cisco 876 συνδέεται αλλά δε δίνει internet [Αρχείο]

alexandros_sc

21-03-10, 22:14

Καλησπέρα,

Έχω ένα cisco 876w, το οποίο και συνδέω πάνω σε μια otenet 8mbps static. Όπως μου είπαν από την otenet, χρησιμοποιώ PPPoA AAL5MUX. Το CD είναι συνεχώς αναμένο, κάτι που σημαίνει ότι συγχρονίζει. Επίσης, όταν βάζω τα στοιχεία της σύνδεσης, ανάβει και το PPP. Το πρόβλημα είναι ότι δε δίνει internet, τόσο στο εσωτερικό δίκτυο όσο και όταν πατάω test connection μέσα από το SDM, εμφανίζει πρόβλημα στους DNS.

Καμία ιδέα/πρόταση;

Ευχαριστώ.

binary_dreamer

22-03-10, 09:58

Δοκίμασε να το γυρίσεις σε pppoe

euri

22-03-10, 12:17

Κλασικά, παράθεσε εδώ το configuration...

binary_dreamer

22-03-10, 12:46

interface ATM0
no ip address
atm vc-per-vp 64
no atm ilmi-keepalive
pvc 8/35
pppoe-client dial-pool-number 1
!
dsl operating-mode auto

euri

22-03-10, 12:55

Eεεερ, στον αποπάνω το έλεγα, αλλά δεν πειράζει :)

alexandros_sc

22-03-10, 13:14

@ binary_dreamer: Και με PPPoE το ίδιο

@ euri: πως παραθέτω τα config εδώ; :D

euri

22-03-10, 13:16

Θα κάνεις login στον router με κάποιον telnet/ssh client (πχ τον PuTTY (http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html)), θα δώσεις show run και το αποτέλεσμα θα το κάνεις copy/paste εδώ.

eXpLoDeR

22-03-10, 13:35

Το πιθανότερο να είναι καποιο πρόβλημα στο ΝΑΤ...

binary_dreamer

22-03-10, 14:36

κάνε μια sh ip int brief και δώσε μας το output

alexandros_sc

22-03-10, 15:52

Current configuration : 4678 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
!
!
no ip domain lookup
ip domain name yourdomain.com
!
!
crypto pki trustpoint TP-self-signed-2664353395
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2664353395
revocation-check none
rsakeypair TP-self-signed-2664353395
!
!
crypto pki certificate chain TP-self-signed-2664353395
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32363634 33353333 3935301E 170D3032 30333031 30373230
31365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36363433
35333339 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C810 13BA749C 51E5D6B7 107157C5 7222FCF8 A4C924F8 F978E09F 2FD0CC58
E73D8A41 A04DAD62 5DB289DF 93499059 943075A0 8064233A E91E835B DBD816D0
469B67BB 02C60657 7852C577 5F7E5ADC 8C867470 2F438F06 5128317C D75D3F94
492D1A51 39F9C7F3 6DAC3589 D530940E 01100164 076B8FBF 674D3559 6965D600
7DF10203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 140FB2D8 335D91B0 38B6CF31 27862C61 13AA3B2F
F4301D06 03551D0E 04160414 0FB2D833 5D91B038 B6CF3127 862C6113 AA3B2FF4
300D0609 2A864886 F70D0101 04050003 81810072 39DADCE2 A6956E6E 8E8EA1DE
2A41F1D5 A8F9C01F E5305027 06A9F313 612F4E20 9E3FD1AC 1AF2965A 71BC08E3
B9B22E27 E63D18BF 1CB3B38A D3B66282 B439F1CE 83687D5F D7E8180B 147E9AE1
B404A930 3DE9EFF3 527868EA D2A2C40B A16FE714 36435CAD 111B06C0 09CE99B4
A6D25AAA F522337A D6F6A716 ED74188E B53A46
quit
username scientia privilege 15 secret 5 $1$gaan$qEvn/V38Z1Oab5APxTCS9.
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
no snmp trap link-status
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
shutdown
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.248
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Dialer0
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname -
ppp chap password 0 -
ppp pap sent-username
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.7
dialer-list 1 protocol ip permit
no cdp run
!
!
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco".

Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end

binary_dreamer

22-03-10, 16:08

κάνε μου μια χάρη και ρίξε την εντολή που προανέφερα για pppoe και μην το σώσεις.
Δοκίμασε αν αυτό σου παίξει.
κάτι δεν μου αρέσει στο config σου στο κομμάτι atm 0 για το 8/35

taxiarxos

22-03-10, 16:34

Έχει κ wifi επάνω;Αν ναι έχεις φάει ένα interface....

Για το ATM δώσε τα παρακάτω.

interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto ή ADSL2 ή ADSL2+!
interface ATM0.1 point-to-point
description $ES_WAN$$FW_OUTSIDE$
no ip redirects
no ip unreachables
no ip proxy-arp
pvc 8/35
encapsulation aal5snap
protocol ppp dialer
dialer pool-member 1

Επίσης δώσε ip name-server τον DNS του ISP σου.

alexandros_sc

22-03-10, 16:58

εδώ είναι το sh ip int brief με PPPoA

Interface IP-Address OK? Method Status Protocol
FastEthernet0 unassigned YES unset up up
FastEthernet1 unassigned YES unset up down
FastEthernet2 unassigned YES unset up down
FastEthernet3 unassigned YES unset up down
BRI0 unassigned YES NVRAM administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
Dot11Radio0 unassigned YES TFTP administratively down down
ATM0 unassigned YES NVRAM up up
ATM0.1 unassigned YES unset up up
Vlan1 10.10.10.1 YES NVRAM up up

........Auto merged post: alexandros_sc πρόσθεσε 1 λεπτά και 15 δευτερόλεπτα αργότερα ........

Εδώ είναι το show run με PPPoE

Building configuration...

Current configuration : 4667 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
!
!
no ip domain lookup
ip domain name yourdomain.com
!
!
crypto pki trustpoint TP-self-signed-2664353395
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2664353395
revocation-check none
rsakeypair TP-self-signed-2664353395
!
!
crypto pki certificate chain TP-self-signed-2664353395
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32363634 33353333 3935301E 170D3032 30333031 30373230
31365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36363433
35333339 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C810 13BA749C 51E5D6B7 107157C5 7222FCF8 A4C924F8 F978E09F 2FD0CC58
E73D8A41 A04DAD62 5DB289DF 93499059 943075A0 8064233A E91E835B DBD816D0
469B67BB 02C60657 7852C577 5F7E5ADC 8C867470 2F438F06 5128317C D75D3F94
492D1A51 39F9C7F3 6DAC3589 D530940E 01100164 076B8FBF 674D3559 6965D600
7DF10203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 140FB2D8 335D91B0 38B6CF31 27862C61 13AA3B2F
F4301D06 03551D0E 04160414 0FB2D833 5D91B038 B6CF3127 862C6113 AA3B2FF4
300D0609 2A864886 F70D0101 04050003 81810072 39DADCE2 A6956E6E 8E8EA1DE
2A41F1D5 A8F9C01F E5305027 06A9F313 612F4E20 9E3FD1AC 1AF2965A 71BC08E3
B9B22E27 E63D18BF 1CB3B38A D3B66282 B439F1CE 83687D5F D7E8180B 147E9AE1
B404A930 3DE9EFF3 527868EA D2A2C40B A16FE714 36435CAD 111B06C0 09CE99B4
A6D25AAA F522337A D6F6A716 ED74188E B53A46
quit
username scientia privilege 15 secret 5 $1$gaan$qEvn/V38Z1Oab5APxTCS9.
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.2 point-to-point
no snmp trap link-status
pvc 8/35
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
shutdown
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.248
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1412
!
interface Dialer1
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname
ppp chap password 0 1nt3rm@s
ppp pap sent-username
!
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip nat inside source list 1 interface Dialer1 overload
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.7
dialer-list 1 protocol ip permit
no cdp run
!
!
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco".

Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end

........Auto merged post: alexandros_sc πρόσθεσε 0 λεπτά και 51 δευτερόλεπτα αργότερα ........

Επίσης, το wifi είναι κλειστό. Έκανα c/p ότι ακριβώς έβγαλε.

binary_dreamer

22-03-10, 16:59

κάνε και ένα sh ip int brief με pppoe!
αλλά δώσε του μερικά λεπτά να συγχρονίσει.

alexandros_sc

22-03-10, 17:04

Από otenet, μου έδωσαν τους εξής DNS:

195.168.0.1
195.170.2.2

Αυτά εννοούμε;

........Auto merged post: alexandros_sc πρόσθεσε 4 λεπτά και 47 δευτερόλεπτα αργότερα ........

sh ip int brief και με PPPoE:

Interface IP-Address OK? Method Status Protocol
FastEthernet0 unassigned YES unset up up
FastEthernet1 unassigned YES unset up down
FastEthernet2 unassigned YES unset up down
FastEthernet3 unassigned YES unset up down
BRI0 unassigned YES NVRAM administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
Dot11Radio0 unassigned YES TFTP administratively down down
ATM0 unassigned YES NVRAM up up
ATM0.1 unassigned YES unset deleted down
ATM0.2 unassigned YES unset up up
Vlan1 10.10.10.1 YES NVRAM up up
NVI0 unassigned NO unset up up
Virtual-Access1 unassigned YES unset up up
Virtual-Dot11Radio0 unassigned YES TFTP administratively down down
Virtual-Access2 unassigned YES unset up up
Dialer1 62.103.184.118 YES IPCP up up

nstamoul

22-03-10, 17:39

Από otenet, μου έδωσαν τους εξής DNS:

195.168.0.1
195.170.2.2

Αυτά εννοούμε;

........Auto merged post: alexandros_sc πρόσθεσε 4 λεπτά και 47 δευτερόλεπτα αργότερα ........

sh ip int brief και με PPPoE:

Interface IP-Address OK? Method Status Protocol
FastEthernet0 unassigned YES unset up up
FastEthernet1 unassigned YES unset up down
FastEthernet2 unassigned YES unset up down
FastEthernet3 unassigned YES unset up down
BRI0 unassigned YES NVRAM administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
Dot11Radio0 unassigned YES TFTP administratively down down
ATM0 unassigned YES NVRAM up up
ATM0.1 unassigned YES unset deleted down
ATM0.2 unassigned YES unset up up
Vlan1 10.10.10.1 YES NVRAM up up
NVI0 unassigned NO unset up up
Virtual-Access1 unassigned YES unset up up
Virtual-Dot11Radio0 unassigned YES TFTP administratively down down
Virtual-Access2 unassigned YES unset up up
Dialer1 62.103.184.118 YES IPCP up up

Χωρίς να διαβάσω όλο το thread βλέπω ότι ΙΡ σου δίνει.

alexandros_sc

22-03-10, 17:44

Χωρίς να διαβάσω όλο το thread βλέπω ότι ΙΡ σου δίνει.

Ισχύει και αυτή είναι και η statuc ip μου.

nstamoul

22-03-10, 17:48

Το router σου "έχει" internet λοιπόν.

Από το router pingάρεις internet IPs? (π.χ 195.170.2.2)

Από το router pingάρεις internet domains? (π.χ. www.otenet.gr)

Από το pc σου?

gatoulas

22-03-10, 17:59

Το PC σου παίρνει IP από το dhcp υποθέτω.
Οπότε δώσε:

ip dhcp pool sdm-pool
dns-server 195.170.0.1 195.170.2.2

Simple as that

alexandros_sc

22-03-10, 18:31

Το router σου "έχει" internet λοιπόν.

Από το router pingάρεις internet IPs? (π.χ 195.170.2.2)

Από το router pingάρεις internet domains? (π.χ. www.otenet.gr)

Από το pc σου?

από telnet έδωσα ping και στην ip και στο domain και έβγαλε timeout. Και από το pc το ίδιο!

nontasaggelis

22-03-10, 22:36

Απο το config σου δεν βλεπω να εχουν περαστει οι DNS του οτε!
Δεν βλεπω προβλημα με το NAT!
Επισης ειδα οτι εχεις κανει το αρχικο σου config με το SDM!
Θα προτεινα reset με το κουμπακι απο πισω (το πατας με κατι αιχμηρο,κρατωντας το πατημενο κλεινεις για λιγο τον ρουτερ και τον ξαναανοιγεις και μετα απο 6-7sec αφηνεις πια το κουμπι)
Στη συνεχεια ξανακανεις απο την αρχη το config σου!Στην καρτελα DHCP SERVER CONGIGURATION γραψε ως primary DNS το 195.170.0.1 καο ως secondary DNS το 195.170.2.2. ΤΕΛΟΣ τσεκαρε και το :USE THESE DNS VALUES FOR CLIENT DHCP (-καπως ετσι το λεει).

karavagos

22-03-10, 23:29

int dialer 1
ppp ipcp dns request

boeotian

23-03-10, 10:06

Τι ωραία πράγματα! Ρε παιδιά εγώ έχω μόνο αυτό στο atm interface:

interface ATM0
description ATM Connection to TEE
bandwidth 384
backup delay 120 0
backup interface Dialer1
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1

Να το γυρίσω σε pppoe;

alexandros_sc

23-03-10, 11:45

Απο το config σου δεν βλεπω να εχουν περαστει οι DNS του οτε!
Δεν βλεπω προβλημα με το NAT!
Επισης ειδα οτι εχεις κανει το αρχικο σου config με το SDM!
Θα προτεινα reset με το κουμπακι απο πισω (το πατας με κατι αιχμηρο,κρατωντας το πατημενο κλεινεις για λιγο τον ρουτερ και τον ξαναανοιγεις και μετα απο 6-7sec αφηνεις πια το κουμπι)
Στη συνεχεια ξανακανεις απο την αρχη το config σου!Στην καρτελα DHCP SERVER CONGIGURATION γραψε ως primary DNS το 195.170.0.1 καο ως secondary DNS το 195.170.2.2. ΤΕΛΟΣ τσεκαρε και το :USE THESE DNS VALUES FOR CLIENT DHCP (-καπως ετσι το λεει).

Σε ποιό σημείο του SDM είναι οι ρυθμίσεις για το DHCP; Έχω φάει τον τόπο και δε μπορώ να το βρώ!

taxiarxos

23-03-10, 12:46

Για ρίξε μια ματιά σε αυτό : http://www.netcraftsmen.net/resources/archived-articles/467.html :)

alexandros_sc

23-03-10, 13:24

Το έκανα, στο test connection βγάζει πρόβλημα στο pinging destination host.

To show run:

ip domain name yourdomain.com
ip name-server 195.170.0.1
ip name-server 195.170.2.2
!
appfw policy-name SDM_HIGH
application im aol
service default action reset alarm
service text-chat action reset alarm
server deny name login.oscar.aol.com
server deny name toc.oscar.aol.com
server deny name oam-d09a.blue.aol.com
audit-trail on
application im msn
service default action reset alarm
service text-chat action reset alarm
server deny name messenger.hotmail.com
server deny name gateway.messenger.hotmail.com
server deny name webmessenger.msn.com
audit-trail on
application http
strict-http action reset alarm
port-misuse im action reset alarm
port-misuse p2p action reset alarm
port-misuse tunneling action reset alarm
application im yahoo
service default action reset alarm
service text-chat action reset alarm
server deny name scs.msg.yahoo.com
server deny name scsa.msg.yahoo.com
server deny name scsb.msg.yahoo.com
server deny name scsc.msg.yahoo.com
server deny name scsd.msg.yahoo.com
server deny name cs16.msg.dcn.yahoo.com
server deny name cs19.msg.dcn.yahoo.com
server deny name cs42.msg.dcn.yahoo.com
server deny name cs53.msg.dcn.yahoo.com
server deny name cs54.msg.dcn.yahoo.com
server deny name ads1.vip.scd.yahoo.com
server deny name radio1.launch.vip.dal.yahoo.com
server deny name in1.msg.vip.re2.yahoo.com
server deny name data1.my.vip.sc5.yahoo.com
server deny name address1.pim.vip.mud.yahoo.com
server deny name edit.messenger.yahoo.com
server deny name messenger.yahoo.com
server deny name http.pager.yahoo.com
server deny name privacy.yahoo.com
server deny name csa.yahoo.com
server deny name csb.yahoo.com
server deny name csc.yahoo.com
audit-trail on
!
!
crypto pki trustpoint TP-self-signed-2664353395
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2664353395
revocation-check none
rsakeypair TP-self-signed-2664353395
!
!
crypto pki certificate chain TP-self-signed-2664353395
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32363634 33353333 3935301E 170D3032 30333031 30373230
31365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36363433
35333339 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C810 13BA749C 51E5D6B7 107157C5 7222FCF8 A4C924F8 F978E09F 2FD0CC58
E73D8A41 A04DAD62 5DB289DF 93499059 943075A0 8064233A E91E835B DBD816D0
469B67BB 02C60657 7852C577 5F7E5ADC 8C867470 2F438F06 5128317C D75D3F94
492D1A51 39F9C7F3 6DAC3589 D530940E 01100164 076B8FBF 674D3559 6965D600
7DF10203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 140FB2D8 335D91B0 38B6CF31 27862C61 13AA3B2F
F4301D06 03551D0E 04160414 0FB2D833 5D91B038 B6CF3127 862C6113 AA3B2FF4
300D0609 2A864886 F70D0101 04050003 81810072 39DADCE2 A6956E6E 8E8EA1DE
2A41F1D5 A8F9C01F E5305027 06A9F313 612F4E20 9E3FD1AC 1AF2965A 71BC08E3
B9B22E27 E63D18BF 1CB3B38A D3B66282 B439F1CE 83687D5F D7E8180B 147E9AE1
B404A930 3DE9EFF3 527868EA D2A2C40B A16FE714 36435CAD 111B06C0 09CE99B4
A6D25AAA F522337A D6F6A716 ED74188E B53A46
quit
username scientia privilege 15 secret 5 $1$bSZk$4lhnbvSkCxP9iyC8znLXp1
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
no snmp trap link-status
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Dot11Radio0
no ip address
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$FW_INSIDE$
ip address 10.10.10.1 255.255.255.248
ip access-group 100 in
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
ip access-group 103 in
ip inspect SDM_HIGH out
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname xxxxxxxx
ppp chap password 0 xxxxxxxx
ppp pap sent-username xxxxxxxxxx password 0 xxxxxxxxx
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.7
access-list 100 remark auto generated by SDM firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 permit udp host 195.170.2.2 eq domain any
access-list 101 permit udp host 195.170.0.1 eq domain any
access-list 101 deny ip 10.10.10.0 0.0.0.7 any
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip host 0.0.0.0 any
access-list 101 deny ip any any log
access-list 102 remark auto generated by SDM firewall configuration
access-list 102 remark SDM_ACL Category=1
access-list 102 permit udp host 195.170.2.2 eq domain any
access-list 102 permit udp host 195.170.0.1 eq domain any
access-list 102 deny ip 10.10.10.0 0.0.0.7 any
access-list 102 permit icmp any any echo-reply
access-list 102 permit icmp any any time-exceeded
access-list 102 permit icmp any any unreachable
access-list 102 deny ip 10.0.0.0 0.255.255.255 any
access-list 102 deny ip 172.16.0.0 0.15.255.255 any
access-list 102 deny ip 192.168.0.0 0.0.255.255 any
access-list 102 deny ip 127.0.0.0 0.255.255.255 any
access-list 102 deny ip host 255.255.255.255 any
access-list 102 deny ip host 0.0.0.0 any
access-list 102 deny ip any any log
access-list 103 remark auto generated by SDM firewall configuration
access-list 103 remark SDM_ACL Category=1
access-list 103 permit udp host 195.170.2.2 eq domain any
access-list 103 permit udp host 195.170.0.1 eq domain any
access-list 103 deny ip 10.10.10.0 0.0.0.7 any
access-list 103 permit icmp any any echo-reply
access-list 103 permit icmp any any time-exceeded
access-list 103 permit icmp any any unreachable
access-list 103 deny ip 10.0.0.0 0.255.255.255 any
access-list 103 deny ip 172.16.0.0 0.15.255.255 any
access-list 103 deny ip 192.168.0.0 0.0.255.255 any
access-list 103 deny ip 127.0.0.0 0.255.255.255 any
access-list 103 deny ip host 255.255.255.255 any
access-list 103 deny ip host 0.0.0.0 any
access-list 103 deny ip any any log
dialer-list 1 protocol ip permit
no cdp run
!
!
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco".

Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end

sakis_the_fraud

28-03-10, 01:48

ετσι οπως το εχεις σεταρει τωρα, δοκιμασε να κανεις telnet στο router και μεσα απο αυτο να ping-αρεις μια εξωτερικη IP και ενα domain name, ξανακανε δηλαδη οτι ειχε πει ο nstamoul.

το configuration που παραθεσες δεν πρεπει να ειναι ολοκληρο...