Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cisco 2911 Router Help

Status
Not open for further replies.

jonnygrim1

IS-IT--Management
Dec 7, 2011
5
Hi,

Hope you can help me, we have purchased a Cisco 2911 router and i've almost got the configuration working 'i think'. But for some reason I can t seem to get traffic to go out. I think i have done everything, here is my config. Any help would be appreciated, also if ive done anything incorrect please advise.

Thanks in advance.

Here's the config:


Router#show config
Using 3353 out of 262136 bytes
!
! Last configuration change at 23:05:17 pctime Sun May 6 2012 by admin
! NVRAM config last updated at 23:05:17 pctime Sun May 6 2012 by admin
! NVRAM config last updated at 23:05:17 pctime Sun May 6 2012 by admin
version 15.1
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service sequence-numbers
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no logging buffered
logging console critical
enable password 7 Password123
!
no aaa new-model
!
clock timezone pctime 0 0
!
no ipv6 cef
ip source-route
no ip routing
no ip cef
!
!
!
!
!
ip name-server 208.67.222.222
ip name-server 8.8.8.8
ip name-server 8.8.4.4
!
multilink bundle-name authenticated
!
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-1641670757
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1641670757
revocation-check none
rsakeypair TP-self-signed-1641670757
!
!
crypto pki certificate chain TP-self-signed-1641670757
certificate self-signed 01 nvram:IOS-Self-Sig#7.cer
license udi pid CISCO2911/K9 sn FCZ15442131
!
!
username admin privilege 15 password 7 Password123
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
no ip route-cache
shutdown
!
interface GigabitEthernet0/0
description $ETH-LAN$
ip address 10.0.0.2 255.0.0.0
ip nat inside
ip virtual-reassembly in
no ip route-cache
duplex auto
speed auto
no mop enabled
!
interface GigabitEthernet0/1
description $ETH-WAN$
ip address 178.242.36.249 255.255.255.240
ip nat outside
ip virtual-reassembly in
no ip route-cache
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
!
interface FastEthernet0/0/0
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
!
interface FastEthernet0/0/1
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1/0
no ip address
shutdown
!
interface FastEthernet0/1/1
no ip address
shutdown
!
interface FastEthernet0/1/2
no ip address
shutdown
!
interface FastEthernet0/1/3
no ip address
shutdown
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
!
ip nat pool outside_pool 178.242.36.242 178.242.36.253 netmask 255.255.255.240
ip nat inside source list inside-outside interface GigabitEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 178.242.36.241 permanent
!
ip access-list extended inside-outside
remark CCP_ACL Category=2
permit tcp 10.0.0.0 0.0.255.255 any
!
access-list 101 remark CCP_ACL Category=16
access-list 101 permit tcp 10.0.0.0 0.0.255.255 any
!
!
!
!
!
snmp-server community public RO
!
control-plane
!
!
!
line con 0
privilege level 15
login local
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
privilege level 15
password 7 Password123
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
end
 
Just a quick glance....

You have "no ip routing" command issued.


Just another note....your:

permit tcp 10.0.0.0 0.0.255.255 any

statements do no exactly match your lan subnet of:

ip address 10.0.0.2 255.0.0.0

so if you had a lan ip that started other than 10.0.X.X it wouldn't match to go out.

CCNA, BCNE, Security+, Network +
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top