Adding Internet T1

[t7fire]

We are adding a second T1 to handle internet traffic, however I can't get traffic from the clients to pass. I can ping an IP from the router, but when traffic comes into the router it doesn't know where to go. The Internet T1 is on Serial0/1 and Traffic will be coming in Ethernet 0/1. I am thinking I need to NAT but not sure how to do that.



Current configuration:
!
version 11.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname chkenrtr
!
no ip domain-lookup
!
!
!
interface Ethernet0/0
ip address 192.168.125.1 255.255.255.0
!
interface Serial0/0
description connected to chneilrtr
ip address 172.16.10.2 255.255.255.252
ip rtp header-compression
ip rtp reserve 16384 100 1000
encapsulation ppp
no ip mroute-cache
bandwidth 1536
service-module t1 timeslots 1-24
service-module t1 remote-alarm-enable
!
interface Ethernet0/1
ip address 192.168.10.254 255.255.254.0 secondary
ip address 10.10.30.10 255.255.255.0
!
interface Serial0/1
description Internet
ip address 209.253.103.206 255.255.255.252
encapsulation ppp
bandwidth 1536
service-module t1 timeslots 1-24
service-module t1 remote-alarm-enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/1
ip route 10.10.10.0 255.255.255.0 Serial0/0
ip route 10.10.20.0 255.255.255.0 Serial0/0
ip route 10.24.15.0 255.255.255.0 192.168.1.30
ip route 192.168.1.0 255.255.255.0 Serial0/0
ip route 192.168.10.0 255.255.254.0 Ethernet0/1
snmp-server community public RO

 

[jeter]

I see no NAT configuration of the router.

http://www.cisco.com/en/US/tech/tk648/tk361/tk438/tsd_technology_support_sub-protocol_home.html

“Reserve your right to think, for even to think wrongly is better than not to think at all”

CCNA,CCNP,Network+
Tek-TIP Member 19,650

 

[t7fire]

We were passing the 0.0.0.0 route to Serial 0/0 and internet was passing to remote site and being forwarded on

If I change 0.0.0.0 to route Serial 0/1 I cannot get out

I still need to be able to send 10.x and 192.x traffic over Serial 0/0 but all internet traffic needs to go out serial 0/1

Ethernet 0/0 - Nothing (will be going to cisco ASA in future) but address is ping able from outside world

Ethernet 0/1 - Internal lan 10.10.30.x telephone 192.168.10.x both tie to a different location of Serial 0/1 P2P T1

Serial 0/0 - New Internet T1

Serial 0/1 - Point to Point T1 to another site

If have changed the config for the following but it still doesn't work....


Current configuration:
!
version 11.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname chkenrtr
!
<password info>
!
ip nat inside source list 1 interface Ethernet0/1 overload
no ip domain-lookup
!
!
!
interface Ethernet0/0
ip address 209.254.201.113 255.255.255.248
!
interface Serial0/0
description connected to chneilrtr
ip address 172.16.10.2 255.255.255.252
ip rtp header-compression
ip nat inside
ip rtp reserve 16384 100 1000
encapsulation ppp
no ip mroute-cache
bandwidth 1536
service-module t1 timeslots 1-24
service-module t1 remote-alarm-enable
!
interface Ethernet0/1
ip address 10.10.30.10 255.255.255.0 secondary
ip address 192.168.10.254 255.255.254.0
ip nat inside
!
interface Serial0/1
description Internet
ip address 209.253.103.206 255.255.255.252
ip nat outside
encapsulation ppp
bandwidth 1536
service-module t1 timeslots 1-24
service-module t1 remote-alarm-enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/1
ip route 10.10.10.0 255.255.255.0 Serial0/0
ip route 10.10.20.0 255.255.255.0 Serial0/0
ip route 10.24.15.0 255.255.255.0 192.168.1.30
ip route 192.168.1.0 255.255.255.0 Serial0/0
ip route 192.168.10.0 255.255.254.0 Ethernet0/1
access-list 1 permit any
snmp-server community public RO
banner exec ^C

 

[burtsbees]

I work best with a topology in front of me...off the top of my head, I would say it may have something to do with ip nat inside on S0/0, and ip nat outside on S0/1.

Burt

 

[t7fire]

does this help any


New Site - 192.168.10.254, 10.10.30.10 (Ethernet 0/1)
all traffic for 192.168.x to Main Site
all traffic for 10.10.10.x to Main Site
all traffic for 10.10.20.x to Main Site then Remote Site
all traffic for 10.24.15.x to Main Site then to 192.168.1.30
all all other traffic (internet) to Main Site then to 192.168.1.3 (linux server) out to DSL

Main Site Point to Point (Serial 0/0)

Want to take all internet traffic to new T1 (Serial 0/1) and leave all other traffic routing

 

[plshlpme]

well on your internet t1 you need to nat the ips.. because your isp doesnt want your internal address space...

so you will need to do something like

ip nat inside source list LAN-RANGES interface Serial0/1 overload

of course this would require that you create an access-list called LAN-RANGES and include all the internal subnets that you wish to allow to use this internet connection.