Connect client computers to T1 router

what you will need to do is configure a NAT (Network Address Translation) on the router.  You should configure the second interface as the inside interface and setup a private subnet such as 192.168.1.0 255.255.255.0.  Once you do this you can configure dhcp on this interface or let a dhcp server do this and provide your internal systems IP Address from the 192.168.1.0 subnet.  You should be able to login into the router via web interface (SDM) and configure it using the startup guide provided by cisco.

I can get into the router from hyperterminal and get around a little bit.  I just don't know exactly what to do.  Here is my current configuration:

Current configuration : 1694 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname u255009
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
ip cef
!
!
no ip dhcp use vrf connected
!
ip dhcp pool gt
   import all
   network 65.246.8.244 255.255.255.252
   default-router 65.246.8.245
   dns-server 198.6.1.1
   lease 10
!
!
ip domain name ALTER.NET
ip name-server 198.6.100.38
ip name-server 198.6.1.1
ip name-server 198.6.1.2
ip name-server 198.6.1.38
!
!
!
!
!
interface FastEthernet0/0
 ip address 65.246.8.245 255.255.255.252
 speed 100
 full-duplex
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial0/0/0
 bandwidth 1536
 no ip address
 no ip redirects
 no ip proxy-arp
 encapsulation frame-relay IETF
 no fair-queue
 service-module t1 timeslots 1-24
 frame-relay lmi-type ansi
!
interface Serial0/0/0.500 point-to-point
 ip unnumbered FastEthernet0/0
 no cdp enable
 no arp frame-relay
 frame-relay interface-dlci 500 IETF
!
interface Dialer0
 ip address negotiated
 encapsulation ppp
 dialer pool 1
 ppp authentication chap
!
ip route 0.0.0.0 0.0.0.0 Serial0/0/0.500
!
!
no ip http server
no ip http secure-server
ip nat pool gt 10.2.1.1 10.2.2.1 netmask 0.0.0.255
ip nat inside source list 1 interface Dialer0 overload
!
!
!
!
control-plane
!
!
!
line con 0
 password cisco
 login
 transport preferred none
line aux 0
 password cisco
 login
 modem InOut
 transport preferred none
 transport input all
 transport output all
 stopbits 1
 flowcontrol hardware

I am assuming that fast0/0 is your internet connection or is it interface Serial0/0/0.500 point-to-point?  This will dictate how we go forward?  What is the inside address for your network, are your client computers running a private address?  If not, can you renumber the network?

Other question, do you have any devices that you would need ports forwarded to, IE mail, web, RDP?

FYI, you should just beable to go in to enable mode, then config t.
here are the base commands for put 10.2.2.1 on fast ether0/0 and basic NAT.
Just cut and paste.  It will work as soon as the config is pasted to the unit.  If everything works then type "wr" at the "#" prompt.  Is will also turn off DHCP on your fastethernet 0/0.  If you need any port forward, let me know and I will send you the commands.

IP Subnet-zero


no ip dhcp pool gt

interface FastEthernet0/0
 ip address 10.2.2.1 255.255.255.0
 speed auto
 duplex auto
 IP Nat Inside


ip cef

no ip dhcp use vrf connected
no ip dhcp pool gt
   

ip domain name ALTER.NET
ip name-server 198.6.100.38
ip name-server 198.6.1.1
ip name-server 198.6.1.2
ip name-server 198.6.1.38

interface Serial0/0/0.500 point-to-point
 ip address 65.246.8.245 255.255.255.252
 no cdp enable
 no arp frame-relay
 frame-relay interface-dlci 500 IETF
 no ip directed-broadcast
 ip nat outside



access-list 1 permit 10.2.2.0 0.0.0.255
ip nat inside source list 1 interface Serial0/0/0.500 overload
ip nat translation timeout 3600
ip nat translation tcp-timeout 3600
ip nat translation udp-timeout 3600

The fast 0/0 is the internet connection from the router to the switch right now.  I have the static ip setup on the server with all my info and I can connect there.

The static IP address is:  65.246.8.246

I believe the inside address for my network is current 10.0.1.15
Currently I was running a DSL connection and I believe that default gateway was set to the above address so that should be it.

The clients are just obtaining IP automatically.

I don't believe I have any devices where I need ports forwarded.  Is there a way to confirm on my current setup though?

Where is the DSL connected to?  Is the DSL your internet connect, you state something about a T-1? Are we dealing with two network here? The router or is it comming from a bridge device? Sounds like something is missing?  could you give me a little digram of your network? Also, when you are done you really need to change your telnet and enable password.  They are in your config!

Do you want your internet connect to go thru the DSL or thru the T-1?

I dont see any Internet DNS addressing in the config.  Does this router receive its internet connection from another router at the end of the PPP connection or do you have a server handing out public DNS pr is your internet coming in on fa 0/0?  If your fa 0/0 is your ethernet you should have public ip name servers in there somewhere.

ip name-server 63.90.67.10 63.90.67.11  

This the public DNS for one of our providers.  You will need to call your internet service provider to find out what yours are.

The DNS servers are there:  198.6.1.1, 198.6.1.2 are MCI external DNS servers

The DHCP Server should supply the DNS information on the network, if not then the router can be configed to to the same.

What kind of server in on the inside of this network?

Okay here's the current setup.

We have DSL where the modem plugs into the switch.  The server and all clients are also connected to the switch.

The IP settings for the DHCP on the server are range of 10.1.1.129-10.1.1.199

The default gateway is: 10.1.1.1
DNS is 10.1.1.1

I know it said the gigabit ethernet adapter on the server is 10.1.1.15, but my local area connection is 10.1.1.13 on the server.

I only switched over the T1 to test it.  The setup for the T1 is that the T1 goes into the Cisco 1840 router.  The F0/0 port is going out to the switch.  The server is currently connected to the switch and I input the IP, subnet mask, dns server, default gateway into the local area connection and it connects and then I got on to the router from hyperterminal from there.

I would rather set it up so the DHCP on the windows server still ran DHCP.  I can disable DHCP on the router.  I just don't know what to do to get the client computers connectivity.

Ahh, paulsolov, you are right.  I quickly went through the configs looking for public dns servers.  It does appear he has a server handing out dns name servers. I see an import on dhcp pool with the 192.168.1.1 entry.  

gzarnick, could you post an ipconfig /all for one of your workstations.  It may help us see where you are getting your addressing from and if it is correct. Since your server is handing out your dhcp then you may have to look at it as well, nevertheless your client network settings can surely help.

Is the T-1 replacing the DSL?

Is this sever running Exchange?  If so, how do you get your mail?

Do you have a console cable connected to the Router?

Yes.  The T1 is replacing the DSL connection.  The email is IMAP.

I do not have a console cable connected to the router.  I can get into the router through hyperterminal though.

I am going into my office soon and will post a IPCONFIG from our current setup on a workstation.  
The only reason the Cisco router config has the DNS server and DHCP stuff is that I was trying to get it to work and put it in there.

Here are my new settings:

Network:  62.246.8.244 /30
Router IP:  62.246.8.245
Subnet:  255.255.255.252
DNS:  198.6.1.1-198.6.1.5
Usable Range:  62.246.8.246

dont forget to add your IP-Helper if your going to use a internal Windows DHCP server

config t

IP Helper "Ipaddress of DHCP server"

Well, that makes it a little harder.  we need to do some tricking to make this work.

IP Helper "Ipaddress of DHCP server"  is not needed if they are in the same segment only if they are remote to DCHP server.

Paste this into the router

interface FastEthernet0/1
 ip address 10.1.1.254 255.255.255.0
 speed auto
 duplex auto
no shut

plug fast0/1 into you switch, then you will need to telnet to 10.1.1.254.

I'll be going in very shortly and will post my current DSL setup ipconfig.  

Don't worry about the onfig from the DSL,  I will just need your IP address config for you internal network.

I will post your above info woodall.  Should I post the other stuff into the router as well that you posted before?

How do I find my IP address config for my internal network?

IPconfig on one of the desktops

Okay.  Currently connected to my DSL on a client station.  Here's the IPConfig info:

IP address:  10.2.1.184
Subnet:  255.255.255.0
Default Gateway:  10.2.1.1
DHCP Server 10.2.1.13
DNS Server:  10.2.1.1

I will want to give the server the static IP address of 62.246.8.246 whenever I switch over to the T1 though.

You will need to telnet to the router and go to the # prompt. Then go to Config t mode.  Then paste the following command in.

interface FastEthernet0/1
 ip address 10.2.1.254 255.255.255.0
 speed auto
 duplex auto
no shut
Then plug the ether0/1 in to your switch, and try telneting to it from one of the workstations.

Where should the cable from FE 0/0 be plugged into?

For the config please plug a second cable into FE0/1,  you will need to reconfig FE0/0 and you will loose connect to it once you start with the reconfig

Okay I tried telnetting to no avail.  I think I have the configuration incorrect.

What should my ip settings be on the server?  I changed the local area connection settings to the:

IP: 65.246.8.246
Subnet:  255.255.255.252
Gateway:  65.246.8.245
DNS:  198.6.1.1

I have my server plugged into the switch.  I have FE 0/0 plugged into the switch and FE 0/1 plugged into the switch

DO you want me to do it for you?

If you can do for me that would be great.  I appreciate everything very, very much.

I just think I'm screwing something up because I still can't telnet from a workstation

try telneting to the rotuer now at 10.2.1.254

okay that worked!

once you telnet to the unit, change the IP address of the server back to your inside address.

I need to make sure you unbind 65.246.8.246 from you network, we need that IP address to make this work.

Okay I'll change the IP back, but when I do I lose connectivity.

Okay it's changed back.  I'll go on the internet on my phone to communicate with you.

Okay I'm up now on a laptop.  

telnet to the router and type reload. If if asks to save current config DON"T answer yes.  Let me know when that is done.

In fact just turn it off the back on.

okay that's done.

I need you telnet to the router, and type enable, then config t, then let me know when you are there.

I noticed the green lights on FE 0/1 went out.  Is that okay?

Oh hold on

try it now

green lights still aren't on and I can't telnet

try now

They are on and I'm in.

are you in conf t mode?  If so, the cut and paste the following

interface FastEthernet0/0
 ip address 10.2.2.1 255.255.255.0
 speed auto
 duplex auto
 IP Nat Inside

Then

interface Serial0/0/0.500 point-to-point
 ip address 65.246.8.245 255.255.255.252
 no cdp enable
 no arp frame-relay
 frame-relay interface-dlci 500 IETF
 no ip directed-broadcast
 ip nat outside


Let me know when that is done.

okay all of that is in..

is your dsl modem still pluged in, if so unplug it

No. The DSL is unplugged

see if you can ping 216.53.130.2 from one of the workstations.

I also just wanted to make sure the ip address for FE0/0 should be what you posted above as 10.2.2.1

just because I know on my DSL the gateway and DNS were 10.2.1.1??

no i changed it to 10.2.1.1

Yes.  I pinged that address fine.

I need to use the other IP address to unblnd the address

oh okay.  thank you

try browsing the internet

are you hosting anything thing on that server that I might need to forward ports to?  IMAP, SMTP, SSL, HTTP?

It didn't go to any page.

no.  nothing is hosted on the server

Is your DNS forwaing on your server?

You are getting out, sound like a DNS issue

No.  DNS is not on the server

Should DNS on the DHCP still be 10.2.1.1

There is the DNS server? nevermind, let me see what I can do.

try it now

Nope.  It still won't go to a page.

could you change the dns on desk to
198.6.100.38
198.6.1.1


And then try it.

nevermind, try it again

with the old DNS ip address.

Yeah the desktop worked now.

Should I change it to that on DHCP.  A

Which one did you use?  I had to make one other change to the router.

It's working!!!

Now can I setup my static IP on the server?

Should I use:

IP:  65.246.8.246
Subnet:  255.255.255.252
Gateway:  65.246.8.245
DNS:  198.6.1.1

I'm using the old one.  10.2.1.1

NO, NO, NO. Use something else.  you will your connection. If you need to use a private IP address on that server.

What is the IP address of the server before you changed it?

Okay so just leave everything how it is now!

So the server will not have a static IP?

The server didn't have a Static IP previously.  Well not an external static IP.  I just have it set as

10.2.1.13

an inside address, yes. If you need anything forwarded to it the we do thru translastion

Alright.  THANK YOU SOOOOO VERY VERY MUCH!!!

I hope you understand how much I appreciate this!  I know I took up tons of your time and probably a little frustrated with my inexpertise!  THANK YOU!

Use that address, and you are done. last thing, you need to change your passwords.

From the config t mode
enable secret  (what ever password you want execpt cisco)

line vty 0 4
password (what ever password you want execpt cisco)

I guess close this out I and I guess get the credit!

Okay passwords are changed!

Thanks again!!!

This Expert was amazing!!!! Thank you sooo much!

Don't forget to secure that router.

Last thing type wr from a # prompt then you are done!!

Hi woodall,

Sorry to bother you again.

I actually do need a couple ports forwarded:  3389 and 1723

Can you let me know what to input.  Thanks

I will need your password for the router.

ok.  the password is gt

I also need the IP address of the server you want these ports forwarded to.

10.2.1.13

done

It works!  Thanks again!

I have two open questions that I posted previous to this one if you want to post I can allot you points there.

https://www.experts-exchange.com/questions/24295101/How-to-create-non-routable-IP-addresses-with-Cisco-1840-Router.html
https://www.experts-exchange.com/questions/24293993/Cannot-get-DHCP-to-work-on-Cisco-1800-Router.html

Sure, do I need to post there first?