Problem with 1720 and Internet access -- need help 1

[petermit01]

Hi,

I've poured over many threads trying to find one that contains the solution to my problem. No luck yet

I am configuring a new 1720 router. The internal LAN (192.168.x.x) is working fine. The router has a WIC-1enet (ethernet 0) being used to connect to the cable modem from ISP.

Internet >> Cable modem >> Cisco 1720 >> LAN

The ISP assigns a dynamic address. Ethernet 0 is picking up an address just fine. The router is able to ping the ISP gateway and all internal LAN addresses but that is it. I have no success pinging the ISP dns or any other website. Obviously I'm not able to get on the internet from any LAN node.

Here is the current running-config:

Cisco1720#sh run
Building configuration...

Current configuration : 1775 bytes
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Cisco1720
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$l2kE$bx9DHET/1RHaBKBnc3XgT0
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
!
!
ip name-server 192.168.1.23
ip name-server 24.161.193.64
ip dhcp excluded-address 192.168.1.200 192.168.1.240
!
ip dhcp pool 1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.23
!
ip cef
!
!
!
!
interface Ethernet0
description connected to Internet
ip address dhcp
ip access-group 110 in
ip access-group 110 out
ip nat outside
half-duplex
!
interface FastEthernet0
description connected to EthernetLAN
ip address 192.168.1.1 255.255.255.0
ip access-group 110 in
ip access-group 110 out
ip nat inside
ip tcp adjust-mss 1452
speed auto
!
interface Dialer1
description connected to Internet
ip address negotiated
ip access-group 110 in
ip access-group 110 out
ip mtu 1492
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 2
ppp authentication chap pap callin
ppp chap hostname inatmitchells
ppp chap password 0 feedba1k
ppp pap sent-username inatmitchells password 0 feedba1k
!
router rip
version 2
passive-interface Dialer1
network 192.168.1.0
no auto-summary
!
ip nat inside source list 1 interface Dialer1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 110 permit ip any any
dialer-list 2 protocol ip permit
snmp-server community public RO
snmp-server enable traps tty
banner motd ^CUp and running!^C
!
line con 0
exec-timeout 0 0
password feedba1k
login
line aux 0
line vty 0 4
password feedba1k
login
no scheduler allocate
!
end

btw: I pieced this configuration together using ConfigMaker and from other bits I've seen in other configs on tek-tips.

I realize using access-group 110 (permit any any) is overkill and redundant but I am at a loss.

Your help is very much appreciated!

petermit01@yahoo.com

 

[lui3]

does your cable modem require a dialer interface configuration to work properly. mine does not? just curious. try changing the default route to

ip route 0.0.0.0 0.0.0.0 ether0



Lui3
CCNP,CCDA,A+/Net+
Cisco Wireless Specialization

 

[petermit01]

No, I don't think a dialer is required. I'll try your suggestion, thx.

 

[petermit01]

I changed the ip route to eth0 and removed the dialer. Still experiencing same problem (see beginning thread).

Here is new config:

sh run
Building configuration...

Current configuration : 1388 bytes
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Cisco1720
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$l2kE$bx9DHET/1RHaBKBnc3XgT0
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
!
!
ip name-server 192.168.1.23
ip name-server 24.161.193.64
ip dhcp excluded-address 192.168.1.200 192.168.1.240
!
ip dhcp pool 1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.23
!
ip cef
!
!
!
!
interface Ethernet0
description connected to Internet
ip address dhcp
ip access-group 110 in
ip access-group 110 out
ip nat outside
half-duplex
!
interface FastEthernet0
description connected to EthernetLAN
ip address 192.168.1.1 255.255.255.0
ip access-group 110 in
ip access-group 110 out
ip nat inside
ip tcp adjust-mss 1452
speed auto
!
router rip
version 2
network 192.168.1.0
no auto-summary
!
ip nat inside source list 1 interface Dialer1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0
ip http server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 110 permit ip any any
dialer-list 2 protocol ip permit
snmp-server community public RO
snmp-server enable traps tty
banner motd ^CUp and running!^C
!
line con 0
exec-timeout 0 0
password <>
login
line aux 0
line vty 0 4
password <>
login
!
no scheduler allocate
!
end

 

[lui3]

now you need to change the nat statement to reflect the change

ip nat inside source list 1 interface Ether0 overload



Lui3
CCNP,CCDA,A+/Net+
Cisco Wireless Specialization

 

[petermit01]

I made the change. Still no success.

Here is the new config:

sh run
Building configuration...

Current configuration : 1256 bytes
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Cisco1720
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$l2kE$bx9DHET/1RHaBKBnc3XgT0
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
!
!
ip name-server 192.168.1.23
ip name-server 24.161.193.64
ip dhcp excluded-address 192.168.1.200 192.168.1.240
!
ip dhcp pool 1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.23
!
ip cef
!
!
!
!
interface Ethernet0
description connected to Internet
ip address dhcp
ip nat outside
half-duplex
!
interface FastEthernet0
description connected to EthernetLAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
speed auto
!
router rip
version 2
network 192.168.1.0
no auto-summary
!
ip nat inside source list 1 interface Ethernet0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0
ip http server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 110 permit ip any any
snmp-server community public RO
snmp-server enable traps tty
banner motd ^CUp and running!^C
!
line con 0
exec-timeout 0 0
password 7 121F001216090D5521
login
line aux 0
line vty 0 4
password 7 1411170E08062B7A2F
login
!
no scheduler allocate
!
end

 

[lui3]

what default gateway ip address is the router receiving via dhcp

this is a weird one. this config should work. i will look into it more. i have a lab here i will config up and check

Lui3
CCNP,CCDA,A+/Net+
Cisco Wireless Specialization

 

[lui3]

show interface ethernet 0

show interface fastethernet 0/0

please post


Lui3
CCNP,CCDA,A+/Net+
Cisco Wireless Specialization

 

[lui3]

ok. lets get the actual ip address of the default gateway from the cable modem provider. then instead of

ip route 0.0.0.0 0.0.0.0 ethernet 0

lets try

ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx with x being the ip address of the gateway from dhcp

i think that will work since just sending it out the interface will send it into a point to mulitpoint network and it won't necessarily know who its default gateway should be so its getting lost. if it was a point to point connection that statement would work. my bad. lets try that and see what happens. try pinging a host name and an ip address on the outside instead of checking with internet explorer.

also if you could do a traceroute from a pc and post

as well as a ping from the router using the source address as ethernet 0 source address. that will verify connectivity.

thanks. sorry for the many posts. just working through the problem without being in front of the box is more difficult. we'll get it figured out

try the default route thing first.

Lui3
CCNP,CCDA,A+/Net+
Cisco Wireless Specialization

 

[petermit01]

IT'S WORKING!

Here is the running-config:

sh run
Building configuration...

Current configuration : 1277 bytes
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Cisco1720
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$l2kE$bx9DHET/1RHaBKBnc3XgT0
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
!
!
ip name-server 24.161.193.64
ip dhcp excluded-address 192.168.1.200 192.168.1.240
!
ip dhcp pool 1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.23
!
ip cef
!
!
!
!
interface Ethernet0
description connected to Internet
ip address dhcp
ip nat outside
half-duplex
!
interface FastEthernet0
description connected to EthernetLAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
speed auto
!
router rip
version 2
network 192.168.1.0
no auto-summary
!
ip nat inside source list 1 interface Ethernet0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0
ip route 0.0.0.0 0.0.0.0 24.161.200.1
ip http server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 110 permit ip any any
dialer-list 2 protocol ip permit
snmp-server community public RO
snmp-server enable traps tty
banner motd ^CUp and running!^C
!
line con 0
exec-timeout 0 0
password 7 121F001216090D5521
login
line aux 0
line vty 0 4
password 7 1411170E08062B7A2F
login
!
!
end

###Results of some ping commands###

Cisco1720#ping

http://www.yahoo.com

Translating "

http://www.yahoo.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 66.94.230.48, timeout is 2 seconds:
..!.!
Success rate is 40 percent (2/5), round-trip min/avg/max = 28/28/28 ms
Cisco1720#ping

http://www.google.com

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.239.57.99, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/29/32 ms
Cisco1720#ping

http://www.shoutcast.com

Translating "

http://www.shoutcast.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 205.188.234.56, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

####Here is a ping and tracert on a PC node####

C:\ping

http://www.yahoo.com

Pinging

http://www.yahoo.akadns.net

[66.94.230.46] with 32 bytes of data:

Request timed out.
Request timed out.
Reply from 66.94.230.46: bytes=32 time=31ms TTL=48
Request timed out.

Ping statistics for 66.94.230.46:
Packets: Sent = 4, Received = 1, Lost = 3 (75% loss),
Approximate round trip times in milli-seconds:
Minimum = 31ms, Maximum = 31ms, Average = 7ms

C:\ping

http://www.yahoo.com

Pinging

http://www.yahoo.akadns.net

[66.94.230.46] with 32 bytes of data:

Reply from 66.94.230.46: bytes=32 time=31ms TTL=48
Request timed out.
Reply from 66.94.230.46: bytes=32 time=31ms TTL=48
Request timed out.

Ping statistics for 66.94.230.46:
Packets: Sent = 4, Received = 2, Lost = 2 (50% loss),
Approximate round trip times in milli-seconds:
Minimum = 31ms, Maximum = 31ms, Average = 15ms

C:\tracert

http://www.google.com

Tracing route to

http://www.google.akadns.net

[216.239.57.104]
over a maximum of 30 hops:

1 <10 ms <10 ms <10 ms 192.168.1.1
2 <10 ms 15 ms <10 ms 10.56.144.1
3 15 ms 16 ms 16 ms atm2-0.bkfdca1-ubr1.bak.rr.com [24.161.192.78]
4 15 ms 16 ms 16 ms pos1-0.bkfdca1-gsr1.bak.rr.com [24.161.192.73]
5 15 ms 31 ms 16 ms pos0-3.orngca4-gsr2.socal.rr.com [24.161.192.122
]
6 15 ms 16 ms 16 ms so-0-0-0.tustca1-rtr1.socal.rr.com [66.75.161.22
]
7 15 ms 16 ms 15 ms so-1-0.hsa1.tustin1.level3.net [65.58.240.9]
8 16 ms 15 ms 16 ms so-7-0-0.mpls1.tustin1.level3.net [4.68.114.5]
9 32 ms 31 ms 31 ms ge-0-1-0.bbr1.sanjose1.level3.net [64.159.1.129]

10 31 ms 31 ms 16 ms ge-6-2.ipcolo2.sanjose1.level3.net [64.159.2.132
]
11 31 ms 31 ms 31 ms unknown.level3.net [209.247.202.218]
12 32 ms 31 ms 31 ms 216.239.47.194
13 31 ms 31 ms 31 ms 216.239.49.93
14 31 ms 47 ms 31 ms 216.239.57.104

Trace complete.

###It appears that some packets are being dropped. Any recommendations for clearing that up? Also, what is recommended for access-list? Thank you very much for your help!!!###

 

[lui3]

ip route 0.0.0.0 0.0.0.0 Ethernet0


remove this statement using

no ip route 0.0.0.0 0.0.0.0 Ethernet0


you are load balancing across two default router. one works one does not. hence you are dropping half of the packets. remove that statement and you will be in business. retest and let me know.

Lui3
CCNP,CCDA,A+/Net+
Cisco Wireless Specialization

 

[petermit01]

Hi lui3,

Thanks for your help!

The configuration is routing Internet traffic. However, it doesn't seem to be working as fast as my old linksys router. Sometimes it takes up to ten seconds to open a webpage or will time out. I'm not sure if there is something I can do with the configuration to speed up web browsing. Let me know, thanks again!

######Here is a current running-config######


Building configuration...

Current configuration : 1267 bytes
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Cisco1720
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$l2kE$bx9DHET/1RHaBKBnc3XgT0
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
!
!
ip name-server 24.161.193.64
ip dhcp excluded-address 192.168.1.200 192.168.1.240
!
ip dhcp pool 1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.23
!
ip cef
!
!
!
!
interface Ethernet0
description connected to Internet
ip address dhcp
ip nat outside
half-duplex
!
interface FastEthernet0
description connected to EthernetLAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
speed auto
!
router rip
version 2
network 192.168.1.0
no auto-summary
!
ip nat inside source list 1 interface Ethernet0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 24.161.200.1
no ip http server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 110 permit ip any any
dialer-list 2 protocol ip permit
snmp-server community public RO
snmp-server enable traps tty
banner motd ^CUp and running!^C
!
line con 0
exec-timeout 0 0
password 7 121F001216090D5521
login
line aux 0
line vty 0 4
password 7 1411170E08062B7A2F
login
!
no scheduler allocate
!
end

############## HERE ARE IP STAT'S #############


Cisco1720#sh ip traffic

IP statistics:
Rcvd: 2451619 total, 311662 local destination
0 format errors, 0 checksum errors, 26 bad hop count
0 unknown protocol, 0 not a gateway
0 security failures, 0 bad options, 0 with options
Opts: 0 end, 0 nop, 0 basic security, 0 loose source route
0 timestamp, 0 extended security, 0 record route
0 stream ID, 0 strict source route, 0 alert, 0 cipso, 0 ump
0 other
Frags: 0 reassembled, 5 timeouts, 0 couldn't reassemble
0 fragmented, 0 couldn't fragment
Bcast: 72493 received, 681 sent
Mcast: 0 received, 3 sent
Sent: 237435 generated, 1156367 forwarded
Drop: 85322 encapsulation failed, 24 unresolved, 0 no adjacency
19347 no route, 0 unicast RPF, 0 forced drop
Drop: 0 packets with source IP address zero

ICMP statistics:
Rcvd: 0 format errors, 0 checksum errors, 0 redirects, 27 unreachable
207208 echo, 3 echo reply, 0 mask requests, 0 mask replies, 0 quench
0 parameter, 0 timestamp, 0 info request, 0 other
0 irdp solicitations, 0 irdp advertisements
Sent: 0 redirects, 19741 unreachable, 18 echo, 207208 echo reply
0 mask requests, 0 mask replies, 0 quench, 0 timestamp
0 info reply, 31 time exceeded, 0 parameter problem
0 irdp solicitations, 0 irdp advertisements

IP-EIGRP statistics:
Rcvd: 0 total
Sent: 0 total

UDP statistics:
Rcvd: 95015 total, 0 checksum errors, 74791 no port
Sent: 1071 total, 0 forwarded broadcasts

TCP statistics:
Rcvd: 9409 total, 0 checksum errors, 373 no port
Sent: 9373 total

OSPF statistics:
Rcvd: 0 total, 0 checksum errors
0 hello, 0 database desc, 0 link state req
0 link state updates, 0 link state acks

Sent: 0 total

ARP statistics:
Rcvd: 8874794 requests, 71 replies, 0 reverse, 0 other
Sent: 17039 requests, 14072 replies (0 proxy), 0 reverse


##########HERE ARE SOME PINGS ON VARIOUS WEBSITES. NOTICE THAT SOME ARE 100% AND OTHERS PARTIAL OR 0% SUCCESS.#######



Cisco1720#ping

http://www.tek-tips.com

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.45.19.33, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Cisco1720#ping

http://www.tek-tips.com

           cisco.com
Translating "

http://www.cisco.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 198.133.219.25, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 24/28/36 ms
Cisco1720#ping

http://www.google.com

Translating "

http://www.google.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.239.57.99, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 24/32/44 ms
Cisco1720#ping

http://www.yahoo.com

Translating "

http://www.yahoo.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 66.94.230.39, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/36 ms
Cisco1720#ping www.  drudgereport.com
Translating "

http://www.drudgereport.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 65.77.130.210, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/29/32 ms
Cisco1720#ping

http://www.tek-tips.com

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.45.19.33, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Cisco1720#ping RU  WW   

http://www.rushlimbaugh.com

Translating "

http://www.rushlimbaugh.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.254.57.167, timeout is 2 seconds:
!.!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 20/27/40 ms
Cisco1720#ping

http://www.shoutcast.com

Translating "

http://www.shoutcast.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 205.188.234.56, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Cisco1720#ping

http://www.quickbooks.com

Translating "

http://www.quickbooks.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.240.240.40, timeout is 2 seconds:
....U
Success rate is 0 percent (0/5)
Cisco1720#w ping

http://www.intuit.com

Translating "

http://www.intuit.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 206.154.102.1, timeout is 2 seconds:
U....
Success rate is 0 percent (0/5)
Cisco1720#ping

http://www.drudgereport.com

Translating "

http://www.drudgereport.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 65.77.130.210, timeout is 2 seconds:
!.!!.
Success rate is 60 percent (3/5), round-trip min/avg/max = 28/28/28 ms
Cisco1720#ping

http://www.nba.com

Translating "

http://www.nba.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.254.57.133, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/31/44 ms
Cisco1720#ping

http://www.foxnews.com

Translating "

http://www.foxnews.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.254.57.144, timeout is 2 seconds:
!....
Success rate is 20 percent (1/5), round-trip min/avg/max = 24/24/24 ms
Cisco1720#

 

[nedbert9]

Good job folks.

Now, I have a question about setting default routes to Interfaces instead of IP's.

In some simple destination load balancing examples I've seen folks recommend using:

ip route 0.0.0.0 0.0.0.0 Ethernet0 [metric]
ip route 0.0.0.0 0.0.0.0 Ethernet1 [metric]

However, as you say LUI3 this only works for point-to-point connections (T1, etc?) So, what is an accepted and workable solution for load balancing across two Ethernet links?

Thanks a bunch,
Ned



nedbert9
A+, CCNA, CNE 3-5, MCSE NT4, MCP 2003
A leisurely lifestyle is a sign of wisdom and maturity - Aristotle

 

[petermit01]

Hi lui3,

Thanks for your help!

The configuration is routing Internet traffic. However, it doesn't seem to be working as fast as my old linksys router. Sometimes it takes up to ten seconds to open a webpage or will time out. I'm not sure if there is something I can do with the configuration to speed up web browsing. Let me know, thanks again!

######Here is a current running-config######


Building configuration...

Current configuration : 1267 bytes
!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Cisco1720
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$l2kE$bx9DHET/1RHaBKBnc3XgT0
!
memory-size iomem 15
no aaa new-model
ip subnet-zero
!
!
ip name-server 24.161.193.64
ip dhcp excluded-address 192.168.1.200 192.168.1.240
!
ip dhcp pool 1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.23
!
ip cef
!
!
!
!
interface Ethernet0
description connected to Internet
ip address dhcp
ip nat outside
half-duplex
!
interface FastEthernet0
description connected to EthernetLAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
speed auto
!
router rip
version 2
network 192.168.1.0
no auto-summary
!
ip nat inside source list 1 interface Ethernet0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 24.161.200.1
no ip http server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 110 permit ip any any
dialer-list 2 protocol ip permit
snmp-server community public RO
snmp-server enable traps tty
banner motd ^CUp and running!^C
!
line con 0
exec-timeout 0 0
password 7 121F001216090D5521
login
line aux 0
line vty 0 4
password 7 1411170E08062B7A2F
login
!
no scheduler allocate
!
end

############## HERE ARE IP STAT'S #############


Cisco1720#sh ip traffic

IP statistics:
Rcvd: 2451619 total, 311662 local destination
0 format errors, 0 checksum errors, 26 bad hop count
0 unknown protocol, 0 not a gateway
0 security failures, 0 bad options, 0 with options
Opts: 0 end, 0 nop, 0 basic security, 0 loose source route
0 timestamp, 0 extended security, 0 record route
0 stream ID, 0 strict source route, 0 alert, 0 cipso, 0 ump
0 other
Frags: 0 reassembled, 5 timeouts, 0 couldn't reassemble
0 fragmented, 0 couldn't fragment
Bcast: 72493 received, 681 sent
Mcast: 0 received, 3 sent
Sent: 237435 generated, 1156367 forwarded
Drop: 85322 encapsulation failed, 24 unresolved, 0 no adjacency
19347 no route, 0 unicast RPF, 0 forced drop
Drop: 0 packets with source IP address zero

ICMP statistics:
Rcvd: 0 format errors, 0 checksum errors, 0 redirects, 27 unreachable
207208 echo, 3 echo reply, 0 mask requests, 0 mask replies, 0 quench
0 parameter, 0 timestamp, 0 info request, 0 other
0 irdp solicitations, 0 irdp advertisements
Sent: 0 redirects, 19741 unreachable, 18 echo, 207208 echo reply
0 mask requests, 0 mask replies, 0 quench, 0 timestamp
0 info reply, 31 time exceeded, 0 parameter problem
0 irdp solicitations, 0 irdp advertisements

IP-EIGRP statistics:
Rcvd: 0 total
Sent: 0 total

UDP statistics:
Rcvd: 95015 total, 0 checksum errors, 74791 no port
Sent: 1071 total, 0 forwarded broadcasts

TCP statistics:
Rcvd: 9409 total, 0 checksum errors, 373 no port
Sent: 9373 total

OSPF statistics:
Rcvd: 0 total, 0 checksum errors
0 hello, 0 database desc, 0 link state req
0 link state updates, 0 link state acks

Sent: 0 total

ARP statistics:
Rcvd: 8874794 requests, 71 replies, 0 reverse, 0 other
Sent: 17039 requests, 14072 replies (0 proxy), 0 reverse


##########HERE ARE SOME PINGS ON VARIOUS WEBSITES. NOTICE THAT SOME ARE 100% AND OTHERS PARTIAL OR 0% SUCCESS.#######



Cisco1720#ping

http://www.tek-tips.com

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.45.19.33, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Cisco1720#ping

http://www.tek-tips.com

           cisco.com
Translating "

http://www.cisco.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 198.133.219.25, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 24/28/36 ms
Cisco1720#ping

http://www.google.com

Translating "

http://www.google.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.239.57.99, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 24/32/44 ms
Cisco1720#ping

http://www.yahoo.com

Translating "

http://www.yahoo.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 66.94.230.39, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/36 ms
Cisco1720#ping www.  drudgereport.com
Translating "

http://www.drudgereport.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 65.77.130.210, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/29/32 ms
Cisco1720#ping

http://www.tek-tips.com

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.45.19.33, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Cisco1720#ping RU  WW   

http://www.rushlimbaugh.com

Translating "

http://www.rushlimbaugh.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.254.57.167, timeout is 2 seconds:
!.!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 20/27/40 ms
Cisco1720#ping

http://www.shoutcast.com

Translating "

http://www.shoutcast.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 205.188.234.56, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Cisco1720#ping

http://www.quickbooks.com

Translating "

http://www.quickbooks.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.240.240.40, timeout is 2 seconds:
....U
Success rate is 0 percent (0/5)
Cisco1720#w ping

http://www.intuit.com

Translating "

http://www.intuit.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 206.154.102.1, timeout is 2 seconds:
U....
Success rate is 0 percent (0/5)
Cisco1720#ping

http://www.drudgereport.com

Translating "

http://www.drudgereport.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 65.77.130.210, timeout is 2 seconds:
!.!!.
Success rate is 60 percent (3/5), round-trip min/avg/max = 28/28/28 ms
Cisco1720#ping

http://www.nba.com

Translating "

http://www.nba.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.254.57.133, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/31/44 ms
Cisco1720#ping

http://www.foxnews.com

Translating "

http://www.foxnews.com"...domain

server (24.161.193.64) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.254.57.144, timeout is 2 seconds:
!....
Success rate is 20 percent (1/5), round-trip min/avg/max = 24/24/24 ms
Cisco1720#

 

[nedbert9]

Thanks for the double post Peter. I love config spam.



nedbert9
A+, CCNA, CNE 3-5, MCSE NT4, MCP 2003
A leisurely lifestyle is a sign of wisdom and maturity - Aristotle

 

[lui3]

peter,

i am getting similar responses to the websites when i try to ping them as well.

http://www.drudgereport.com

is shaky at best

http://www.tek-tips.com

http://www.intuit.com

http://www.quickbooks.com

all time out when trying to ping them

must be their firewall blocking icmp replies. this is common. you can't ping our sites either but you can access the webpages. i don't think there is anything wrong with your setup here. so not much to improve. you might want to check the order of your dns search in your ip settings. if you have a server that is slow to respond or is failing it will take a while to resolve webpages. from the router however things look normal.

try pinging from interanl hosts and see if the symptoms change or get worst. it could be a LAN issue.



Lui3
CCNP,CCDA,A+/Net+
Cisco Wireless Specialization

 

[petermit01]

Ok, thanks for your help. Take care.

Peter