Cisco 2611XM over PAP won't go to certain websites/services

[AmishThunder]

Greetings, was just perusing Google and came upon this site here. I'm hoping someone can help me with a frustrating issue I have here. First off, don't laugh too hard at the config I'll post here - I'm a wireless network administrator, not a router guru. I'm just trying to get a little experience in the Cisco routing field so I can't blissfully claim ignorance anymore...lol.

So here's the issue...I have my 2611 configured for pap authentication over my frontier DSL connection. At present, the setup is as follows: Internet-->DSL modem configured for bridging-->Cisco 2611XM-->Internal network. The way it's configured right now, PAP is authenticating and working great with a consistent connection and no memory errors. I can browse and download certain things without any issues. The problem is is when I browse to certain sites (ie microsoft.com) My connection hangs on "waiting for microsoft.com" and never continues on. I never get a timeout in my browser, it will just hang indefinitely. I have upgraded the router to IOS 12.4 to see if that will help, but no avail. No errors are being logged on the router, so I am at a loss. Any ideas?

Router is setup for simple NAT, DHCP and DNS caching.

Here's my running config:

Building configuration...

Current configuration : 1796 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname HOKEY
!
boot-start-marker
boot system flash:c2600-ipbasek9-mz.124-17.bin
boot-end-marker
!
logging buffered 4096 debugging
enable password 321155
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
ip dhcp use vrf connected
ip dhcp excluded-address 10.0.0.200 10.0.0.254
!
ip dhcp pool home
network 10.0.0.0 255.255.255.0
default-router 10.0.0.254
dns-server 10.0.0.254
lease 7
!
!
ip domain round-robin
ip domain retry 5
ip domain timeout 7
ip domain lookup source-interface FastEthernet0/1
ip name-server 4.2.2.2
vpdn enable
!
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address 10.0.0.254 255.255.255.0
no ip redirects
no ip proxy-arp
ip nat inside
no ip mroute-cache
speed 100
full-duplex
!
interface FastEthernet0/1
description Outside network to Frontier DSL
no ip address
speed 100
full-duplex
pppoe enable
pppoe-client dial-pool-number 1
!
interface Dialer1
mtu 1492
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username <user>@frontiernet.net password 0 <password>
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
ip dns server
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface Dialer1 overload
!
access-list 1 permit 10.0.0.0 0.0.0.255
!
control-plane
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
password XXX
login
line vty 5 15
password XXX
login
!
!
end

 

[AmishThunder]

Figured it out...Read through the piles and piles of documentation Cisco has on their bear of a support site and came upon on command that needed to be added to the interface Dialer 1:

ip adjust-mss 1452

Turns out the MTU is not plug-n-pray...LOL Figured I'd post the solution for future reference. Thanks if you were thinking of replying!

J

 

[burtsbees]

Yup---that is exactly it...

/