Cisco 881 router basic setup 1

[hall5942]

I am installing a new router and trying to get internet setup on it. I have the Static IP address setup, the next hop setup, DHCP setup, and NAT configued. From the router I can ping a external IP and

http://www.yahoo.com.

So I know DNS and the routes are setup correctly. Now from my laptop (I got a IP from DHCP from router, correct address, gateway, and DNS)I can NOT ping outside either to a IP or a web site. I am assuming it is a NAT issue but do not know what to look for.

Any Idea's?

Here is my config.


Building configuration...

Current configuration : 3847 bytes
!
! Last configuration change at 13:20:16 UTC Wed Jun 5 2013 by admin
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname XYZCompany
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
no aaa new-model
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-2627700742
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2627700742
revocation-check none
rsakeypair TP-self-signed-2627700742
!
!
crypto pki certificate chain TP-self-signed-2627700742
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32363237 37303037 3432301E 170D3133 30363034 31343335
31395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36323737
30303734 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D717 C78B9305 ECE544D3 74CF0DA9 F66B6AFE 1C835938 F1CA38C5 67A034E1
0A393769 6C1B1C78 FA63B818 B9632E23 793963B8 78979354 9BB5897B FE5F4F6E
BBBB7601 09BBBC2C 99F5CF1F 0F6B97BE 570BE8C7 127ADB91 0B381A5F 00856C0D
EE9F715A 300FDC2E CEB1871D E9F0EE2F 7810AADA 466F0174 53FF412E 5102FFE1
E18B0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14EED705 69D0161A E1E2B6FB 1017F54E 0834B066 06301D06
03551D0E 04160414 EED70569 D0161AE1 E2B6FB10 17F54E08 34B06606 300D0609
2A864886 F70D0101 05050003 818100CE 18A8D3A4 92F31CD6 D0C095F9 0356370F
5EE81F7E 623A5DB6 242BECCC 3E3CA278 952EF83A 3F11B005 1B332DB4 1B802B5A
1A5E307F F9D4273A 5DD08DAA 9D5AB41C E383BF88 18D5522B 7A030C06 96F85F3A
A06E278F E18FB1FB 051015BC B9CA4961 D1928D1B 1F023F7D 1CE30308 7BA478C4
294FA95D FF573B04 D397BE22 BD7A5B
quit
!
!
!
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.20.1 192.168.20.19
ip dhcp excluded-address 192.168.20.201 192.168.20.254
!
ip dhcp pool ccp-pool2
import all
network 192.168.20.0 255.255.255.0
dns-server 209.18.47.61 209.18.47.62
default-router 192.168.20.1
!
!
!
ip domain name XYZCompany.com
ip name-server 209.18.47.61
ip name-server 209.18.47.62
ip cef
no ipv6 cef
!
!
license udi pid CISCO881-K9 sn FTX1718806K
!
!
username admin privilege 15 secret 4 YYwz9kzCrPh8IuPPEuRGUUcUzFamHE1zAp6l1gSbmLc
!
!
!
!
!
zone security in-zone
zone security out-side
!
!
!
!
!
!
!
!
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
description $ETH-WAN$
ip address 8.8.8.8 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
zone-member security out-side
duplex auto
speed auto
!
interface Vlan1
description $ETH_LAN$
ip address 192.168.20.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
zone-member security in-zone
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat pool in-side 192.168.20.0 192.168.20.255 netmask 255.255.255.0
ip nat inside source list 1 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 8.8.8.7
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 192.168.20.0 0.0.0.255
access-list 199 remark CCP_ACL Category=16
access-list 199 permit ip any any
no cdp run
!
!
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
!
end

 

[hall5942]

DHCP gave my laptop 192.168.20.20/24

 

[Viconsul]

Hi,

The ip address of your wan interface cannot be correct.
Please provide more info on how you are connected to the internet.

interface FastEthernet4
description $ETH-WAN$
[COLOR=red]ip address 8.8.8.8 255.255.255.252[/color]
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
zone-member security out-side
duplex auto
speed auto

 

[hall5942]

I changed the Static IP address just so it wouldn't be public info. Same as the gateway. Fastethernet 4 is hooked up to TWC modem.

 

[Viconsul]

You will need to point your default route to fa4

 ip route 0.0.0.0 0.0.0.0 fa4

 

[hall5942]

Thank You!!

 

[Viconsul]

You are welcome

 

[tphethai]

don't forget to run hardening on your cisco internet router..