Router aus Einstellungen futsch

Wordo · 16. Mai 2007

Jop, NAT fehlt. Ausserdem frage ich mich jedesmal wieso du deine eigene IP als DNS-Server eintraegst? das mask-reply kann auch aus dem IF raus. Wie angesprochen sind deine Defaultrouten absoluter Kaese :D Ah ja und "no ip routing" is das schlimmste was in einer Routerkonfiguration stehen kann ;)

MehLan · 16. Mai 2007

Danke Ihr beiden, nu sieht das so aus und ich habe immer noch keine verbindung

Building configuration...

Current configuration : 3862 bytes

!

version 12.3

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Cisco836

!

boot-start-marker

boot-end-marker

!

no logging buffered

enable secret 5

enable password

!

no aaa new-model

ip subnet-zero

no ip routing

ip dhcp excluded-address 10.0.0.1 10.10.10.1

ip dhcp excluded-address 10.10.10.21 10.255.255.254

!

ip dhcp pool DHCPP1

import all

network 10.0.0.0 255.0.0.0

dns-server 10.10.10.1

--More--

*Mar 1 01:02:33.851: %SEC-6-IPACCESSLOGP: list 101 denied tcp 82.83.216.5(14991

) -> 82.83.156.112(135) netbios-name-server 10.10.10.1

lease infinite

!

ip name-server 195.50.140.114

ip name-server 195.50.140.252

ip inspect name SDM_LOW cuseeme

ip inspect name SDM_LOW ftp

ip inspect name SDM_LOW h323

ip inspect name SDM_LOW icmp

ip inspect name SDM_LOW netshow

ip inspect name SDM_LOW rcmd

ip inspect name SDM_LOW realaudio

ip inspect name SDM_LOW rtsp

ip inspect name SDM_LOW esmtp

ip inspect name SDM_LOW sqln

ip inspect name SDM_LOW streamworks

ip inspect name SDM_LOW tftp

ip inspect name SDM_LOW tcp

ip inspect name SDM_LOW udp

ip inspect name SDM_LOW vdolive

ip ips po max-events 100

no ftp-server write-enable

!

username admin secret 5 $1$O

MehLan · 16. Mai 2007

interface Ethernet0

description $FW_INSIDE$$ETH-LAN$

ip address 10.10.10.1 255.0.0.0

ip access-group 100 in

ip directed-broadcast

ip nat inside

ip virtual-reassembly

no ip route-cache

ip tcp adjust-mss 1412

!

interface BRI0

no ip address

ip nat outside

ip virtual-reassembly

no ip route-cache

!

interface ATM0

no ip address

no ip route-cache

no atm ilmi-keepalive

dsl operating-mode auto

!

interface ATM0.1 point-to-point

description $ES_WAN$

no ip route-cache

pvc 1/32

oam-pvc manage

pppoe-client dial-pool-number 1

!

interface FastEthernet1

no ip address

duplex auto

speed auto

!

interface FastEthernet2

no ip address

duplex auto

speed auto

!

interface FastEthernet3

no ip address

duplex auto

speed auto

!

interface FastEthernet4

no ip ad

duplex auto

speed auto

!

interface Dialer0

description $FW_OUTSIDE$

ip address dhcp client-id Ethernet0

ip access-group 101 in

ip mtu 1452

ip nat outside

ip virtual-reassembly

encapsulation ppp

dialer pool 1

dialer-group 1

ppp authentication chap pap callin

ppp chap hostname ar11616285

ppp chap password 0 41232

ppp pap sent-username ar16185 password 0 41532

!

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer0

ip http server

no ip http secure-server

ip nat pool Poll1 10.10.10.1 10.10.10.254 netma

ip nat inside source list 1 interface Dialer0 overload

!

MehLan · 16. Mai 2007

ip access-list extended sdm_ethernet0_in

remark SDM_ACL Category=1

permit ip any any

access-list 1 remark SDM_ACL Category=18

access-list 1 permit 10.10.10.0 0.0.0.255

access-list 100 remark auto generated by SDM firewall configuration

access-list 100 remark SDM_ACL Category=1

access-list 100 deny ip host 255.255.255

*Mar 1 01:02:39.871: %SEC-6-IPACCESSLOGP: list 101 denied tcp 82.83.123.4(3913)

-> 82.83.156.112(135), 1 packet.255 any

access-list 100 deny ip 127.0.0.0 0.255.255.255 any

access-list 100 permit ip any any

access-list 101 remark auto generated by SDM firewall configuration

access-list 101 remark SDM_ACL Category=1

access-list 101 deny ip 10.0.0.0 0.255.255.255 any

access-list 101 permit icmp any any echo-reply

access-list 101 permit icmp any any time-exceeded

access-list 101 permit icmp any any unreachable

access-list 101 deny ip 172.16.0.0 0.15.255.255 any

access-list 101 deny ip 192.168.0.0 0.0.255.255 any

access-list 101 deny ip 127.0.0.0 0.255.255.255 any

access-list 101 deny ip host 255.255.255.255 any

access-list 101 deny ip host 0.0.0.0 any

access-list 101 deny ip any any log

dialer-list 1 protocol ip permit

snmp-server community public RO

snmp-server enable traps tty

!

control-plane

!

line con 0

no modem enable

line aux 0

line vty 0 4

password

login

!

scheduler max-task-time 5000

osirus01 · 16. Mai 2007

Hmmm.... was sagt den sh int dialer0 ?

Klappt denn die Einwahl? Kannst Du vom Router aus z.B.

209.85.135.104 (Google ) pingen?

Wenn das geht, ping auch bitte mal vom Client aus die IP.

Wenn das geht, verwende am Client mal nen anderen DNS-Server.

Du wählst Dich bei Arcor ein, richtig? Dann könntest Du es mal mit "145.253.2.11" versuchen.

Gruß

Osirus

rob_67 · 16. Mai 2007

Hi,

du hast das mit dem no ip routing nicht verinnerlicht! Sag ip routing und probier es dann!

Gruss

rob

MehLan · 16. Mai 2007

Hi Iht beiden Danke an euch,

das sagt er osirus01

Dialer0 is up, line protocol is up (spoofing)

Hardware is Unknown

Description: $FW_OUTSIDE$

Internet address will be negotiated using DHCP

MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation PPP, loopback not set

Keepalive set (10 sec)

DTR is pulsed for 1 seconds on reset

Last input never, output never, output hang never

Last clearing of "show interface" counters 02:26:43

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: weighted fair

Output queue: 0/1000/64/0 (size/max total/threshold/drops)

Conversations 0/0/16 (active/max active/max total)

Reserved Conversations 0/0 (allocated/max allocated)

Available Bandwidth 42 kilobits/sec

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

709 packets input, 61914 bytes

234 packets output, 3100 bytes

Desweiteren habe ich noch zwei dns server von arcor ein getragen,

ping von konsole oder client funtzt trotzdem nicht, kein Netz.

Hi rob_67,

Dies schrib ich:

Cisco836(config)#ip rout 0.0.0.0 0.0.0.0 dialer0

% Ambiguous command: "ip rout 0.0.0.0 0.0.0.0 dialer0"

Cisco836(config)#ip routi

Cisco836(config)#ip routing 0.0.0.0 0.0.0.0 dialer 0

^

% Invalid input detected at '^' marker.

Macht er nicht , aber die default route ist drine habe Sie über SDM erstellt

Kann das sein :

ATM0 is down, line protocol is down

Hardware is PQUICC_SAR (with Alcatel ADSL Module)

MTU 1500 bytes, sub MTU 1500, BW 224 Kbit, DLY 80 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ATM, loopback not set

Encapsulation(s): AAL5 AAL2, PVC mode

10 maximum active VCs, 1024 VCs per VP, 0 current VCCs

VC Auto Creation Disabled.

VC idle disconnect time: 300 seconds

Last input 00:22:33, output 00:15:42, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: Per VC Queueing

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

755 packets input, 88729 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

269 packets output, 18830 bytes, 0 underruns

0 output errors, 0 collisions, 5 interface resets

0 output buffer failures, 0 output buffers swapped out

Wordo · 16. Mai 2007

conf t

ip routing

ip route 0.0.0.0 0.0.0.0 dialer0

exit

Das dein ATM0 down ist, ist schon mal schlecht. Aber eins nach dem anderen ...

MehLan · 16. Mai 2007

conf t
ip routing

ip route 0.0.0.0 0.0.0.0 dialer0

exit

Das dein ATM0 down ist, ist schon mal schlecht. Aber eins nach dem anderen ...

Ist eingegangen also funtzte nun ?

damit meine ich den befehl hat er gefressen, aber die verbindug ist immer noch tot kein ping weiterhin,

Wordo · 16. Mai 2007

Jetzt erst mal speichern "wr" und dann wieder ein "sh run" posten.

EDIT: Leuchtet eigentlich die LED "CD" am Router?

MehLan · 16. Mai 2007

Jetzt erst mal speichern "wr" und dann wieder ein "sh run" posten.

Habe ich gemacht

EDIT: Leuchtet eigentlich die LED "CD" am Router?

Leichtet

Cisco836#sh run

Cisco836#sh running-config

Building configuration...

Current configuration : 3828 bytes

!

version 12.3

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Cisco836

!

boot-start-marker

boot-end-marker

!

no logging buffered

enable secret 5 $1$G.0f$mn7ljl/RiY0

enable password um

!

no aaa new-model

ip subnet-zero

ip dhcp excluded-address 10.0.0.1 10.10.10.1

ip dhcp excluded-address 10.10.10.21 10.255.25

!

ip dhcp pool DHCPP1

import all

network 10.0.0.0 255.0.0.0

dns-server 10.10.10.1

netbios-name-server 10.10.10.1

lease infinite

!

ip name-server 195.50.140.114

ip name-server 195.50.140.252

ip name-server 145.253.2.11

ip name-server 145.253.2.75

ip inspect name SDM_LOW cuseeme

ip inspect name SDM_LOW ftp

ip inspect name SDM_LOW h323

ip inspect name SDM_LOW icmp

ip inspect name SDM_LOW netshow

ip inspect name SDM_LOW rcmd

ip inspect name SDM_LOW realaudio

ip inspect name SDM_LOW rtsp

ip inspect name SD

ip inspect name SDM_LOW sqlnet

ip inspect name SDM_LOW streamworks

ip inspect name SDM_LOW tftp

ip inspect name SDM_LOW tcp

ip inspect name SDM_LOW udp

ip inspect name SDM_LOW vdolive

ip ips po max-events 100

no ftp-server write-enable

MehLan · 16. Mai 2007

username admin secret 5 $1

!

interface Ethernet0

description $FW_INSIDE $

ip address 10.10.10.1 255.0.0.0

ip access-group 100 in

ip directed-broadcast

ip nat inside

ip virtual-reassembly

ip tcp adjust-mss 1412

!

interface BRI0

no ip address

ip nat outside

ip virtual-reassembly

!

interface ATM0

no ip address

no atm ilmi-keepalive

dsl operating-mode auto

!

interface ATM0.1 point-to-point

description $ES_WAN$

pvc 1/32

oam-pvc manage

pppoe-client dial-pool-number 1

!

interface FastEthernet1

no ip address

duplex auto

speed auto

!

interface FastEthernet2

no ip address

duplex auto

speed auto

!

interface FastEthernet3

no ip address

duplex auto

speed auto

!

interface FastEthernet4

no ip address

duplex auto

speed auto

!

interface

description $FW_OUTSIDE$

ip address dhcp client-id Ethernet0

ip access-group 101 in

ip mtu 1452

ip nat outside

ip virtual-reassembly

encapsulation ppp

dialer pool 1

dialer-group 1

ppp authentication chap pap callin

ppp chap hostname ar11585

ppp chap password 0 41532

ppp pap sent-username ar1161596285 password 0 4632

!

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer0

ip http server

no ip http secure-server

ip nat pool Poll1 10.10.10.1 10.10.10.254 netmask 255.0.0.0

ip nat inside source list 1 int

!

ip access-list extended sdm_ethernet0_in

remark SDM_ACL Category=1

permit ip any any

MehLan · 16. Mai 2007

access-list 1 remark SDM_ACL Category=18

access-list 1 permit 10.10.10.0 0.0.0.255

access-list 100 remark auto generated by SDM firewall configuration

access-list 100 remark SDM_ACL Category=1

access-list 100 deny ip host 255.255.255.255 any

access-list 100 deny ip 127.0.0.0 0.255.255.255 any

access-list 100 permit ip any any

access-list 101 remark auto generated by SDM firewall configuration

access-list 101 remark SDM_A

access-list 101 deny ip 10.0.0.0 0.255.255.255 any

access-list 101 permit icmp any any echo-reply

access-list 101 permit icmp any any time-exceeded

access-list 101 permit icmp any any unreachable

access-list 101 deny ip 172.16.0.0 0.15.255.255 any

access-list 101 deny ip 192.168.0.0 0.0.255.255 any

access-list 101 deny ip 127.0.0.0 0.255.255.255 any

access-list 101 deny ip host 255.255.255.255 any

access-list 101 deny ip host 0.0.0.0 any

access-list 101 deny ip any any log

dialer-list 1 protocol ip

snmp-server community public RO

snmp-server enable traps tty

!

control-plane

!

line con 0

no modem enable

line aux 0

line vty 0 4

password

login

!

scheduler max-task-time 5000

!

end

Wordo · 16. Mai 2007

Du postest jedes mal immer was anderes:

interface

description $FW_OUTSIDE$

ip address dhcp client-id Ethernet0

ip access-group 101 in

ip mtu 1452

ip nat outside

ip virtual-reassembly

encapsulation ppp

dialer pool 1

dialer-group 1

ppp authentication chap pap callin

ppp chap hostname ar11585

ppp chap password 0 41532

ppp pap sent-username ar1161596285 password 0 4632

!

Ist das jetzt dialer0? Wieso is jetzt dhcp-client?

conf t

int dialer 0

no ip address dhcp client-id Ethernet0

ip addre neg

exit

mturba · 16. Mai 2007

Wieso hast du denn jetzt plötzlich am Dialer-Interface

ip address dhcp client-id Ethernet0

anstelle von

ip address negotiated

konfiguriert?

Anmelden

Router aus Einstellungen futsch

Empfohlene Beiträge

Wordo 11

Link zu diesem Kommentar

MehLan 10

Link zu diesem Kommentar

MehLan 10

Link zu diesem Kommentar

MehLan 10

Link zu diesem Kommentar

osirus01 10

Link zu diesem Kommentar

rob_67 10

Link zu diesem Kommentar

MehLan 10

Link zu diesem Kommentar

Wordo 11

Link zu diesem Kommentar

MehLan 10

Link zu diesem Kommentar

Wordo 11

Link zu diesem Kommentar

MehLan 10

Link zu diesem Kommentar

MehLan 10

Link zu diesem Kommentar

MehLan 10

Link zu diesem Kommentar

Wordo 11

Link zu diesem Kommentar

mturba 10

Link zu diesem Kommentar

Schreibe einen Kommentar

Menu

Aktivitäten