Configurazione Cisco 837

[Mattia]

Salve a tutti, sto cercando di configurare un router cisco 837.... ma non riesco a navigare. posto l'attuale configurazione nella speranza che qualcuno possa dirmi dove sbaglio.


version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname pippo
!
boot-start-marker
boot-end-marker
!
logging buffered 52000 debugging
logging console critical
enable secret 5 pippo
!
username pippo password 7 pippo
no aaa new-model
ip subnet-zero
no ip source-route
!
!
ip tcp synwait-time 10
ip name-server 213.205.32.70
ip name-server 213.205.36.70
no ip bootp server
ip cef
ip inspect name DEFAULT100 cuseeme
ip inspect name DEFAULT100 ftp
ip inspect name DEFAULT100 h323
ip inspect name DEFAULT100 netshow
ip inspect name DEFAULT100 rcmd
ip inspect name DEFAULT100 realaudio
ip inspect name DEFAULT100 rtsp
ip inspect name DEFAULT100 smtp
ip inspect name DEFAULT100 sqlnet
ip inspect name DEFAULT100 streamworks
ip inspect name DEFAULT100 tftp
ip inspect name DEFAULT100 tcp
ip inspect name DEFAULT100 udp
ip inspect name DEFAULT100 vdolive
ip inspect name DEFAULT100 icmp
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
no crypto isakmp enable
!
!
!
interface Ethernet0
description LAN Connection
ip address 192.168.1.1 255.255.255.0
ip access-group 100 in
ip nat inside
ip virtual-reassembly
no cdp enable
hold-queue 100 out
!
interface ATM0
no ip address
no ip mroute-cache
shutdown
no atm auto-configuration
no atm ilmi-keepalive
no atm address-registration
no atm ilmi-enable
dsl operating-mode auto
!
interface ATM0.1 point-to-point
no ip mroute-cache
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
interface Dialer0
description DSL Connection
ip address negotiated
ip access-group 101 in
ip nat outside
ip inspect DEFAULT100 out
ip virtual-reassembly
encapsulation ppp
ip tcp header-compression
dialer pool 1
dialer-group 1
ppp authentication chap callin
ppp chap hostname pippo
ppp chap password 7 pippo
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 2 interface Dialer0 overload
!
!
logging trap debugging
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 9 permit 213.205.32.0 0.0.0.255
access-list 9 permit 213.205.36.0 0.0.0.255
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip any any
access-list 199 deny icmp any any redirect log-input
access-list 199 deny ip 127.0.0.0 0.0.0.255 any log-input
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
line con 0
password 7 pippo
login local
no modem enable
stopbits 1
line aux 0
line vty 0 4
exec-timeout 5 0
privilege level 15
password 7 pippo
login local
transport input telnet ssh
!
scheduler max-task-time 5000
scheduler interval 500
end

Grazie tutti!
Mattia

[wiwan]

Prova a dare un " no shutdown" all'inerface ATM0,penso ke qui ci sia un'altro errore:

Codice: Seleziona tutto

ip nat inside source list 2 interface Dialer0 overload

dovrebbe essere:

Codice: Seleziona tutto

ip nat inside source list 1 interface Dialer0 overload

[spooke]

1.
ip nat inside source list 2 interface Dialer0 overload

allora dovrai creare una access-list 2 alla quale assegnare i permessi....

2.
sulla int dealer0 penso tu debba inviare una username al tuo provider...
ppp pap sent-username TUAUSER password TUAPASS

3.
momentaneamente prova a rimuovere tutte le acl e vedi se navighi...

[Mattia]

Grazie dei preziosi consigli......
vi chiedo però una cosa, quando io imposto il comando ip nat inside sulla ethernet0 o ip nat outside sul dialer ho sempre il seguante errore:

%NAT: Error activating CNBAR on the interface Dialer0 (ethernet0)

Sbaglio qualcosa??

Grazie a tutti!!
Mattia