Riddle Me This: Router or Config Issue?

[Arsynic]

I must have reconfigured this router like 20 times already and still no cigar. First of all I have a CISCO 802 ISDN modem (the location in question is way out in the boondocks). I ran the CISCO Fast Step software to setup the router and it ran tests and all of them were good. However, when I try to connect to the Internet, I get nothing. The monitoring software showed all green with a good connection between the ISP and the Ethernet0 interface. But when it comes to surfing the net, I get nothing.

Even worse, I can't even ping the router with the computer connected to it. It's surely a setup issue right? Wrong. It's a copy of the same configuration that was connecting to the net fine last week. Both ISDN channels were lit up like firecrackers as the WAN traffic rolled in, however the lan traffic was at ZERO on the router. So I have two problems: There's no way to run diagnostics on the routher and secondly I have no way to get into the router. Usually I would Telnet into the router but that doesn't work anymore...until I go to a remote location with Internet access at which I can both PING AND TELNET INTO THE ROUTER!!! This is crazy.

So in synopsis:

--Router reconfigured with a copy of a configuration that was working last week.
--At present I can't telnet into the router locally.
--Cannot ping router locally.
--I can telnet into the router remotely (oops, it just timed out on me).
--I can ping the router remotely.
--Heavy WAN port traffic signifies that Internet traffic is coming to the router.
--ZERO LAN port traffic signifies that Internet traffic is not reaching the LAN.
--I have concluded that the LAN cannot transmit to the router and the router cannot transmit to the LAN.

Is the router dying or is it an ISP issue? How can I HyperTerm into the router because the 9600 baud rate that CISCO recommends still doesn't work?

 

[wybnormal]

You would do better to post the config with the IP addresses edited

I can think of several reasons why this would occur. A common one is the inclusion of a access list by default. A blank ACL would deny all traffic due to the implied "deny all" at the end that does not show up in the listing. Also, if there is a ACL referenced on the interface but it does not exist, this could be some heartache.

Secondly, use something other they hyperterm.. get Teraterm or other freebie telnet replacement. Much more reliable then hyperterm (unless you got the upgrade)

MikeS

Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[computerhighguy]

sounds like the ethernet interface is down. By default they are down on a new unit or when you erase the config. You would have to issue the command

no shutdown

on the interface.


It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)

 

[Arsynic]

Okay, here's the config:

Building configuration...

Current configuration:
!
! Last configuration change at 14:21:43 UTC Mon Jan 3 2005
! NVRAM config last updated at 14:20:15 UTC Mon Jan 3 2005
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname my_router
!
logging buffered 8192 debugging
enable secret 5 <removed>
!
username my_username password 7 <removed>
!
!
!
!
ip subnet-zero
no ip source-route
!
isdn switch-type basic-ni
!
!
process-max-time 200
!
[b]interface Ethernet0
 ip address 10.0.0.1 255.0.0.0
 ip access-group 121 in
 no ip directed-broadcast
 no ip proxy-arp
 ip nat inside[/b]
!
interface BRI0
 no ip address
 no ip directed-broadcast
 encapsulation ppp
 dialer pool-member 1
 isdn switch-type basic-ni
 isdn spid1 999999999901
 isdn spid2 999999999901
 ppp authentication chap pap callin
 ppp multilink
!
interface Dialer1
 description ISP
 ip address negotiated
 ip access-group 121 in
 no ip directed-broadcast
 no ip proxy-arp
 ip nat outside
 encapsulation ppp
 no ip split-horizon
 dialer remote-name Cisco1
 dialer idle-timeout 300
 dialer string 000000class DialClass
 dialer hold-queue 10
 dialer load-threshold 10 either
 dialer pool 1
 dialer-group 1
 fair-queue 64 16 0
 pulse-time 0
 ppp authentication chap pap callin
 ppp chap hostname crosshc
 ppp chap password 7 08294F1C5A4A51
 ppp pap sent-username username password 7 0707221E1D5A4D
 ppp multilink
!
ip nat inside source list 18 interface Dialer1 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
map-class dialer DialClass
 dialer isdn speed 56
access-list 18 permit 0.0.0.0 0.0.0.0
access-list 121 deny   udp any eq netbios-dgm any
access-list 121 deny   udp any eq netbios-ns any
access-list 121 deny   udp any eq netbios-ss any
access-list 121 deny   tcp any eq 137 any
access-list 121 deny   tcp any eq 138 any
access-list 121 deny   tcp any eq 139 any
access-list 121 permit ip any any time-range TIME
dialer-list 1 protocol ip permit
!
line con 0
 exec-timeout 0 0
 transport input none
 stopbits 1
line vty 0 4
 exec-timeout 0 0
 login local
!
time-range TIME
 periodic daily 0:00 to 23:59
!
end

I modified all IP addresses, usernames and phone numbers so if those look funny, that's why. The only IP information that I didn't modify is the bolded portion. That's what was in there originally and it's flat out wrong. Problem is, I don't know why it's that way when I didn't configure it like that. It's wrong and it's the reason why my LAN can't communicate with the Ethernet0 interface. I telneted in remotely and tried to modify that portion of the config, but I kept getting the error message that it conflicted with Dialer 1.

I have my hands behind my back because I can only access the router remotely. I tried HyperTerm and TeraTerm via the COM3 port but all I get is a blinking cursor even when I have the correct baud rate settings as per CISCO. So I'm trying to be careful not to screw the configuration up where I lose connection to the router because I'll have to wait until tomorrow to try again since the router is ~ 100 miles away.

 

[Arsynic]

Here's the working configuration that I want to copy to the router:

SHOW RUN
Building configuration...

Current configuration:
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname my_router
!
logging buffered 4096 alerts
enable secret 5 $1$bd6w$QuIR7GEwBwBSzfwj3wB3./
!
!
!
!
!
clock timezone eastern 8
ip subnet-zero
!
no ip domain-lookup
isdn switch-type basic-dms100
 --More--         !
!
process-max-time 200
!
interface Ethernet0
 description connected to EthernetLAN
 ip address [correct IP adress] [correct subnet mask]
 no ip directed-broadcast
 no keepalive
!
interface BRI0
 description connected to Internet
 no ip address
 no ip directed-broadcast
 encapsulation ppp
 dialer rotary-group 1
 isdn switch-type basic-dms100
 isdn twait-disable
 isdn spid1 [correct SPID]
 isdn spid2 [correct SPID]
!
interface Dialer1
 description connected to Internet
 --More--          ip unnumbered Ethernet0
 no ip directed-broadcast
 encapsulation ppp
 dialer in-band
 dialer idle-timeout 43200
 dialer string [correct phone number]
 dialer hold-queue 10
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname [correct]
 ppp chap password 7 0707221E1D5A4D
 ppp pap sent-username [correct] password 7 030C5859555C75
!
router rip
 version 2
 passive-interface Dialer1
 network 64.0.0.0
 no auto-summary
!
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
 --More--         dialer-list 1 protocol ip permit
snmp-server engineID local 00000009020000B0C28C17F0
snmp-server community public RO
snmp-server chassis-id JAD050209ZE
!
line con 0
 exec-timeout 0 0
 password [censored]
 login
 transport input none
 stopbits 1
line vty 0 4
 password [censored]
 login
!
end

I want to get the mess above to this configuration. When i try the command:

interface Ethernet 0
ip address [correct IP address] [correct subnet mask]

I get the error msg:
"Overlaps Dialer1" or something like that.

 

[computerhighguy]

Do this. On the 802, make sure you are using hyperterminal to connect to it.

Issue a write erase to the router and reload it.

Paste your config in without the --More--  's in it. Make sure you have changed the ethernet numbers, etc to match the new router. It should work.


It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)

 

[Arsynic]

Problem is that I can't HyperTerm into it from the console port for some reason.

 

[computerhighguy]

Can you telnet to it? If so, you can TFTP the new config to the router using

copy tftp startup

command

You really, REALLY!! need to get console access. This is the whole problem in my opinion. Are you using the following settings?

9600
8
N
1
No Flow Control?

Most of the people here are Command Line Interface (CLI) people. I know I am. It is all we had until recently and in my opinion and much faster and easier way of doing business.


It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)

 

[Arsynic]

That's the big problem, for some reason the console access isn't working. With HyperTerm all I have to do is cut and paste the working config but with my job everything has to be 100 times harder to make my life a living hell. I plug the flat blue console cable into the COM port on my computer and fire up HyperTerminal with the settings CISCO recommends and all I get is a stupid blinking cursor. Tried the same thing with TeraTerm with the same results.

 

[computerhighguy]

try a different PC.


It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)

 

[tecnikall]

Hello there,

In my opinion if you have direct access to the unit you should try to console into it, if you have a spare router or any other cisco device, you can check the hypertermial settings on the other device, if not try the following:

http://www.cisco.com/en/US/tech/tk801/tk36/technologies_tech_note09186a0080094465.shtml

If you see garbage on the screen then there is speed missmatch between your routere baud rate and your hyperterminal session, if this is the case you should open new session at different speeds till you get the correct one.... Good luck!!

 

[Arsynic]

Thanks all. The problem is solved. I copied the configuration via HyperTerm and it works now. The CISCO Fast Step software is utter trash and is useless along with the monitor program. It consistently showed me connected to the ISP and that the Ethernet0 interface was functional when it was clearly apparent that neither was working. I wasted lots of time trusting that piece of trash. Configuring from the terminal requires a little lesson in CISCO IOS, but it pays off. If you want something done right, just get your hands dirty and do it yourself.

I had a problem getting into the router via the COM port on one computer but when I switched it to another box's port, it worked fine. There's no time better than up time. Thank all of you for your help.

 

[computerhighguy]

If you have utlities for Palm devices, cell phones or PDAs that use the serial port, these usually interfere with Hyperterminal. Shutting them down will typically solve that issue.


It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)