2600 Router Config 1

[helmetknob]

Hello all -

I'm the network admin for a small company and am not a router guy...although I sure have been learning ALOT over the last few days.

I have configged both FE0/1 & 0/0 with the correct IP address and subnet mask and can ping both INTs from in and outside but cannot surf. I had this working ONCE the other day but cannot get it going again! Is there one command I am missing that will permit routing between the 2 interfaces? thanks for any clues/hints/tips you may have!

 

[burtsbees]

That depends...what are the two interfaces connected to? Do you have NAT configured? Default route?

Burt

 

[helmetknob]

sorry! router-bag here F0/0 is connected to my ISP and is "an ethernet handoff" and a /30

F0/1 is connected to a hub with a laptop for testing and is a /30. eventually I'll be cutting my existing 6MB circuit over to this one...once I can make it work.

 

[helmetknob]

also no NAT as I need to use the /29 for a couple machines

 

[burtsbees]

So fa0/0 has a public IP address, and fa0/1 has a private IP address?
Please post a config.

Burt

 

[helmetknob]

write erase and erase startup-config are my favorite commands

I just started over and here's what I have so far on thi s attempt...

Router#show config
Using 443 out of 29688 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
!
ip subnet-zero
!
!
!
!
!
!
interface FastEthernet0/0
ip address 71.133.200.234 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 76.238.142.201 255.255.255.248
duplex auto
speed auto
!
ip classless
ip http server
ip pim bidir-enable
!
!
line con 0
line aux 0
line vty 0 4
!
end

Router#

 

[MrOyvind]

If I understand right.You can ping public IPs from your private network and visa versa?
If you can write x.x.x.x IP in you web browser and read the webpage you want,then it seems to be a DNS problem.
If so you should type in the DNS servers in your config.

 

[helmetknob]

sorry. i guess i wasn't clear. I can ping the external INT from the outside and the internal INT from the inside but cannot surf etc. thanks for the help tho!

 

[Minue]

Hello
Normally it's recommended that you NAT with a private address on the inside,for the extra protection.
But the way you want to do it,all your inside workstations will need a public address to get outside.Remember to put a default route pointing at FA0/0
"ip route 0.0.0.0 0.0.0.0 fa0/0"
Regards

 

[helmetknob]

thx Minue! I just added that command but to no avail. I also added ip name-server so it would resolve but DAMN! so close! thanks for your help, now i'm that much closer.

 

[MrOyvind]

It seems you need a static route for internal to external network.
IP route 0.0.0.0 0.0.0.0 x.x.x.x where the x`s is the ISPs default gateway address.
This route will route all unknown IPs to internet so all your non private addresses will be sent out.
What type of connection to Internet ADSL,DHCP etc?
Where is your NAT and DNS,in a modem?

 

[Minue]

Hello
Can you ping and outside address from the routers interface.Try ping

http://www.cisco.com

or some address to see if you have connectivity.
Regards

 

[helmetknob]

i need a few live IPs that i will stick into little netgear routers for my customers on other floors of the building so there is no NAT/dhcp need, I need valids. I have my dns servers elsewhere and have them referenced as in ip domain-server xx.x.xxx.x

i nat behind my ISA server for internal machines.

 

[helmetknob]

Thanks for all the help and suggestions. I know you guys have better stuff to do today

My config now:

Router#show config
Using 599 out of 29688 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
enable password XXXXXX
!
ip subnet-zero
!
!
ip name-server 75.16.26.4
!
!
!
!
interface FastEthernet0/0
ip address 71.133.200.234 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 76.238.142.201 255.255.255.248
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip route 0.0.0.0 0.0.0.0 71.133.200.233
ip http server
ip pim bidir-enable
!
!
line con 0
line aux 0
line vty 0 4
password XXXXXX
login
!
end

Router#

 

[MrOyvind]

Hi
Test this comand from router(config)#IP dns primary x.x.x.x soa x.x.x.x(secondary)
and the router(config)#ip dns server

 

[helmetknob]

i can get the router to resolve, ping, trace etc from within the router. any machines hard set w/an IP on e0/1 can PING e0/1 but nothing further...

 

[Minue]

Hello
You have a routing problem!With the default route you show be able to ping the FA0/0 interface.Did yo put in a default gateway on the workstation of 76.238.142.201.Please comfirm.
Regards

 

[burtsbees]

sh ip route

Burt

 

[helmetknob]

and i think this must be it:

Router#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

71.0.0.0/30 is subnetted, 1 subnets
C 71.133.200.232 is directly connected, FastEthernet0/0
76.0.0.0/29 is subnetted, 1 subnets
C 76.238.142.200 is directly connected, FastEthernet0/1
S* 0.0.0.0/0 is directly connected, FastEthernet0/0
[1/0] via 71.133.200.233

so will it be:

ip default-gateway 71.133.200.233 (my isp gateway)?

 

[MrOyvind]

Any other Cisco routers in your Company connected to this router?