cisco 1600 dsl problem

[suanny]

Hi Need help.
I have a cisco 1600 with ios 12.1-3.xg6
it is to connect with pppoe.

I cannot get my internet to work from my pc going trough the router.

the router gets the address outside
the router can ping yahoo.com and I can ping a server in the inside form the router.
I can ping the router from the inside pc.
I cannot ping an outside ip address (yahoo = 216.109.125.67)
or

http://www.yahoo.com)

from a pc

thank you.
Suanny

 

[oj88]

You need Network Address Translation or NAT to make this work.

Here's a sample config for you to start on: (I have left out the more obvious commands like "ip address... " etc.)

interface Fastethernet0/0
description Connected to ISP
ip nat outside
!
interface Fastethernet0/1
description Connected to LAN
ip nat inside
!
ip nat inside source list NATpool interface Fastethernet0/0 overload
ip access-list standard NATpool
permit 192.168.1.0 0.0.0.255 <-- permit all LAN networks that
permit 192.168.2.0 0.0.0.255 <-- will need access to the Internet
!

Regards, Orlando Palomar Jr
CCIE# 11206, CCNP
CIPT Operations Specialist
Phil-Data Business Systems, Inc.

 

[suanny]

thanks for the asnswer.

I have a nat comand here is my config.
can you take a look please?


ip name-server 198.235.216.110
ip name-server 207.236.176.12


ip routing
ip subnet-zero
ip classless
vpdn enable
no vpdn logging
vpdn-group pppoe
request-dialin
protocol pppoe

interface ethernet 0
ip address 10.9.1.1 255.0.0.0
ip nat inside
no shut

interface Ethernet1
no ip address
no ip proxy-arp
ip nat outside
no ip mroute-cache
pppoe enable
pppoe-client dial-pool-number 1
no shut


interface Dialer1
ip address negotiated
encapsulation ppp
dialer pool 1
dialer-group 1
ppp chap hostname xxxxxx
ppp chap password xxxxx
ppp pap sent-username xxxxxx password xxxxxx

ip route 0.0.0.0 0.0.0.0 dialer1
end
configure terminal
ip nat inside source list 1 interface dialer1 overload
access-list 1 permit 10.9.1.1 0.255.255.255
end

thanks

 

[oj88]

Ok, I think I see your problem. If you're using a dialer interface, you should configure &quot;ip nat outside&quot; on Dialer1.

Like so:

interface Ethernet1
no ip nat outside
!
interface Dialer1
ip nat outside
!

Regards, Orlando Palomar Jr
CCIE# 11206, CCNP
CIPT Operations Specialist
Phil-Data Business Systems, Inc.

 

[suanny]

I tryed it and it did not work

do you have any other suggestions?


thanks
Suanny

 

[oj88]

Please do a &quot;debug ip nat&quot; and ping cisco.com's IP address (198.133.219.25) from the PC and see if it is performing NAT. If it's ok, also post the results here.

Also do a traceroute from the PC and post the results. Orlando Palomar Jr
CCIE# 11206, CCNP
CIPT Operations Specialist
Phil-Data Business Systems, Inc.

 

[suanny]

Hi Orlando,
thanks.
beside the info you gave me I tryed mtu 1492
after that it started working.
the only thing I dont get, is that my webpage and my email
does not work properly.(hosting it in house)
I have put other lines.
ip nat inside source static tcp 10.3.3.3 80 interface 80
and so on for mail port 110, and 25.
I am olso using dns2go and no-ip.com.
I think I may have to open another port on the router for the client software.

can you coment on that?

thank you.

Suanny

 

[12122053]

I had the same problems with 827 DSL router, turn's out that the router has problems with fragmenting, ouch! I had to replace the router, i think there is still no fix. The only difference with your situation I was using a ADSL WIC card, im assuming your using a external modem with your 1605. Check cisco's site for troubleshooting!

 

[oj88]

Suanny,

You're right, I forgot about the mtu's. About 2 years ago, i set up a (scoff!) linux box at home to act as a dsl router, firewall, and web server. Took me about a week to track down the problem. As it turns out, it was the mtu.

You seemed to have figured that one out in a couple of days.. Good job!

With regards to your config, did you use:

ip nat inside source static tcp 10.3.3.3 80 interface Dialer1 80

Do this, while your dsl is connected, figure out the IP address it is assigned to and try to point your browser to it.

ie.

If you do a show ip int brief, you'll be able to see what Dialer1 is using as an IP address (say, 205.1.2.3)

Using your web browser, try accessing the web server through this (

http://205.1.2.3)

and see if it works. While doing this, do a debug ip nat and see what's going on inside the router.

Orlando Palomar Jr
CCIE# 11206, CCNP
CIPT Operations Specialist
Phil-Data Business Systems, Inc.

 

[suanny]

Hi Orlando

thank you for the information.
I tryed yoursuggestion.
but after a while it started working.
I can reach the webserver from the outside.
I can get email etc.
I cannot reach is the apache web server from the outside.

I will try changing the mtu. ont the ethernet.
I read some were that I had to open a port number on the router for the noip dns client to work.


thank you again.

Suanny