CiscoForums.it

Mi hanno regalato questo router. Sto cercando di configurarlo per navigare con Alice ma non riesco.

Dall'SMD ho selezionato ADSL, ho inserito i dati. La diagnostica mi dice tutto ok (tutto verde, comunica col server e gli viene assegnato un IP) ma non ne vuol sapere di navigare.

Come posso fare?

Questa la mia configurazione:

Building configuration...

Current configuration : 4771 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$doJA$.ZRT3sqZISUgGlK05Fejm0
!
no aaa new-model
!
resource policy
!
clock timezone PCTime 1
no ip source-route
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool1
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
!
!
ip tcp synwait-time 10
no ip bootp server
ip domain name 212.216.172.62
ip name-server 208.67.222.222
ip name-server 208.67.220.220
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
crypto pki trustpoint TP-self-signed-3051835190
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3051835190
revocation-check none
rsakeypair TP-self-signed-3051835190
!
!
crypto pki certificate chain TP-self-signed-3051835190
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33303531 38333531 3930301E 170D3038 31303132 31343436
32375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 30353138
33353139 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C08B 87F1F3DB 92042C03 64189006 2405935E 6371EAEE CA5BE854 7E25E584
F8D767AF BDB9D4AA 68C092B1 5D06C76F 1085FC1C D630837A 9D3BF093 FD1CA60A
BD71C730 DACC37FE E1D1AACB AA8ECB7A A2378AB7 4E9B47D7 896254C3 C619FB55
E61F3B02 5B37F0DA BB8DAF7D 870E2F8F 2C647BA2 E4307AC3 03DEA437 9E84914C
02E10203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E3231 322E3231 362E3137 322E3632
301F0603 551D2304 18301680 14EA0CF2 158FD15C 34BA2A75 75057DBA EB633901
28301D06 03551D0E 04160414 EA0CF215 8FD15C34 BA2A7575 057DBAEB 63390128
300D0609 2A864886 F70D0101 04050003 818100B9 B12F1EFD 612919AE 136B8595
A49BF91B 22F20FC9 5F2D886B 7ECD48C7 448D15E9 166AD461 D03B7FFE 74D6222C
F1390BBE DE13ECB1 3E0D291F 50EE09D2 F25A5DF7 1710E539 C151E3A7 0B6EAE9C
D27E0A56 D87D232B B437278B A42CFE3A A49409DC 7AFBB4A1 BD4E5B0E 35B4817A
C180069D 5D29C606 F939AA1D 473711C8 8D1191
quit
username giovanni privilege 15 secret 5 $1$PQNm$2kE6.fc9kTbCLDc/xFIWX/
!
!
!
!
!
!
interface FastEthernet0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
duplex auto
speed auto
!
interface BRI0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation hdlc
ip route-cache flow
shutdown
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.2 point-to-point
no snmp trap link-status
pvc 8/35
encapsulation aal5snap
protocol ppp dialer
dialer pool-member 1
!
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-FE 1$$ES_LAN$$FW_INSIDE$
ip address 10.10.10.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
!
interface Dialer0
ip address negotiated
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname [email protected]
ppp chap password 7 0014121F085A05025A751D1D5C1D001E01
ppp pap sent-username [email protected] password 7 1315160B070D0A2E7E7079606026160E05
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
logging trap debugging
dialer-list 1 protocol ip permit
no cdp run
!
!
!
!
!
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 4000 1000
scheduler interval 500
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end



GRAZIE!!!

scusate la dimenticanza! E' un router Cisci 1801

Non naviga no...manca un minimo di ACL per dare la possibilità alla rete privata di uscire.

access-list 1 permit 10.10.10.0 255.255.255.0

Anzi, manca anche un indirizzo per la ethernet...

ip address 10.10.10.1 255.255.255.0

Poi dovrebbe andare. Dico dovrebbe..non conosco il tuo gestore quindi non posso dire se la conf è corretta oppure no. Certo che se sei proprio alle prime armi partire così non è il massimo. Almeno qualcosa dovresti andare a vedertelo.

Si, infatti me lo hanno regalato ma per imparare ho bisogno prima dell'accesso a internet:)

Ho inserito access-list, ma per l'altro mi dà

yourname(config)#interface FastEthernet0
yourname(config-if)#ip address 10.10.10.1 255.255.255.0
% 10.10.10.0 overlaps with Vlan1
yourname(config-if)#

Cosa faccio?
Se mi mandi il tuo numero via pvt ti telefono, è urgente, grazie

no int Vlan1 e riprova.
Tanto la vlan non ti serve.

Ho inserito i comandi ma non va.

il ping funziona.

yourname#ping www.google.it

Translating "www.google.it"...domain server (208.67.222.222) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 208.69.34.231, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 60/64/68 ms

ma da browser non va...

Ciao,
ma il ping lo fai da router e quindi la connessione adsl funziona


Ora fai una cosa ti metti su un pc della lan e pinga il router, a cui avrai dato un io per poter comunicare con la tua lan, come ti ha consigliato di fare fm.

Poi una volta fatto pinga dal router un tuo pc e viceversa se questo avviene passiamo sulla seconda fase, fase uscire mediante nat il tuo pc su internet ;

Posta la congifurazione, se diversa da quella postata prima.

Non so, non ho quel tipo di apparato, ma ho provato a modificare la tua config, ho aggiunto, l'access-list, il nat, e un ip all'interfaccia di rete.

Allora, ora la mia configurazione è la seguente:

Building configuration...

Current configuration : 4935 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$doJA$.ZRT3sqZISUgGlK05Fejm0
!
no aaa new-model
!
resource policy
!
clock timezone PCTime 1
no ip source-route
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool1
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
!
!
ip tcp synwait-time 10
no ip bootp server
ip domain name 212.216.172.62
ip name-server 208.67.222.222
ip name-server 208.67.220.220
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
crypto pki trustpoint TP-self-signed-3051835190
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3051835190
revocation-check none
rsakeypair TP-self-signed-3051835190
!
!
crypto pki certificate chain TP-self-signed-3051835190
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33303531 38333531 3930301E 170D3038 31303132 31343436
32375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 30353138
33353139 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C08B 87F1F3DB 92042C03 64189006 2405935E 6371EAEE CA5BE854 7E25E584
F8D767AF BDB9D4AA 68C092B1 5D06C76F 1085FC1C D630837A 9D3BF093 FD1CA60A
BD71C730 DACC37FE E1D1AACB AA8ECB7A A2378AB7 4E9B47D7 896254C3 C619FB55
E61F3B02 5B37F0DA BB8DAF7D 870E2F8F 2C647BA2 E4307AC3 03DEA437 9E84914C
02E10203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E3231 322E3231 362E3137 322E3632
301F0603 551D2304 18301680 14EA0CF2 158FD15C 34BA2A75 75057DBA EB633901
28301D06 03551D0E 04160414 EA0CF215 8FD15C34 BA2A7575 057DBAEB 63390128
300D0609 2A864886 F70D0101 04050003 818100B9 B12F1EFD 612919AE 136B8595
A49BF91B 22F20FC9 5F2D886B 7ECD48C7 448D15E9 166AD461 D03B7FFE 74D6222C
F1390BBE DE13ECB1 3E0D291F 50EE09D2 F25A5DF7 1710E539 C151E3A7 0B6EAE9C
D27E0A56 D87D232B B437278B A42CFE3A A49409DC 7AFBB4A1 BD4E5B0E 35B4817A
C180069D 5D29C606 F939AA1D 473711C8 8D1191
quit
username giovanni privilege 15 secret 5 $1$PQNm$2kE6.fc9kTbCLDc/xFIWX/
!
!
!
!
!
!
interface FastEthernet0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
duplex auto
speed auto
!
interface BRI0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation hdlc
ip route-cache flow
shutdown
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.2 point-to-point
no snmp trap link-status
pvc 8/35
encapsulation aal5snap
protocol ppp dialer
dialer pool-member 1
!
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-FE 1$$ES_LAN$$FW_INSIDE$
ip address 10.10.10.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip accounting output-packets
ip nat inside
ip virtual-reassembly
ip route-cache flow
!
interface Dialer0
ip address negotiated
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname [email protected]
ppp chap password 7 0014121F085A05025A751D1D5C1D001E01
ppp pap sent-username [email protected] password 7 1315160B070D0A2E7E70796
06026160E05
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 9 interface Dialer0 overload
!
logging trap debugging
access-list 9 permit 10.0.0.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
!
!
!
!
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 4000 1000
scheduler interval 500
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end




Ma niente, mi pinga da console ma da browser non va...

Ho aggiunto ip nat outside all'interfaccia Dialer0 ma senza risultato.

Suggerimento profano: può c'entrare qualcosa l'Address Pool che l'SDM mi chiede di settare nella finestra NAT, e che non so come settare?

Purtroppo domani pomeriggio devo collegare questo router ad una rete e ancora non l'ho configurato:(

Ora è collegato ad un solo PC con cavo ethernet per cui non posso fare la prova che mi hai detto...

Nel dialer aggiungi: e poi cambia l'access-list così:

Ho fatto come hai detto.

ATTUALE CONFIGURAZIONE

Current configuration : 5018 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$doJA$.ZRT3sqZISUgGlK05Fejm0
!
no aaa new-model
!
resource policy
!
clock timezone PCTime 1
no ip source-route
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool1
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
!
!
ip tcp synwait-time 10
no ip bootp server
ip domain name 212.216.172.62
ip name-server 151.99.125.1
ip name-server 151.99.0.100
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
crypto pki trustpoint TP-self-signed-3051835190
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3051835190
revocation-check none
rsakeypair TP-self-signed-3051835190
!
!
crypto pki certificate chain TP-self-signed-3051835190
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33303531 38333531 3930301E 170D3038 31303132 31343436
32375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 30353138
33353139 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C08B 87F1F3DB 92042C03 64189006 2405935E 6371EAEE CA5BE854 7E25E584
F8D767AF BDB9D4AA 68C092B1 5D06C76F 1085FC1C D630837A 9D3BF093 FD1CA60A
BD71C730 DACC37FE E1D1AACB AA8ECB7A A2378AB7 4E9B47D7 896254C3 C619FB55
E61F3B02 5B37F0DA BB8DAF7D 870E2F8F 2C647BA2 E4307AC3 03DEA437 9E84914C
02E10203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E3231 322E3231 362E3137 322E3632
301F0603 551D2304 18301680 14EA0CF2 158FD15C 34BA2A75 75057DBA EB633901
28301D06 03551D0E 04160414 EA0CF215 8FD15C34 BA2A7575 057DBAEB 63390128
300D0609 2A864886 F70D0101 04050003 818100B9 B12F1EFD 612919AE 136B8595
A49BF91B 22F20FC9 5F2D886B 7ECD48C7 448D15E9 166AD461 D03B7FFE 74D6222C
F1390BBE DE13ECB1 3E0D291F 50EE09D2 F25A5DF7 1710E539 C151E3A7 0B6EAE9C
D27E0A56 D87D232B B437278B A42CFE3A A49409DC 7AFBB4A1 BD4E5B0E 35B4817A
C180069D 5D29C606 F939AA1D 473711C8 8D1191
quit
username giovanni privilege 15 secret 5 $1$PQNm$2kE6.fc9kTbCLDc/xFIWX/
!
!
!
!
!
!
interface FastEthernet0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip virtual-reassembly
ip route-cache flow
duplex auto
speed auto
!
interface BRI0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation hdlc
ip route-cache flow
shutdown
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.2 point-to-point
ip virtual-reassembly
no snmp trap link-status
pvc 8/35
encapsulation aal5snap
protocol ppp dialer
dialer pool-member 1
!
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-FE 1$$ES_LAN$$FW_INSIDE$
ip address 10.10.10.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip accounting output-packets
ip nat inside
ip virtual-reassembly
ip route-cache flow
!
interface Dialer0
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname [email protected]
ppp chap password 7 0014121F085A05025A751D1D5C1D001E01
ppp pap sent-username [email protected] password 7 1315160B070D0A2E7E70796
06026160E05
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 9 interface Dialer0 overload
!
logging trap debugging
access-list 9 permit 10.10.10.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
!
!
!
!
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 4000 1000
scheduler interval 500
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end




PURTROPPO NON VA

NOVITA': va da browser se inserisco l'ip del sito, con il nome no. Suggerimenti?

non funzionano i dns, prova a vedere se mediante DHCP vengono assenati, oppure le inserisci tu manualmente sui clienti e vedi se riesci a naviugare da client.


Cmq adesso è problemi di dns.