|
Posted by Brian V on July 10, 2005, 7:56 am
If you were Registered and logged in, you could reply and use other advanced thread options
> skrev:
>
>>Hi Christer,
>>
>>These Cisco 837 Config Wizards may or may not help you:
>>
>>http://www.ifm.net.nz/cookbooks/configwizard.html
>>
>>as well as
>>
>>http://www.ifm.net.nz/cookbooks/ipv6configwizard.html
>>
>>Sincerely,
>>
>>Brad Reese
>>BradReese.Com Cisco Repair Service Experts
>>1293 Hendersonville Road, Suite 17
>>Asheville, North Carolina USA 28803
>>U.S. Toll Free: 877-549-2680
>>International: 828-277-7272
>>Website: http://www.bradreese.com/cisco-big-iron-repair.htm
>
> Hello
> I have now an config like this:
>
> version 12.2
> no service pad
> service timestamps debug datetime msec
> service timestamps log datetime msec
> service password-encryption
> !
> hostname Router
> !
> logging queue-limit 100
> !
> ip subnet-zero
> ip dhcp excluded-address 192.168.0.1
> ip dhcp excluded-address 195.67.199.9
> !
> ip dhcp pool balja
> network 192.168.0.0 255.255.255.0
> default-router 192.168.0.1
> dns-server 195.67.199.9 195.67.199.10
> !
> !
> ip audit notify log
> ip audit po max-events 100
> no ftp-server write-enable
> !
> !
> !
> !
> !
> bridge irb
> !
> !
> interface Ethernet0
> ip address 192.168.0.1 255.255.255.0
> ip nat inside
> hold-queue 100 out
> !
> interface ATM0
> no ip address
> no atm ilmi-keepalive
> pvc 8/35
> encapsulation aal5snap
> !
> dsl operating-mode auto
> bridge-group 1
> !
> interface BVI1
> ip address dhcp client-id Ethernet0
> ip nat outside
> !
> ip nat inside source list 1 interface BVI1 overload
> ip classless
> ip route 0.0.0.0 0.0.0.0 BVI1
> ip http server
> no ip http secure-server
> !
> access-list 1 permit 0.0.0.1 255.255.255.0
> bridge 1 protocol ieee
> bridge 1 route ip
> !
> line con 0
> exec-timeout 120 0
> no modem enable
> stopbits 1
> line aux 0
> stopbits 1
> line vty 0 4
> access-class 23 in
> exec-timeout 120 0
> login local
> length 0
> !
> scheduler max-task-time 5000
> !
>
> when executing sh arp, it gives this:
>
> Protocol Address Age (min) Hardware Addr Type Interface
> Internet 81.226.72.239 7 0002.3b00.d94b ARPA BVI1
> Internet 192.168.0.119 1 0006.5b57.4731 ARPA Ethernet0
> Internet 81.226.84.203 - 0000.0c46.2a10 ARPA BVI1
> Internet 192.168.0.1 - 000f.8f60.c97d ARPA Ethernet0
> Internet 81.226.67.77 2 0002.3b00.d94b ARPA BVI1
>
> It indicates some connection to the outside.
>
> Where am I wrong in the configuration?
>
> best regards
> Christer Bergström
> Viker
> Sweden
>
Your NAT acl is messed up, your only allowing deices with X.X.X.1 addresses
to be nated (which in your subnet is only your ethernets interface).
conf t
no access-list 1 permit 0.0.0.1 255.255.255.0
access-list 1 permit 192.168.0.0 0.0.0.255
exit
wr mem
-Brian
|