I am still very new to configuring Cisco equpment and am need of some help configuring a 1941 router with a csu/dsu module. I am directly connected to the T1 jack and verified a connection with the hardware loopback button.
i've gathered code from various Cisco/Online resources and cannot figure out what I need to do.
My goal is simply to be able to go out to the internet from an internal network.
any help would be most apreciated, thanks in advance
Below is the info I recieved from the ISP:
ROUTER IP INFO:
IP Address: xxx.xxx.xxx.xxx
Primary DNS: xxx.xx.xxx.xxx
Secondary DNS: xxx.xx.xxx.xxx
Network Range: xxx.xxx.xxx.xxx/x0
IP Address: xxx.xxx.xxx.xxx
Circuit# (ID): xxxxxxxxxxxxxxxx
And my current config:
service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption service udp-small-servers service tcp-small-servers ! hostname Cisco1 ! boot-start-marker boot-end-marker ! enable password admin1 ! no aaa new-model ! no ipv6 cef ip source-route ip cef ! ! ! ip dhcp pool mainip import all network x.x.0.0 255.255.255.0 dns-server x.x.x.x default-router x.x.x.x lease 5 ! ! multilink bundle-name authenticated ! ! ! license udi pid CISCO1941/K9 sn xxxxxxxxxxxxx ! ! ! ! ! ! ! ! interface GigabitEthernet0/0 ip address x.x.x.x 255.255.255.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface GigabitEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/0/0 ip address x.x.x.x 255.255.255.252 ip nat outside ip virtual-reassembly encapsulation frame-relay IETF no clock rate 2000000 service-module t1 timeslots 1-24 frame-relay map ip x.x.x.x. xxx broadcast IETF ! router eigrp 1000 network x.x.0.0 network x.x.0.0 network x.x.x.0 network x.x.x.x.0 ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip route 0.0.0.0 0.0.0.0 Serial0/0/0 ! ! ! ! control-plane ! ! line con 0 line aux 0 line vty 0 4 login ! scheduler allocate 20000 1000 end
You are off to a good start. The biggest issue that I see in this config is that while you have specified ip nat inside and ip nat outside on appropriate interfaces that there is no statement to invoke address translation. It might look something like this:
ip nat inside source list 15 interface Serial0/0/0 overload
access-list 15 permit x.x.x.x 0.0.0.255
I would also think that there is some value in configuring a serial interface subinterface and moving the IP address and the DLCI from the physical interface (where it is essentially a multipoint interface) to the serial subinterface where it will be a true point to point interface.
 I notice that you have configured EIGRP as a dynamic routing protocol. This may be a good thing. I also notice that there are multiple network statements under router EIGRP. But the way that you have masked "sensitive" information makes it difficult to know what networks you intend to put under EIGRP. And having multiple network statemets when there are only 2 networks configured on the router (and one of them is to outside where you probeably do not want to run your internal routing protocol) seems pretty strange. Perhaps you can clarify what you are trying to do with EIGRP?
Yes you would change the static route to point to the subinterface.
Where is the neighbor router? (on what interface is it connected?) If it is on the inside interface then it might make sense to run EIGRP (assuming that the neighbor is also running EIGRP and is using the same AS# in its EIGRP config). The serial interface goes to your service provider and generally you would not want to run a protocol like EIGRP with your provider.
One other important thing to understand about configuring EIGRP is that you use network statements to identify networks on local interfaces that you want to be running EIGRP. Since it looks like you have only one interface where you might want to run EIGRP I would expect only one network statement under router eigrp.
I am not sure that the problem is NAT. I believe that the problem is in the way that you configured the router to act as a DHCP server. Here is what I see in the config:
ip dhcp pool internal
network 220.127.116.11 255.255.255.0
You are telling the client PCs to use addresses in network 1.1.0.x and that their default gateway is in an entirely different network. The default gateway in the DHCP pool should be the address of the router interface (in this case 18.104.22.168).
While I am responding let me comment on a few other things. I am surprised that you are using network 1.1.0 as the network on your LAN interface. Is there a reason for doing this? The more common approach is to configure your LAN with private addresses (such as 192.168.x.x, or 172.16.y.y, or even 10.z.z.z).
I would also suggest that it might be better if you use access list 1 differently. As currently configured access list 1 is used as an inbound filter on the LAN interface, used as an outbound filter on the WAN interface, and is used for NAT. It will constrain what you can do as your router config needs to adapt to changes that may take place in your network.
I would also comment that if the access list is going to permit any that there is very little reason to use it as an inbound filter on the LAN or an outbound filter on the WAN. If you are going to permit everything there is little reason to configure the access-group on those interfaces.
I would also suggest that you configure the access list differently. I have seen some unexpected behaviors when access lists used for NAT are configured with permit any. I would suggest that it would be better if the access list permitted the subnet of the LAN interface. In your current config that would be access-list 1 permit 22.214.171.124 0.0.0.255
 I just re-read your post and see one other issue. In your NAT statement you are using the physical interface for the overload. You should be specifying the subinterface as the overload.
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.