Cisc0 857

[Cleto]

Salve,
io ho un Cisco 857 nuovo nuovo. L'ho configurato correttamente (credo), si connette ad internet ma i pc che sono in rete non riescono a navigare. C'è una qualche configurazione che ho tralasciato???

Grazie,

Cleto

[MaiO]

Se ci posti la tua configurazione magari possiamo anche dirtelo. Cosi "ad occhi chiusi" ci risulta difficile.

Oltre al sh run posta anche un sh ver (curiosita mia per vedere la ver di ios che viene fornita con la serie 85x).

Grazie

[Cleto]

Current configuration : 3098 bytes
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname Clerin
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$E2n6$aerMZtuVIWSG/5i28NLkB/
!
username Simone privilege 15 secret 5 $1$43D2$uJBQFaRqpL0dDuV0Gb789/
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
no aaa new-model
ip subnet-zero
no ip source-route
ip dhcp excluded-address 192.168.0.1
!
ip dhcp pool sdm-pool1
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
!
!
ip cef
ip tcp synwait-time 10
no ip bootp server
no ip domain lookup
ip domain name Clerin
ip ssh time-out 60
ip ssh authentication-retries 2
no ftp-server write-enable
!
!
!
!
!
!
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description $FW_OUTSIDE$$ES_WAN$
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
no ip address
no cdp enable
!
interface FastEthernet1
no ip address
no cdp enable
!
interface FastEthernet2
no ip address
no cdp enable
!
interface FastEthernet3
no ip address
no cdp enable
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 192.168.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname [email protected]
ppp chap password 7 00554155500E5D515778
ppp pap sent-username [email protected] password 7 03550958525A771B1650
!
ip classless
ip route 0.0.0.0 0.0.0.0 ATM0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.0.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
no modem enable
transport preferred all
transport output telnet
line aux 0
login local
transport preferred all
transport output telnet
line vty 0 4
privilege level 15
login local
transport preferred all
transport input telnet ssh
transport output all
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end

Il mio problema è che si connette ad internet ma i pc che ho in rete non navigano... Grazie!

[TheIrish]

Nella configurazione del dhcp non c'è traccia dei DNS. Quindi ho li hai impostati sulle macchine, oppure non risolverai un hostname neanche a pregare.

[Cleto]

Uhm... Ed i DNS me li deve dare il mio provider giusto?

[TheIrish]

Beh, direi proprio di sì.
Se è telecom (alice e affini), uno dovrebbe essere 212.216.112.112

[Cleto]

Ecco come ho variato la configurazione:

Current configuration : 3163 bytes
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname Clerin
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$E2n6$aerMZtuVIWSG/5i28NLkB/
!
username Simone privilege 15 secret 5 $1$43D2$uJBQFaRqpL0dDuV0Gb789/
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
no aaa new-model
ip subnet-zero
no ip source-route
ip dhcp excluded-address 192.168.0.1
!
ip dhcp pool sdm-pool1
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 62.94.0.1 62.94.0.2
!
!
ip cef
ip tcp synwait-time 10
no ip bootp server
ip domain name Clerin
ip name-server 62.94.0.1
ip name-server 62.94.0.2
ip ssh time-out 60
ip ssh authentication-retries 2
no ftp-server write-enable
!
!
!
!
!
!
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description $FW_OUTSIDE$$ES_WAN$
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
no ip address
no cdp enable
!
interface FastEthernet1
no ip address
no cdp enable
!
interface FastEthernet2
no ip address
no cdp enable
!
interface FastEthernet3
no ip address
no cdp enable
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 192.168.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname [email protected]
ppp chap password 7 00554155500E5D515778
ppp pap sent-username [email protected] password 7 03550958525A771B1650
!
ip classless
ip route 0.0.0.0 0.0.0.0 ATM0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.0.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
no modem enable
transport preferred all
transport output telnet
line aux 0
login local
transport preferred all
transport output telnet
line vty 0 4
privilege level 15
login local
transport preferred all
transport input telnet ssh
transport output all
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end


Manca ancora qualcosa? Perchè continua a non fungere...

Grazie!!!

[Cleto]

C'è nessuno che mi risponde???

Non so che pesci pigliare...

Grazie!

[TheIrish]

ip route 0.0.0.0 0.0.0.0 ATM0

Non l'avevo notato, questa riga è sbagliata. Rimuovila (ridigitando il comando con il no davanti).
Quella corretta è ovviamente:

ip route 0.0.0.0 0.0.0.0 Dialer0

[Cleto]

Ciao!
Ora la mia config è:

Current configuration : 3166 bytes
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname Clerin
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$E2n6$aerMZtuVIWSG/5i28NLkB/
!
username Simone privilege 15 secret 5 $1$43D2$uJBQFaRqpL0dDuV0Gb789/
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
no aaa new-model
ip subnet-zero
no ip source-route
ip dhcp excluded-address 192.168.0.1
!
ip dhcp pool sdm-pool1
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 62.94.0.1 62.94.0.2
!
!
ip cef
ip tcp synwait-time 10
no ip bootp server
ip domain name Clerin
ip name-server 62.94.0.1
ip name-server 62.94.0.2
ip ssh time-out 60
ip ssh authentication-retries 2
no ftp-server write-enable
!
!
!
!
!
!
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description $FW_OUTSIDE$$ES_WAN$
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
no ip address
no cdp enable
!
interface FastEthernet1
no ip address
no cdp enable
!
interface FastEthernet2
no ip address
no cdp enable
!
interface FastEthernet3
no ip address
no cdp enable
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 192.168.0.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname [email protected]
ppp chap password 7 00554155500E5D515778
ppp pap sent-username [email protected] password 7 03550958525A771B1650
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.0.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
no modem enable
transport preferred all
transport output telnet
line aux 0
login local
transport preferred all
transport output telnet
line vty 0 4
privilege level 15
login local
transport preferred all
transport input telnet ssh
transport output all
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end


Si connette ad internet, mi fa l'accesso a MSN ma non naviga... Come mai??? Mi par strano che funzioni MSN ma no l'explorer... Non è che ho qualche porta chiusa? Come avrete capito non ho dimestichezza con i Cisco, è il primo che acquisto e ho grossi problemi per la configurazione.

Inoltre domando:
1) c'è la possibilità di assegnare un indirizzo IP statico ad un preciso indirizzo MAC?
2) come faccio a fare il "port forwarding"?

GRAZIE!!!

Cleto

[TheIrish]

Ai punti extra pensiamo dopo. Io sospetto ancora che i dns siano errati... mi sbaglierò...

[Cleto]

Eppure sono quelli fornitimi da Cheapnet, il mio fornitore ADSL!

[Cleto]

Ciao,

ho fatto l'aggiornamento al SDM 2.2 che mi sembrava anche più facile per lavorarci.
Ed ecco cosa ho riscontrato: quando faccio il test connection mi dice che tutte le connessioni sono ok. Mi assegna correttamente l'indirizzo IP (che è statico ma devo comunque negoziarlo). Se eseguo l'explorer, le pagine mi si aprono ma con una lentezza spaventosa (8-10 minuti per la prima pagina di libero). Cosa può essere?
Leggendo qua e la ho visto che ho una IOS strana, la 12.3(8)Yl1 ma sul sito Cisco l'857 lo da con un'altra IOS... Può essere questo fatto?
C'è la possibilità di aggioranare la IOS?

Grazie per la (santa) pazienza...

Simone

[TheIrish]

Mi fa pensare che più che un problema di connessione, si tratti di un problema di sovraccarico.
Prova a levare:

logging trap debugging

e, per togliere ogni dubbio, dalla riga di comando dagli un bel undebug all.