This has to be something simple I'm missing....
I have an SBC dsl speedstream modem in brigde mode connected to a Cisco 806 with the following config:
sh run
Using 1918 out of 131072 bytes
!
version 12.3
no parser cache
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Cisco806
!
boot-start-marker
boot-end-marker
!
enable secret **********
!
clock timezone PST -8
no aaa new-model
ip subnet-zero
no ip domain lookup
!
ip inspect name wrlfw tcp alert on timeout 3600
ip inspect name wrlfw ftp timeout 3600
ip inspect name wrlfw http timeout 3600
ip inspect name wrlfw smtp timeout 3600
ip inspect name wrlfw tftp timeout 30
ip inspect name wrlfw udp timeout 15
ip inspect name wrlfw h323 timeout 3600
vpdn enable
vpdn ip udp ignore checksum
!
vpdn-group vpdngroup
request-dialin
protocol pppoe
!
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.1.2 255.255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip tcp adjust-mss 1452
no ip mroute-cache
no cdp enable
hold-queue 100 out
!
interface Ethernet1
no ip address
ip inspect wrlfw in
pppoe enable
pppoe-client dial-pool-number 1
!
interface Dialer1
description SBC DSL
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname **********
ppp chap password 7 *********
ppp pap sent-username ******** password 7 ********
!
ip nat inside source list 1 interface Dialer1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
no ip http secure-server
!
access-list 1 permit 192.168.1.0 0.0.0.248
dialer-list 1 protocol ip permit
!
line con 0
password 7 *********
login
transport preferred all
transport output all
stopbits 1
line vty 0 4
exec-timeout 0 0
password 7 *******
login
transport preferred all
transport input all
transport output all
!
scheduler max-task-time 5000
end
My IP address from SBC in dynamic....and I'm getting an address. I can ping and trace to external address from a console session on the router. I attach a pc to the router on e0 (the build in 4 port switch) and assign it an address in the /29. I can see the router, I can ping e0 and dialer1 addresses, but i can't get to the net from anything connected to e0.
The additional piece is the pix 520. I can see the router and all interfaces, but can't get to the net. I connected directly to e0 with a pc to see if it was my pix config, but I believe my pix config is fine as anything behind it can see the router as necessary...
additional info from router
Cisco806#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
69.0.0.0/32 is subnetted, 1 subnets
C 69.108.24.99 is directly connected, Dialer1
192.168.1.0/29 is subnetted, 1 subnets
C 192.168.1.0 is directly connected, Ethernet0
151.164.0.0/32 is subnetted, 1 subnets
C 151.164.184.10 is directly connected, Dialer1
S* 0.0.0.0/0 is directly connected, Dialer1
Cisco806#sh ip int brie
Interface IP-Address OK? Method Status Prot
ocol
Dialer1 69.108.24.99 YES IPCP up up
Ethernet0 192.168.1.2 YES NVRAM up up
Ethernet1 unassigned YES manual up up
Virtual-Access1 unassigned YES unset up up
sh int dialer1
Dialer1 is up, line protocol is up (spoofing)
Hardware is Unknown
Description: SBC DSL
Internet address is 69.108.24.99/32
MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 1 seconds on reset
Interface is bound to Vi1
Last input never, output never, output hang never
Last clearing of "show interface" counters 3d09h
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/0/16 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 42 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
30563 packets input, 1629714 bytes
42239 packets output, 2280449 bytes
Bound to:
Virtual-Access1 is up, line protocol is up
Hardware is Virtual Access interface
MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, LCP Open
Open: IPCP
PPPoE vaccess, cloned from Dialer1
Vaccess status 0x44, loopback not set
Keepalive set (10 sec)
Interface is bound to Di1 (Encapsulation PPP)
Last input 00:00:06, output never, output hang never
Last clearing of "show interface" counters 3d09h
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
30457 packets input, 1622217 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
42140 packets output, 2277461 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
Cisco806#
Ethernet0 is up, line protocol is up
Hardware is PQUICC Ethernet, address is 0008.a3b6.c87a (bia 0008.a3b6.c87a)
Internet address is 192.168.1.2/29
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Half-duplex, 10Mb/s
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:02, output 00:00:07, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 1000 bits/sec, 1 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
15597 packets input, 1967348 bytes, 0 no buffer
Received 2705 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
31368 packets output, 1944931 bytes, 0 underruns
0 output errors, 0 collisions, 8 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Cisco806#
My plan was to use the remaining 3 ports on the 806 as a sudo DMZ. One port obviously connected to the pix which is connected to a cisco 5000.
any ideas??
thanks
