761756B 6565301F 0603551D 23041830 1680140D
  86411152 2571C485 DE154FA4 D2C09B3F 62E4E630 1D060355 1D0E0416 04140D86
  41115225 71C485DE 154FA4D2 C09B3F62 E4E6300D 06092A86 4886F70D 01010405
  00038181 0008142F 5D4CF40F 415EEAE7 D872D17B 4C6FE99B 5BC16FA4 20F0FD9F
  2A2CFF87 165DAF65 0B1AB16C E565F1BA 38184B26 0689E974 EF5415B3 3BA93566
  B6636172 691CD5CF 135E374D 447C031D 6DF8F179 7FAB134F 253F4E77 57F8781B
  BE8A9CE9 AF2545A3 4C70FFB0 C255E96F C5C527B1 D0ED6DAE EA55BDEC 7B1A3309
  C9E3C7BC 9B
username netadmin password 0 XXXXXXX
username admin password 0 level 15 XXXXXXX
 log config
ip ssh version 2
interface FastEthernet0/0
 ip address
 duplex auto
 speed auto
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
interface Serial0/0/0
 bandwidth 1536
 no ip address
 encapsulation frame-relay IETF
 service-module t1 clock source internal
 service-module t1 timeslots 1-24
 frame-relay lmi-type ansi
interface Serial0/0/0.500 point-to-point
 ip address
 snmp trap link-status
 frame-relay interface-dlci 500 IETF
ip forward-protocol nd
ip route Serial0/0/0.500
ip http server
ip http secure-server
line con 0
 exec-timeout 0 0
line aux 0
line vty 0 4
 exec-timeout 0 0
 privilege level 15
 password XXXXXX
 login local
 transport input telnet ssh
scheduler allocate 20000 1000

Cisco Employee

Hi Joel,Where is the 63.86.5

Hi Joel,

Where is the device actually connected? Is it really down the Fa0/0 interface? And by the way, is the Fa0/0 in the up/up state? Can you ping any other device connected to Fa0/0?

Best regards,


Community Member

the fa0/0 interface is 63.86

the fa0/0 interface is, and from there a cable goes to a WAN port on a VPN device and that has the address of  from the fa0/0 interface I ping just fine to the internet, but if I swap out the VPN device and attach a laptop to the fa0/0 interface and statically assign to the laptop, I can ping, but it will not get out to the Internet.


I am confused, it should go right out, no access lists or anything, just a very basic config on the router shown above.  Verizon had me change to  ip route which is the Verizon side of the WAN block.  Still no go.

Community Member

Hi Joel,You don't need to

Hi Joel,

You don't need to perform NAT in this scenario as your using public IP's.

Can you confirm that when you plugged your laptop to the fa0/0 port on the router, these were the static IP details configured on the laptop?

Laptop IP:
Subnet mask:
Default gateway:

If not, try it and ping


Next, can you run the following command from the router please.

traceroute source FastEthernet0/0


Let us know how you go.

Community Member

on the laptop I have the

on the laptop I have the default gateway as as provided by Verizon.  .250 is the fa0/0 port on the router.  Should I use that instead of .249?

Community Member

Hi Joel, yes please re-test

Hi Joel, yes please re-test with your laptop connected to port fa0/0 on the router, using as the default gateway on your laptop.

'After' you try the above, ping - do you get a response?

Community Member

and the router pings to the

and the router pings to the internet just fine.  just the laptop wont

Community Member


Milwaukee#traceroute source fa0/0

Type escape sequence to abort.
Tracing the route to

  1 8 msec 8 msec 8 msec
  2 32 msec 32 msec 32 msec
  3 32 msec 32 msec 32 msec
  4 32 msec 32 msec 64 msec
  5 32 msec 28 msec 28 msec
  6 [MPLS: Label 444486 Exp 4] 32 msec 32 msec [MPLS: Label 659928 Exp 4] 32 msec
  7 [MPLS: Label 370796 Exp 4] 40 msec [MPLS: Label 468932 Exp 4] 40 msec [MPLS: Label 468732 Exp 4] 36 msec
  8 36 msec 36 msec 36 msec
  9  *  *  *
 10 36 msec 40 msec 40 msec

CreatePlease to create content