Can anybody plz help me with the config of my cisco router 1600

[wopper]

i tryend several options now but can't seem to get it working. :(

if some body can help thxs

here is my config now:

!
version 12.0
no service pad
service timestamps debug datetime
service timestamps log datetime
service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname Newgrounds
!
enable password 7 0355085F5E
!
ip subnet-zero
no ip finger
ip tcp path-mtu-discovery
ip domain-name Newgrounds.nl
ip name-server 212.142.28.66
clock timezone Amsterdam 0
!
!
!
interface Ethernet0
description Thuis LAN
ip address 192.168.0.4 255.255.255.0
ip access-group LAN in
ip helper-address 192.168.0.2
no ip directed-broadcast
ip nat inside
no ip route-cache
no keepalive
no cdp enable
!
interface Ethernet1
description Comport LAN to Cablemodem
ip address 213.93.117.62 255.255.255.0
ip access-group WAN in
no ip directed-broadcast
ip nat outside
no ip route-cache
no keepalive
no cdp enable
!
router rip
version 2
redistribute connected
passive-interface Ethernet0
network 192.168.0.0
network 213.0.0.0
no auto-summary
!
ip nat pool net-0 192.168.0.1 192.168.0.254 prefix-length 24
ip nat inside source list 1 pool net-0
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.0.254
!
access-list 5 permit 192.168.0.0 0.0.0.255
no cdp run
snmp-server trap-source Ethernet0
banner motd ^C

********************************************************************

N e w G r o u n d s
- Erik -

UNAUTHORIZED ACCESS STRICTLY PROHIBITED!

Unauthorized access or modification of any information
stored on this system may result in criminal prosecution.


********************************************************************^C
!
line con 0
exec-timeout 5 0
password 7 06575C7514
login
transport input none
line vty 0 4
access-class 5 in
exec-timeout 5 0
password 7 101F5A4D5D
login
!
end

[wopper]

is it also possible to use the DHCP server of my ISP??

if you want to contact my and help thx

icq: 6199779

[msprouls]

I can give you 1348 reasons to change your Cisco "Encrypted" passwords.

I don't think you can get a cisco to use its physical interface IP
address as part of the NAT Pool. One thing I do know.. there are
always a least 100 different ways to get a Cisco to do anything. :)

The config below assumes you have access to another legal IP address on the same subnet.

The only time you use the IP helper-address is when the DHCP server
lives on a different subnet the the requesting host.

interface Ethernet0
description Thuis LAN
ip address 192.168.0.4 255.255.255.0
ip access-group LAN in (I did not see any Named Access list below?)
no ip directed-broadcast
ip nat inside
no ip route-cache
no keepalive
no cdp enable
!
interface Ethernet1
description Comport LAN to Cablemodem
ip address 213.93.117.62 255.255.255.0
ip access-group WAN in (I did not see any Named Access list below?)
no ip directed-broadcast
ip nat outside
no ip route-cache
no keepalive
no cdp enable
!
!
ip nat pool net-0 213.93.117.63 213.93.117.63 prefix-length 24
!(Not sure if you have another IP)
ip nat inside source list 1 pool net-0 overload
!(Allows PAT since only have one IP in Pool)
ip route 0.0.0.0 0.0.0.0 213.93.117.1
!(This should point to the gateway of your ISP)
!
access-list 5 permit 192.168.0.0 0.0.0.255
access-list 1 permit 192.168.0.0 0.0.0.255
(needed for IP nat statement above- list 1)

Hope this helps.

Matt
msprouls@advancenet.net

[wopper]

It looks like you know Cisco out of the back of your head :)

I'm just getting started :).. Cisco is hard stuff to configure. so much possibilities :)

i have a go whit your config.. thx m8.

[msprouls]

Glad it worked. I help maintain a WAN with about 1300 Cisco routers, and still growing. The only thing I have learned.... Nobody knows it all. :eek: I have access to great people, great books and a lot of time in the trenches. Give me a shout if you have any more questions.


Matt
msprouls@advancenet.net

[wopper]

i will..

i think it wont take long before i get stuck again whit the config. i can get some info from my job at Equant and SITA next week or so. i work part time there.

thx for the help m8

[tomsykes]

Exactly msprouls - there is always some querky line of IOS which takes everyone by surprise !

[wopper]

how should i configure my TCP/IP on my computers..??

and my internet explorer ??

[wopper]

if i use cisco config maker and connect the internet icon with eth. to the cisco router i have to fill in some info. at a surten point i can slect 2 things "wan interface address for dynamic source address translation" and "use global address pool for dynamic source address translation". if i take the second i have to fill in a global address pool??? what should i fill in here??

[msprouls]

213.93.117.63 would be your global pool that will be using overload (PAT).

You should be able to paste in the config from above minus my coments.

Stay away from Cisco Configuration Maker. It is very limited and will slow your growth. Use Cisco CD or Web page to access documentation. I know from experience how painfull Cisco Documentation can be, but you will know it off the top of your head before long.

Post your current config if you want me to take a look at it.

Matt

[wopper]

ok i will thx m8..

it will be a couple of days before i get to the config again.. :).

[wopper]

is it possible to cofigure this router as a DHCP for my internal network ?

[msprouls]

Not sure why you would want to do that. Not saying you can't, just not sure why.

Matt

[wopper]

how should i configure my tcp/ip on the computers??

dns etc.

[YeOldeStonecat]

TCP on the computers should be configured to have static IP, subnet, gateway, and DNS.

The IP will follow the internal IP scheme of your router.

The Cisco is what, 10.0.0.1? So your computer will be 10.0.0.2-253, each one being different.

Subnet on all should be 255.255.255.0.

Leave WINS disabled.

The gateway on all will be your routers internal IP, 10.0.0.1 I'm guessing.

The DNS has 3 parts, the host name is simply the network name of the computer on the network identfication tab. Since you're behind a router, you can name your computer whatever you want. The DNS domain is simply your ISP, works fine if you leave it blank. You enter your ISP's 2 DNS servers, which you can find either on your ISP's support website, by calling their support, on any documentation that they may have sent you, or if you look around on your router, some status page when it's connected, it will show which servers your ISP handed down via DHCP.

[wopper]

ok iff got the router working (for some part) i can ping ip addresses and domain names but when i do a ping directly from the router to the internet my relpy is only 60% so packet gets a reply and the other one not then the next one gets a reply again and so on. whats wrong with the config??

ps i have only 1 IP from my ISP

can you help me with this one mprouls..

ps here is the config the router is running now.

!
version 12.0
no service pad
service timestamps debug datetime
service timestamps log datetime
service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname Newgrounds
!
enable password ****
!
ip subnet-zero
no ip finger
ip tcp path-mtu-discovery
ip domain-name Newgrounds.nl
ip name-server 212.142.28.66
clock timezone Amsterdam 0
!
!
!
interface Ethernet0
no shutdown
description Thuis LAN
ip address 192.168.0.4 255.255.255.0
ip access-group LAN in
no ip directed-broadcast
ip nat inside
no ip route-cache
no keepalive
no cdp enable
!
interface Ethernet1
no shutdown
description Comport LAN to Cablemodem
ip address 213.93.117.62 255.255.255.0
ip access-group WAN in
no ip directed-broadcast
ip nat outside
no ip route-cache
no keepalive
no cdp enable
!
!
ip nat pool net-0 213.93.117.62 213.93.117.62 prefix-length 24
!
ip nat inside source list 1 pool net-0 overload
!
ip route 0.0.0.0 0.0.0.0 213.93.117.1
!
!
access-list 5 permit 192.168.0.0 0.0.0.255
access-list 1 permit 192.168.0.0 0.0.0.255
!
banner motd ^C
********************************************************************
N e w G r o u n d s
- Erik -
UNAUTHORIZED ACCESS STRICTLY PROHIBITED!
Unauthorized access or modification of any information
stored on this system may result in criminal prosecution.

********************************************************************^C
!
line con 0
exec-timeout 10 0
password ****
login
transport input none
line vty 0 4
access-class 5 in
exec-timeout 10 0
password ****
login
!
end

[msprouls]

Sounds like you are seeing every other packet drop while doing pings. Try pinging 213.93.117.1.. If that works fine there is not a lot you can do. Looks to me like there are equal cost routes to the destination you are pinging. I have seen this a quite a bit.

If you would like to Email me we can try some other things to test. I would like to adjust your access list for testing, but you don't want the whole world to see your access list. Trust Me :D

msprouls@advancenet.net

Matt