2801 cannot get to internet

[navsol]

I have a 2801 that I configured with SDM. This is my 1st Cisco router and I have been reading alot, so much I think I have Dain Bramage. Below is my config from the router, can anyone tell me what I am missing. I am trying to get it to the internet, so I can eventually setup up several VPN connections. Thanks in advance.

 

[navsol]

Sorry forgot to add config. It is in another post but I will add it here also.

!This is the running config of the router: 10.10.11.93
!----------------------------------------------------------------------------
!version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname navsol
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
enable secret 5 $1XXXXXXXX.
!
username nXXXXl privilege 15 secret 5 $1XXXXXXX
clock timezone PCTime -6
clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
no ip source-route
ip cef
!
!
ip tcp synwait-time 10
!
!
ip ips po max-events 100
no ip bootp server
ip domain name navigationsolutions.com
ip name-server 64.XXX.XX.90
ip name-server 64.XXX.XXX.138
ip ssh time-out 60
ip ssh authentication-retries 2
no ftp-server write-enable
!
!
!
!
!
!
!
!
interface FastEthernet0/0
description $FW_INSIDE$$ETH-LAN$$INTF-INFO-FE 0$
ip address 10.10.11.93 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
description $FW_OUTSIDE$$ETH-WAN$
ip address 68.XXX.XXX.105 255.255.255.224
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
no mop enabled
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1 permanent
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
!
logging trap debugging
access-list 1 remark INSIDE_IF=FastEthernet0/0
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.10.11.0 0.0.0.255
no cdp run
!
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
end

 

[JOAMON]

Well router actually looks pretty good...Would change the following though:
Reads:
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1 permanent
Change to next hop ip address:
ip route 0.0.0.0 0.0.0.0 68.xxx.xxx.xxx permanent

By point default route at an interface it will arp everything that passes the interface. With an ip address ip will only arp internal and external ip block only.

By the way what is this routers f0/1 ethernet port connected to?

 

[navsol]

It is going to a SDSL Line. I pointed the next hop to my DSL gateway address and it works. Should I remove the hop to the F0/1? Thanks

 

[JOAMON]

Yes....should not need it.

 

[navsol]

I appreciate all the help. It seems to be up and working great.

 

[JOAMON]

No Problem ***

 

[navsol]

I went to configure other PC's to access the internet through the cisco router and none of them can do it. It seems the PC I configured the router on is the only one that can get to the internet.

 

[JOAMON]

OK....dont see anything in the config limiting to only one PC....do you need to change the gateway address at the PC's or maybe the DNS settings. Can the other PCs ping 206.163.82.4?

 

[JOAMON]

Did you get this router with the advanced security feature set? Just installed a 2811 a month ago...great piece of hardware. The new style T1 wics are really buggy though....went through 6 wic-1dsu-t1-v2 in order to get three that worked.

 

[JOAMON]

Can your pc's ping the router interface ?

 

[navsol]

I changed the gateway and I can ping the address you provided, but internet explorer gives me cannot find server or DNS error

 

[navsol]

I can ping the inside and outside interfaces ok

 

[JOAMON]

Ok....enter the following in your browser and let me know results:

http://66.102.7.104/

 

[navsol]

I setup an easyvpn ipsec tunnel could this be the problem

 

[JOAMON]

Probably not...most likely need to adjust DNS settings on PC's to your new ISP settings. How is your PC setup and are the other PC's the same?

 

[JOAMON]

If you can enter:

http://66.102.7.104/

in a PC browser and get google but cannot enter

http://www.google.com

then you have a DNS problem.

 

[navsol]

Actually now my PC is not getting to the internet also. So as it stands no pcs can get to the internet, but I can ping the network on the other end of the VPN connection.

 

[JOAMON]

Would need to see the config......also if you have not saved changes since putting in VPN then reload the router to undo these changes.

 

[navsol]

I cannot get to google either way