I cannot get cisco 1841 configured to browse the internet

[chaise271]

I am setting up an 1841 cisco router to browse the internet, but not using the serial connection, only using the FE connection. I have been tweaking a config, but the closest I have come to so far is being able to ping the router IP from the outside and ping the native Vlan IP from the inside. Can someone look at my config and let me know what needs to be changed/ where I went wrong.

interface FastEthernet0/0
description connected to $ETH-LAN$
ip address 173.?.?.125 255.255.?.?
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
description Physical interface connection
no ip address
no ip split-horizon
duplex auto
speed auto
!
interface FastEthernet0/1.1
description LocalLan-Vlan1
encapsulation dot1Q 1 native
ip address 172.16.1.? 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/1.5
description Storage-Vlan5
encapsulation dot1Q 5
ip address 172.16.5.? 255.255.255.0
ip helper-address 172.16.?.?
ip nat inside
ip virtual-reassembly

interface Serial0/0/0
no ip address
shutdown

no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 173.?.?.130
ip http server

ip nat inside source list 10 interface FastEthernet0/0 overload
ip nat inside source static tcp ?.?.?.? ****0 interface FastEthernet0/0 ****0
ip nat inside source static tcp ?.?.?.? **** interface FastEthernet0/0 ****
ip nat inside source static tcp ?.?.?.? **** interface FastEthernet0/0 ****
ip nat inside source static tcp ?.?.?.? ****interface FastEthernet0/0 ****
ip nat inside source static tcp ?.?.?.? ???? interface FastEthernet0/0 ????
ip nat inside source static tcp ?.?.?.? ????6 interface FastEthernet0/0 ****
ip nat inside source static tcp ?.?.?.? **** interface FastEthernet0/0 ****
ip nat inside source static ?.?.?.? 173.?.?.?

access-list 10 permit 172.16.1.0 0.0.0.255
access-list 10 permit 172.16.5.0 0.0.0.255
access-list 99 permit 172.16.5.0 0.0.0.255 log
access-list 99 permit ?.?.?.? 0.0.0.255 log
access-list 99 permit 172.16.1.0 0.0.0.255 log
access-list 99 permit ?.?.?.? 0.0.0.7 log
access-list 99 permit ?.?.?.? 0.0.0.7 log
access-list 99 permit ?.?.?.? 0.0.0.7 log
access-list 99 permit ?.?.?.? 0.0.0.255 log
access-list 99 deny any log
access-list 102 permit icmp any any
access-list 110 remark SDM_ACL Category=16
access-list 110 permit ip host 173.?.?.? host 69.?.?.?
access-list 110 remark SDM_ACL Category=16

 

[unclerico]

so from the router you can ping 4.2.2.2?? how is the switch port configured that is connected to f0/1??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[chaise271]

ping 4.2.2.2 from within the router and get 0 replies. nothing is currently plugged into the FE0/1 slot.

Thanks.. this is a new config, so where would you start??

 

[burtsbees]

Post the output of

sh ip int bri
sh ip route

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[chaise271]

FastEthernet0/0 173.?.?.? YES NVRAM up up
FastEthernet0/1 unassigned YES NVRAM up down
FastEthernet0/1.1 172.16.1.1 YES NVRAM up down
FastEthernet0/1.5 172.16.5.1 YES NVRAM up down
Serial0/0/0 unassigned YES NVRAM administratively down down
NVI0 173.?.?.? YES unset up up

I have nothing connected on the other side (FE0/1) as of yet, I would just like to get the router connecting to the outside first.

 

[chaise271]

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 173.?.?.? to network 0.0.0.0

173.?.?.0/?? is subnetted, 1 subnets
C 173.?.?.? is directly connected, FastEthernet0/0
S* 0.0.0.0/0 [1/0] via 173.?.?.?

 

[NetRx]

How about a trace to 4.2.2.2 from the router? Also, assuming there isn't much traffic flowing across the router, you could debug the trace and PING.

debug ip packet detail
ping 4.2.2.2
trace 4.2.2.2

If you are worried about CPU usage from the debug then you can filter the output with an ACL:

Router#configure terminal
Router(config)#access-list 150 permit ip host 173.x.x.x host 4.2.2.2
Router#debug ip packet 150

 

[chaise271]

I ran the debug command. I can now ping 4.2.2.2 100%

 

[burtsbees]

Stars?

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[chaise271]

burtsbees, by stars I hope you meant Kudo's.. Thanks guys, I am up 100%, the problem wasn't routing, which I thought it was. the entire config is perfect. The problem was physical. No one restarted the ISP's device once the new router was connected to it. The ISP's device was locked on the old routers Mac address, a simple reboot, forced the ISP's device to re-grab the newly connected devices Mac address and bingo. Its up, 100% and running. Thanks guys for your tips and speedy responses.

 

[ISPKing]

No he means little purple stars, click Thanks ISPKING for this valuealbe post, and give us all a star

CCNP

 

[burtsbees]

Whaddaya mean, "Thank ISPKING for his valuable post"??? What about me and uncle? Chopped liver, I suppose?



/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!