|
robandyuk (IS/IT--Management) |
13 May 12 17:40 |
Hi can anyone see why my router config will not let me browse the internet from any machine. I can ping NTL DNS 194.168.4.100 from both the router and the computer but it will not browse. On the router if I run the test connection on the ethernet 0 port it says I need to put a static route in but i do have a default route in already
I have removed all passwords but left the rest I want 2 internal networks a 172.16.1.0/24 and a 10.0.0.0/24 both using the adsl port for internet Thanks Rob
version 12.4 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname Roxby-rtr ! boot-start-marker boot-end-marker ! security authentication failure rate 10 log security passwords min-length 6 logging buffered critical logging console critical enable secret 5 $1$s3El$00000000000000 enable password 7 111918160000000000000 ! aaa new-model ! ! aaa authentication login local_auth local aaa authentication ppp default local ! aaa session-id common ! resource policy ! clock timezone PCTime 0 clock summer-time PCTime date Mar 30 2003 1:00 Oct 26 2003 2:00 ip subnet-zero no ip gratuitous-arps no ip dhcp use vrf connected ip dhcp excluded-address 10.0.0.1 10.0.0.9 ip dhcp excluded-address 10.0.0.51 10.0.0.254 ! ip dhcp pool DMZ import all network 10.0.0.0 255.255.255.0 dns-server 194.168.4.100 ! ip cef ip domain name roxby.local ip name-server 8.8.8.8 ip name-server 8.8.4.4 no ip bootp server ip inspect name SDM_LOW dns ip inspect name SDM_LOW ftp ip inspect name SDM_LOW h323 ip inspect name SDM_LOW icmp ip inspect name SDM_LOW netshow ip inspect name SDM_LOW rcmd ip inspect name SDM_LOW realaudio ip inspect name SDM_LOW rtsp ip inspect name SDM_LOW sqlnet ip inspect name SDM_LOW streamworks ip inspect name SDM_LOW tftp ip inspect name SDM_LOW vdolive ip inspect name SDM_LOW cuseeme ip inspect name SDM_LOW https ip inspect name SDM_LOW imap ip inspect name SDM_LOW pop3 ip inspect name SDM_LOW esmtp ip inspect name SDM_LOW tcp ip inspect name SDM_LOW udp no ip ips deny-action ips-interface ip ips notify SDEE ip ssh time-out 60 ip ssh authentication-retries 2 login block-for 60 attempts 3 within 60 ! !
! username admin privilege 15 password 7 000000000000000000000000000000 username CRWS_Ritesh privilege 15 password 7 000000000000000000000000 username CRWS_Kannan privilege 15 password 7 0000000000000000000000000 username CRWS_Srini privilege 15 password 7 000000000000000000000000000 username CRWS_Shashi privilege 15 password 7 00000000000000000000000000 username CRWS_Gayatri privilege 15 password 7 0000000000000000000000000 ! ! ! ! ! interface Ethernet0 description $FW_INSIDE$$ETH-LAN$ ip address 172.16.1.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 hold-queue 100 out ! interface Ethernet2 description $FW_INSIDE$ ip address 10.0.0.1 255.255.255.0 ip access-group 109 in ip verify unicast reverse-path no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly shutdown hold-queue 100 out ! interface ATM0 no ip address ip verify unicast source reachable-via rx allow-default 100 no ip redirects no ip unreachables no ip proxy-arp no atm ilmi-keepalive dsl operating-mode auto pvc 0/38 encapsulation aal5mux ppp dialer dialer pool-member 1 ! ! interface FastEthernet1 speed auto full-duplex ! interface FastEthernet2 speed auto full-duplex ! interface FastEthernet3 speed auto full-duplex ! interface FastEthernet4 speed auto full-duplex ! interface Dialer0 description Orange ADSL$FW_OUTSIDE$ ip address negotiated ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp no ip route-cache cef no ip route-cache ip tcp adjust-mss 1452 no ip mroute-cache dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap callin ppp chap hostname xxxxxx.orangehome.co.uk@xx ppp chap password 7 xxxxxxxxxxxxxxxxxxxxxxxx ! ip classless ip route 0.0.0.0 0.0.0.0 Dialer0 ip http server no ip http secure-server ! ip nat inside source list 1 interface Dialer0 overload ! ! logging trap debugging logging facility local2 access-list 1 remark SDM_ACL Category=2 access-list 1 permit 172.16.1.0 0.0.0.255 access-list 100 permit udp any any eq bootpc access-list 101 remark auto generated by SDM firewall configuration access-list 101 remark SDM_ACL Category=0 access-list 101 deny ip 10.0.0.0 0.0.0.255 any access-list 101 deny ip host 255.255.255.255 any access-list 101 deny ip 127.0.0.0 0.255.255.255 any access-list 101 permit ip any any access-list 101 remark auto generated by SDM firewall configuration access-list 101 remark SDM_ACL Category=0 access-list 101 remark auto generated by SDM firewall configuration access-list 101 remark SDM_ACL Category=0 access-list 102 remark auto generated by SDM firewall configuration access-list 102 remark SDM_ACL Category=0 access-list 102 deny ip 172.16.1.0 0.0.0.255 any access-list 102 permit icmp any host 10.0.0.1 echo-reply access-list 102 permit icmp any host 10.0.0.1 time-exceeded access-list 102 permit icmp any host 10.0.0.1 unreachable access-list 102 deny ip 10.0.0.0 0.255.255.255 any access-list 102 deny ip 172.16.0.0 0.15.255.255 any access-list 102 deny ip 192.168.0.0 0.0.255.255 any access-list 102 deny ip 127.0.0.0 0.255.255.255 any access-list 102 deny ip host 255.255.255.255 any access-list 102 deny ip host 0.0.0.0 any access-list 102 deny ip any any log access-list 102 remark auto generated by SDM firewall configuration access-list 102 remark SDM_ACL Category=0 access-list 102 remark auto generated by SDM firewall configuration access-list 102 remark SDM_ACL Category=0 access-list 103 remark auto generated by SDM firewall configuration access-list 103 remark SDM_ACL Category=0 access-list 103 deny ip 10.0.0.0 0.0.0.255 any access-list 103 deny ip host 255.255.255.255 any access-list 103 deny ip 127.0.0.0 0.255.255.255 any access-list 103 permit ip any any access-list 103 remark auto generated by SDM firewall configuration access-list 103 remark SDM_ACL Category=0 access-list 103 remark auto generated by SDM firewall configuration access-list 103 remark SDM_ACL Category=0 access-list 104 remark auto generated by SDM firewall configuration access-list 104 remark SDM_ACL Category=0 access-list 104 deny ip 172.16.1.0 0.0.0.255 any access-list 104 permit icmp any host 10.0.0.1 echo-reply access-list 104 permit icmp any host 10.0.0.1 time-exceeded access-list 104 permit icmp any host 10.0.0.1 unreachable access-list 104 deny ip 10.0.0.0 0.255.255.255 any access-list 104 deny ip 172.16.0.0 0.15.255.255 any access-list 104 deny ip 192.168.0.0 0.0.255.255 any access-list 104 deny ip 127.0.0.0 0.255.255.255 any access-list 104 deny ip host 255.255.255.255 any access-list 104 deny ip host 0.0.0.0 any access-list 104 deny ip any any log access-list 104 remark auto generated by SDM firewall configuration access-list 104 remark SDM_ACL Category=0 access-list 104 remark auto generated by SDM firewall configuration access-list 104 remark SDM_ACL Category=0 access-list 105 remark auto generated by SDM firewall configuration access-list 105 remark SDM_ACL Category=1 access-list 105 permit ip 10.0.0.0 0.0.0.255 any access-list 105 permit ip host 255.255.255.255 any access-list 105 permit ip 127.0.0.0 0.255.255.255 any access-list 105 permit ip any any access-list 106 remark auto generated by SDM firewall configuration access-list 106 remark SDM_ACL Category=1 access-list 106 deny ip 172.16.1.0 0.0.0.255 any access-list 106 deny ip host 255.255.255.255 any access-list 106 deny ip 127.0.0.0 0.255.255.255 any access-list 106 permit ip any any access-list 106 remark auto generated by SDM firewall configuration access-list 106 remark SDM_ACL Category=1 access-list 106 remark auto generated by SDM firewall configuration access-list 106 remark SDM_ACL Category=1 access-list 107 remark auto generated by SDM firewall configuration access-list 107 remark SDM_ACL Category=1 access-list 107 permit udp host 193.36.79.101 eq domain any access-list 107 permit ip 10.0.0.0 0.0.0.255 any access-list 107 permit ip 172.16.1.0 0.0.0.255 any access-list 107 permit icmp any any echo-reply access-list 107 permit icmp any any time-exceeded access-list 107 permit icmp any any unreachable access-list 107 permit ip 10.0.0.0 0.255.255.255 any access-list 107 permit ip 172.16.0.0 0.15.255.255 any access-list 107 permit ip 192.168.0.0 0.0.255.255 any access-list 107 permit ip 127.0.0.0 0.255.255.255 any access-list 107 permit ip host 255.255.255.255 any access-list 107 permit ip host 0.0.0.0 any access-list 107 permit ip any any log access-list 108 remark auto generated by SDM firewall configuration access-list 108 remark SDM_ACL Category=1 access-list 108 deny ip 10.0.0.0 0.0.0.255 any access-list 108 deny ip host 255.255.255.255 any access-list 108 deny ip 127.0.0.0 0.255.255.255 any access-list 108 permit ip any any access-list 109 remark auto generated by SDM firewall configuration access-list 109 remark SDM_ACL Category=1 access-list 109 deny ip 172.16.1.0 0.0.0.255 any access-list 109 deny ip host 255.255.255.255 any access-list 109 deny ip 127.0.0.0 0.255.255.255 any access-list 109 permit ip any any access-list 110 remark auto generated by SDM firewall configuration access-list 110 remark SDM_ACL Category=1 access-list 110 permit udp host 8.8.4.4 eq domain any access-list 110 permit udp host 8.8.8.8 eq domain any access-list 110 permit udp host 0.0.0.0 eq domain any access-list 110 permit udp host 194.168.8.100 eq domain any access-list 110 permit udp host 194.168.4.100 eq domain any access-list 110 deny ip 10.0.0.0 0.0.0.255 any access-list 110 deny ip 172.16.1.0 0.0.0.255 any access-list 110 permit icmp any any echo-reply access-list 110 permit icmp any any time-exceeded access-list 110 permit icmp any any unreachable access-list 110 deny ip 10.0.0.0 0.255.255.255 any access-list 110 deny ip 172.16.0.0 0.15.255.255 any access-list 110 deny ip 192.168.0.0 0.0.255.255 any access-list 110 deny ip 127.0.0.0 0.255.255.255 any access-list 110 deny ip host 255.255.255.255 any access-list 110 deny ip host 0.0.0.0 any access-list 110 deny ip any any log dialer-list 1 protocol ip permit no cdp run ! control-plane ! bridge 1 protocol dec banner motd ^C Authorized Access only This system is the property of So-&-So-Enterprise. UNAUTHORIZED ACCESS TO THIS DEVICE IS PROHIBITED. You must have explicit permission to access this device. All activities performed on this device are logged. Any violations of access policy will result in disciplinary action.^C ! line con 0 exec-timeout 5 0 login authentication local_auth no modem enable transport output telnet line aux 0 login authentication local_auth transport output telnet line vty 0 4 password 7 xxxxxxxxxxxxxxxxxxx login authentication local_auth transport input telnet ssh ! scheduler max-task-time 5000 end
|
|