11-22-2010 10:20 AM - edited 03-04-2019 10:32 AM
Trying to do a basic config with a Cisco 871 with IOS c870-advsecurityk9-mz.124-24.T4.bin. Connecting to ISP via DHCP. I get an IP from the ISP and can ping the ISP gateway from the WAN interface. My internal computer receives an IP from the 871 and can ping the ISP gateway as well, but that's as far as the traffic goes. I must be missing something in my config....Any suggestions? I think it is either a NAT, or ACL issue...
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname xxxx
boot-start-marker
boot system flash:c870-advsecurityk9-mz.124-24.T4.bin
boot-end-marker
logging message-counter syslog
enable secret
no aaa new-model
dot11 syslog
ip source-route
ip dhcp excluded-address 192.168.1.1 192.168.1.30
ip dhcp pool vlan1pool
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 10.10.10.10
ip cef
no ip domain lookup
ip domain name xxxxx
archive
log config
hidekeys
interface Loopback0
no ip address
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
interface FastEthernet3
interface FastEthernet4
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet4
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet4 overload
access-list 1 permit 192.168.0.0 0.0.255.255
control-plane
11-22-2010 05:15 PM
looks like your missing a default route.
ip route 0.0.0.0 0.0.0.0 dhcp
11-23-2010 07:02 PM
I thought this was covered by the ip route 0.0.0.0 0.0.0.0 Fastethernet4...no?
11-23-2010 07:11 PM
Just tested by removing old default route and added the dhcp designation:
ip route 0.0.0.0 0.0.0.0 dhcp
Its working now. I've never configured a default route that way before, but I don't work on the 871s much...
Thanks for the answer .
11-24-2010 01:18 AM
Hi,
You were already receiving a default route from your ISP with dhcp( installing a default static route with an AD of 254) so just removing your static default route command should do the trick, because here you were overriding this route with one with a better AD but your new default static route was pointing to the interface which was fastethernet and so if the ISP gateway was not configured for proxy arp( and it shouldn't be) then it won't work but if you had pointed towards next hop( ISP gateway) it should have worked.
Regards.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide