I have managed to get all the commands entered I wanted, but when I hook the router up I'm not connected. Here's my setup - if I configure my laptop with one of the static ips assigned by my ISP (say 200.150.140.5), and connect directly to the ethernet from their router, I have access. When I plug their ethernet to the GiabitEthernet0 on my 891, and plug my laptop into FastEthernet0 (leaving it configured with the public IP), I have no connection.
FA0 (the VOIP phones) I would like to be protected with NAT by the 891. FA1 & FA2 will have their own firwalls and servers running on them, so I'd like to pass all traffic to them. I hoped that all traffic would pass on all three to start with, but it seems to be blocking all traffic instead.
I'm assuming that I'm missing a simple route, and I'm going to get my Cisco CCNA books from home over the weekend, but if you wouldn't mind looking at my config file and pointing out any glaring problems that would be great!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router
!
boot-start-marker
boot config usbflash0:CVO-BOOT.CFG
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
!
crypto pki token default removal timeout 0
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
license udi pid CISCO891-K9 sn xxxxxxxxxxx
!
username user1 secret 5 xxxxxxxxxxxxxxx.xxxxxxxx.
!
class-map match-all voip
match access-group 99
class-map match-all my-lan
match access-group 99
class-map match-all my-neighbor
match access-group 99
!
policy-map Restrict-to-5Mbps
class my-neighbor
set dscp default
police 8000 10000 conform-action transmit exceed-action drop
policy-map VOIP_1Mbps
class voip
priority 1500
policy-map My-LAN-8Mbps
class my-lan
bandwidth 8500
class class-default
fair-queue
!
interface FastEthernet0
no ip address
service-policy output VOIP_1Mbps
!
interface FastEthernet1
no ip address
service-policy input Restrict-to-5Mbps
service-policy output Restrict-to-5Mbps
!
interface FastEthernet2
no ip address
service-policy output My-LAN-8Mbps
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
!
interface FastEthernet5
no ip address
!
interface FastEthernet6
no ip address
!
interface FastEthernet7
no ip address
!
interface FastEthernet8
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0
no ip address
duplex auto
speed auto
!
interface Vlan1
no ip address
!
interface Async1
no ip address
encapsulation slip
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
access-list 99 permit any
!
control-plane
!
mgcp profile default
!
line con 0
logging synchronous
login local
line 1
modem InOut
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
login local
line vty 0 4
login local
transport input all
!
end
