Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cisco 831 Router Problem

Status
Not open for further replies.

WONGx27

IS-IT--Management
Joined
May 14, 2007
Messages
10
Location
US
Hello all,

I brought a cisco 831 router and I cannot configure it to my DSL modem from verizon for home usage. Can someone please help me with the configuration on how to configure it through the CLI. I just received my CCNA as associate but never worked with cisco routers before. I am willing to learn. Below is the following ip address to my DSL Router I tried and tried but I cannot get the router up and running it has 2 ethernet port and 4 fastethernet port.

Wan- 71.160.105.108
Subnet mask- 255.255.255.0
Gateway- 71.160.105.1
Dns- 68.238.64.12
Dns- 68.238.128.12

Cisco IOS Software, C831 Software (C831-K9O3SY6-M), Version 12.3(8)T5, RELEASE SOFTWARE (fc1)
Technical Support: Copyright (c) 1986-2004 by Cisco Systems, Inc.
Compiled Wed 29-Sep-04 22:42 by cmong

ROM: System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1)

Router uptime is 44 minutes
System returned to ROM by reload
System image file is "flash:c831-k9o3sy6-mz.123-8.T5"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco C831 (MPC857DSL) processor (revision 0x200) with 46695K/2457K bytes of memory.
Processor board ID AMB070800QF (594932646), with hardware revision 0000
CPU rev number 7
2 Ethernet interfaces
4 FastEthernet interfaces
128K bytes of NVRAM.
24576K bytes of processor board System flash (Read/Write)
2048K bytes of processor board Web flash (Read/Write)

Configuration register is 0x2102

Router#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Ethernet0 unassigned YES unset administratively down down
Ethernet1 192.168.1.64 YES DHCP up up
FastEthernet1 unassigned YES unset down down
FastEthernet2 unassigned YES unset down down
FastEthernet3 unassigned YES unset down down
FastEthernet4 unassigned YES unset down down
Router#
Router#sh run
Building configuration...

Current configuration : 1123 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
memory-size iomem 5
!
no aaa new-model
ip subnet-zero
!
!
ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool wong
network 192.168.1.0 255.255.255.0
domain-name home
dns-server 68.238.64.12
default-router 192.168.1.1
!
!
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
no ip address
shutdown
!
interface Ethernet1
ip address dhcp
ip nat inside
ip virtual-reassembly
duplex auto
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
control-plane
!
!
line con 0
no modem enable
transport preferred all
transport output all
line aux 0
line vty 0 4
!
scheduler max-task-time 5000
end

Router#
 
Hello
Is the Verizon modem doing DHCP? Did it give the router the 192.168.164 address on Ethernet 1.If this is the case put the below commands on the router.

**IMPORTANT**
Change your internal subnet!!!

ip dhcp excluded-address 192.168.2.1 192.168.2.10
!
ip dhcp pool wong
network 192.168.2.0 255.255.255.0
domain-name home
dns-server 68.238.64.12
default-router 192.168.2.1

interface Ethernet1
ip address dhcp
ip nat outside

configure terminal
interface Ethernet0
ip address 192.168.2.1 255.255.255.0
ip nat inside
no shutdown

ip route 0.0.0.0 0.0.0.0 Ethernet0

ip nat inside source list 1 interface Ethernet0 overload

access-list 1 permit 192.168.2.0 0.0.0.255

Regards
 
Thank you very much for your help, I tried the above commands and it still dont work, I plug it into the fastethernet 1-4 but I have no connectivity. below are the configuration when I do a show run.



Router#sh run
Building configuration...

Current configuration : 1267 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
memory-size iomem 5
!
no aaa new-model
ip subnet-zero
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
!
ip dhcp pool wong
network 192.168.2.0 255.255.255.0
domain-name home
dns-server 68.238.64.12
default-router 192.168.2.1
!
!
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Ethernet1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface Ethernet0 overload
!
!
!
control-plane
!
!
line con 0
no modem enable
transport preferred all
transport output all
line aux 0
line vty 0 4
!
scheduler max-task-time 5000
end

Router#ping 4.2.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Router#
 
Hello
Can you comfirm that your'e getting an address from the Verizon Modem.Also make sure that the ethernet0 interface is the one associated with the Switch ports.
From the Router try to ping the Verizon gateway and DNS server.Also post a "show ip nat translation".
Regards
 
hello all.
Aas far as i supposed, i believe wong has plug the ethernet1 on the Verizon Modem. So, if this is the case the ethernet1 should be the default router to the outside.

For the inside to ->outside translation, the router make first the routing table lookup (rooting), and then the Nat. So the Nat will work as long as the router has a routing for outside which drives the packets into an 'ip nat outside' interface.
(sorry about my English).

So, Minue , please allow me to make some corrections...

ip route 0.0.0.0 0.0.0.0 Ethernet1
&
ip nat inside source list 1 interface Ethernet1 overload

Then, give the debug ip packet and debug ip nat commands and after that generate a ping. Then give the command sh ip nat tra. you should post those outputs so we could help you further from there.

Goodluck.

 
Hello
Sorry guys about that slip up.That's what you get for robbing a post on the job instead of working ;-)
Quick spotting "kokolatas" !!!
Regards
 
Hello all, your help is greatly appreciated. Thank you very much. However I tried but I still cannot get connectivity I type up the above command in the IOS and went to the command prompt did ipconfig /release and ipconfig /renew still no ip address. I tried ping 4.2.2.1 still doesn't work. on the verizon router there is 4 ports, I plug it into port1 with a straight through cat5e cable, into the back of the cisco e1 port, it automatically gives me a dhcp of 192.168.1.64 and from the cisco fa1-4 i plug a straight cat5 cable to my computer. I am new to this sorry I dont have that much of cisco experience this is my first time working on a router. Below are the configurations can somemone please help me Thank you.



en
Router#sh ver
Cisco IOS Software, C831 Software (C831-K9O3SY6-M), Version 12.3(8)T5, RELEASE SOFTWARE (fc1)
Technical Support: Copyright (c) 1986-2004 by Cisco Systems, Inc.
Compiled Wed 29-Sep-04 22:42 by cmong

ROM: System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1)

Router uptime is 23 minutes
System returned to ROM by reload
System image file is "flash:c831-k9o3sy6-mz.123-8.T5"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco C831 (MPC857DSL) processor (revision 0x200) with 46695K/2457K bytes of memory.
Processor board ID AMB070800QF (594932646), with hardware revision 0000
CPU rev number 7
2 Ethernet interfaces
4 FastEthernet interfaces
128K bytes of NVRAM.
24576K bytes of processor board System flash (Read/Write)
2048K bytes of processor board Web flash (Read/Write)

Configuration register is 0x2102

Router#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Ethernet0 192.168.2.1 YES manual up up
Ethernet1 192.168.1.64 YES DHCP up up
FastEthernet1 unassigned YES unset down down
FastEthernet2 unassigned YES unset down down
FastEthernet3 unassigned YES unset down down
FastEthernet4 unassigned YES unset down down
Router#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

C 192.168.1.0/24 is directly connected, Ethernet1
C 192.168.2.0/24 is directly connected, Ethernet0
S* 0.0.0.0/0 is directly connected, Ethernet1
Router#sh run
Building configuration...

Current configuration : 1275 bytes
!
version 12.3
service config
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
memory-size iomem 5
!
no aaa new-model
ip subnet-zero
!
!
!
ip dhcp pool wong
network 192.168.2.0 255.255.255.0
domain-name home
dns-server 68.238.64.12
default-router 192.168.2.1
!
!
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Ethernet1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet1
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface Ethernet1 overload
!
!
access-list 1 permit 192.168.2.0 0.0.0.255
!
control-plane
!
!
line con 0
no modem enable
transport preferred all
transport output all
line aux 0
line vty 0 4
!
scheduler max-task-time 5000
end

Router#ping 4.2.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Router#ping 192.168.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
Router#ping 68.238.64.12

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 68.238.64.12, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Router#^Z
Router#
 
this is a continuation the the above post sorry i forgot to include it this is what happen when i did debug ip packet and debug ip nat translations.



Interface IP-Address OK? Method Status Protocol
Ethernet0 192.168.2.1 YES manual up up
Ethernet1 192.168.1.64 YES DHCP up up
FastEthernet1 unassigned YES unset down down
FastEthernet2 unassigned YES unset down down
FastEthernet3 unassigned YES unset down down
FastEthernet4 unassigned YES unset down down
Router#ping 4.2.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.1, timeout is 2 seconds:

*Mar 1 00:31:46.631: IP: tableid=0, s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), routed via RIB
*Mar 1 00:31:46.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, sending
*Mar 1 00:31:46.635: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, encapsulation failed.
*Mar 1 00:31:48.631: IP: tableid=0, s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), routed via RIB
*Mar 1 00:31:48.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, sending
*Mar 1 00:31:48.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, encapsulation failed.
*Mar 1 00:31:50.631: IP: tableid=0, s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), routed via RIB
*Mar 1 00:31:50.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, sending
*Mar 1 00:31:50.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, encapsulation failed.
*Mar 1 00:31:52.631: IP: tableid=0, s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), routed via RIB
*Mar 1 00:31:52.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, sending
*Mar 1 00:31:52.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, encapsulation failed.
*Mar 1 00:31:54.631: IP: tableid=0, s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), routed via RIB
*Mar 1 00:31:54.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, sending
*Mar 1 00:31:54.631: IP: s=192.168.1.64 (local), d=4.2.2.1 (Ethernet1), len 100, encapsulation failed.
Success rate is 0 percent (0/5)
Router#debug ip nat
IP NAT debugging is on
Router#sh ip nat translation

Router#sh ip nat
% Incomplete command.

Router#sh ip nat tra

Router#
 
Hello
If you connect a PC directly to the verizon modem,does it work?Please tell us what's the address it's giving to the PC.Also try to ping 71.160.105.1 gateway.Try also putting 71.160.105.1 in your ip route statement.

ip route 0.0.0.0 0.0.0.0 71.160.105.1

Regards
 
Hello
You should be getting some output from "sh ip nat tra" ,it's seems NAT isn't working.Do a show access-list to see if you are getting hits,try the "access-list 1 permit any" and to be on the safe side put in the command "ip routing"
Regards
 
OK, it's been a while since I use Cisco stuff but...

If the DHCP pool is set up on E0, why is he plugging is PC into FA0-4?

The way I'm looking at the config, the E0 interface is the 'LAN' side.

MCSE CCNA CCDA
 
Whoops...read it wrong. E0 contains all 4 fast ethernet ports---fa1-4 are actually a switching module (layer 2 only), and E0 is the layer 3 interface for them. Physically on the router, I think you will see E1, FA1, FA2, FA3 and FA4.

Burt
 
thank you sooooooo much it works now, I changed the ip route command to 0.0.0.0 0.0.0.0 and the gateway now I have connectivity for ports 1 but how can i get connectivity for port 1-4, I would like to thank all of you for helping me with this, your help is greatly appreciated. Also I have one question when mention in the above sentence what does this mean ip nat inside source list 1 interface Ethernet1 overload can someone please explain it to me thank you.



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco C831 (MPC857DSL) processor (revision 0x200) with 46695K/2457K bytes of memory.
Processor board ID AMB070800QF (594932646), with hardware revision 0000
CPU rev number 7
2 Ethernet interfaces
4 FastEthernet interfaces
128K bytes of NVRAM.
24576K bytes of processor board System flash (Read/Write)
2048K bytes of processor board Web flash (Read/Write)

Configuration register is 0x2102

Router#
Router#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Ethernet0 192.168.2.1 YES NVRAM up up
Ethernet1 192.168.1.64 YES DHCP up up
FastEthernet1 unassigned YES unset down down
FastEthernet2 unassigned YES unset down down
FastEthernet3 unassigned YES unset down down
FastEthernet4 unassigned YES unset down down
Router#sh run
Building configuration...

Current configuration : 1400 bytes
!
version 12.3
service config
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
memory-size iomem 5
!
no aaa new-model
ip subnet-zero
!
!
!
ip dhcp pool wong
network 192.168.2.0 255.255.255.0
domain-name home
dns-server 68.238.64.12
default-router 192.168.2.1
!
!
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Ethernet1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 71.160.105.1
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface Ethernet1 overload
!
!
access-list 1 permit 192.168.2.0 0.0.0.255
!
control-plane
!
!
line con 0
no modem enable
transport preferred all
transport output all
line aux 0
transport preferred all
transport output all
line vty 0 4
login
transport preferred all
transport input all
transport output all
!
scheduler max-task-time 5000
end

Router#
Router#ping 4.2.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/36 ms
Router#ping
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 209.131.36.158, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 36/40/44 ms
Router#
 
i am glad that it works.

The ip nat inside source list 1 interface Ethernet1 overload command, means that every packet that comes into the ip nat inside interface, (e0), with a source address, those which have been defined by your standard ACL 1 , is subject for translation. Those source address will be translate to the address (192.168.1.64)of your defined PAT interface.Which is the e1 interface. When you put the statement 'overload' in the end of the command, you are actually do PAT (port address translation) instead of NAT (network address translation). In that case,the MAIN difference is that NAT, use address from a defined poll of (usually) private address.And i'm saying in that case, because you can also use pat with a
defined pool of address.
In the case of Nat you should wrote,
'ip nat pool poll_name <start ip address> <end ip address> prefix or netmask'. Also, 'ip nat inside source list 1 pool pool_name'.
For example, ip nat pool wong 12.12.12.1 12.12.12.10 netmask 255.255.255.0 & ip nat inside source list 1 pool wong.

Minue, can you please explain me, why the command ip route 0.0.0.0 0.0.0.0 71.160.105.1 worked out?
there is no network 71.160.105.x installed in the routing table.so, how can the router forward the packets from the e1 interface? I thought that the ip route 0.0.0.0 0.0.0.0 Ethernet1 would be enough...and i believe it should be, but it seems that is not...i must say i get confused on that one.
Thanks.
 
you're right burtsbees, I'm not familiar with this particular model.
Thanks for knock upside the head, sometimes I need it.

MCSE CCNA CCDA
 
can you please explain me, why the command ip route 0.0.0.0 0.0.0.0 71.160.105.1 worked out?

That is the next hop---"Below is the following ip address to my DSL Router I tried and tried but I cannot get the router up and running it has 2 ethernet port and 4 fastethernet port.

Wan- 71.160.105.108
Subnet mask- 255.255.255.0
Gateway- 71.160.105.1
Dns- 68.238.64.12
Dns- 68.238.128.12"

That way, it does not have to arp to find out the next hop. Your default route would have worked.

Burt
 
THANK YOU ALL FOR EXPLAINING IT TO ME, I AM NEW TO THIS I WOULD LIKE TO LEARN MORE. ALSO THAT YOU KOKOLATAS NOW IT WORKS SO WHEN I DO SH IP NAT TRANSLATIONS THIS IS WHAT I GET

Pro Inside global Inside local Outside local Outside global
tcp 192.168.1.64:49647 192.168.2.3:49647 66.77.107.72:2121 66.77.107.72:2121
tcp 192.168.1.64:49648 192.168.2.3:49648 72.172.227.7:80 72.172.227.7:80
tcp 192.168.1.64:49654 192.168.2.3:49654 66.77.107.72:2146 66.77.107.72:2146
tcp 192.168.1.64:49663 192.168.2.11:49663 74.125.15.153:80 74.125.15.153:80
tcp 192.168.1.64:49710 192.168.2.11:49710 66.77.107.71:2122 66.77.107.71:2122
tcp 192.168.1.64:49714 192.168.2.11:49714 209.85.139.176:80 209.85.139.176:80

THANK YOU ONCE AGAIN FOR ALL THE HELP AND EXPLAINATION EVERYONE I APPRECIATE IT
 
hello all, my cisco 831 router is working fine, I have a couple of questions. for my LAN i am on the network 192.168.2.0 and for my wireless with verizon I am on network 192.168.1.0 but for some reason I cannot get my wireless up and running i type in the WEP encryption key and it says the connection is excellent, but i have no connectivity. i tried typing on my cisco router router RIP network 192.168.1.0 and network 192.168.2.0 and they both ping but then i will not have connectivity on the cisco lan 831 wired router. Can someone please help me Thank you.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top