This is only my second time working with Cisco, and the first time was setting up a static route :/
I am trying to connect two different networks via a T1 Line and shave the main DSL connection. I have a Cisco 1700 at either location and a Cisco 827 DSL router at the main location (10.143.xx.xx). I am at the point where I can ping each 1720 from either router, so the link has been established. I am also able to ping and telnet to each router from their individual networks, but not remotely, nor can I access the internet or networked computers.
Here is the config for the 827:
Current configuration:
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname XXXXXXXXX
!
enable secret 5 XXXXXXXXXXXXXXXXXXXXXXXXXX
XX
enable password XXXXXXX
!
!
!
!
!
ip subnet-zero
ip name-server 206.13.29.12
ip name-server 206.13.30.12
!
bridge irb
!
!
!
interface Ethernet0
ip address 10.143.214.100 255.255.255.0
no ip directed-broadcast
ip nat inside
no ip mroute-cache
!
interface ATM0
no ip address
no ip directed-broadcast
no ip mroute-cache
no atm ilmi-keepalive
pvc 0/35
encapsulation aal5snap
!
bundle-enable
bridge-group 1
hold-queue 224 in
!
interface BVI1
ip address xx.xxx.71.206 255.255.255.252
ip broadcast-address xx.xxx.71.207
no ip directed-broadcast
ip nat outside
!
ip nat pool 64 xx.xxx.246.133 xx.xxx.246.158 netmask 255.255.255.224
ip nat inside source list 1 pool 64 overload
ip nat inside source static 10.143.214.114 xx.xxx.246.133
ip nat inside source static 10.143.214.150 xx.xxx.246.132
ip nat inside source static 10.143.214.253 xx.xxx.246.131
ip classless
ip route 0.0.0.0 0.0.0.0 xx.xxx.71.205
ip route 10.137.1.39 255.255.255.255 10.143.214.70
ip route 205.239.188.0 255.255.255.255 10.143.214.70
ip route 206.120.32.0 255.255.255.255 10.143.214.70
ip route 207.37.182.30 255.255.255.255 10.143.214.70
ip route 207.37.182.36 255.255.255.255 10.143.214.70
ip route 207.74.147.240 255.255.255.255 10.143.214.70
no ip http server
!
access-list 1 permit 10.143.214.0 0.0.0.255
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 206.95.134.0 0.0.0.255
bridge 1 protocol ieee
bridge 1 route ip
banner login ^CAny unauthorized access attempt to this system is unlawful, and m
ay be subject to civil and/or criminal penalties.^C
!
line con 0
password xxxxx
login
transport input none
stopbits 1
flowcontrol hardware
line vty 0 4
password xxxx
login
!
scheduler max-task-time 5000
end
This works fine for the network at 10.143.xx.xx. All clients can access the internet, remote access to the router is possible via IP and everything works as it should.
Now, we connect the first 1720 to one of the hubs. All lights are green, 1720 can be accessed over the network, and we can ping the remote 1720 from the local one. Here is the config:
Current configuration:
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname xxxxxxxx
!
enable password 7XXXXXXXXXXXXX
!
!
!
!
!
memory-size iomem 25
ip subnet-zero
no ip domain-lookup
ip name-server 4.2.2.1
ip name-server 10.143.214.100 <- IP address of the 827 dsl router (not sure if i need it)
!
!
!
!
interface Serial0
description connected to remote
ip address 192.168.1.1 255.255.255.252
ip nat inside
encapsulation ppp
service-module t1 remote-alarm-enable
!
interface FastEthernet0
description connected to local_lan
ip address 10.143.214.209 255.255.255.0
ip nat inside
speed auto
half-duplex
!
router rip
version 2
network 10.0.0.0
network 192.168.1.0
network 206.95.134.0
no auto-summary
!
ip nat inside source list 100 interface Serial0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 10.143.214.100
no ip http server
!
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
access-list 100 permit ip 10.143.214.0 0.0.0.255 any
access-list 100 permit ip 206.95.134.0 0.0.0.255 any
!
line con 0
exec-timeout 0 0
password xxxxxxxxxxx
login
transport input none
line aux 0
line vty 0 4
password xxxxxxxxxxxx
login
!
no scheduler allocate
end
Here is the show interface for the local T1.:
Serial0 is up, line protocol is up
Hardware is PQUICC with Fractional T1 CSU/DSU
Description: connected to remote
Internet address is 192.168.1.1/30
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set
Keepalive set (10 sec)
LCP Open
Open: IPCP, CDPCP
Last input 00:00:02, output 00:00:02, output hang never
Last clearing of "show interface" counters 2d23h
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/2/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
125955 packets input, 80421422 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
124474 packets output, 80373901 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up
Like I said, I can ping the remote 1720 from the local one, and the other way around. I still cant access network shares or the internet. I will post the remote shortly, once I get there and connect to the router.
Start Free Trial
