Configuring New Interface and NAT on Cisco 1900 Series Router.

Hello Cisco Team,
am asking for advise on how to how setup NAT rules and overload on my 2nd interface on my cisco 1900 series router,am not sure where am getting it wrong.
my router has 2 interface, interface one has IP address 10.5.5.5X and plugs into my ASA firwall and into my switch and works just fine.
i have just configured my second Interface with a new IP 172.16.0.X- i want to NAT my new IP address to our public IP address which is 41.77.X.X
my configuration so far are as follows.
GigabitEthernet0/0 172.16.0.X YES manual up up - Not working
GigabitEthernet0/1 10.5.5.X YES NVRAM up up- this works fine
GigabitEthernet0/0/0 41.77.X.X YES NVRAM up up

Hello Jon,
Thanks for your feedback, my router configuration are as follows.
interface GigabitEthernet0/0
description WL2504
ip address 172.16.0.2 255.255.254.0
duplex auto
speed auto
interface GigabitEthernet0/1
description WAN
ip address 10.55.55.2 255.255.255.252
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/0/0
description LINK TO CLT INTERNET
ip address 41.X.X.130 255.255.255.248
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
media-type sfp
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat inside source list 1 interface GigabitEthernet0/0/0 overload
ip route 0.0.0.0 0.0.0.0 41.X.X.129
ip route 41.X.X.136 255.255.255.248 10.55.55.1
ip route 192.168.0.0 255.255.255.0 10.55.55.1
access-list 1 permit 10.55.55.0 0.0.0.255
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 1 permit 192.168.1.0 0.0.0.255
from the router interface interface GigabitEthernet0/0- I will connect it to my wireless Controller WL 2504

Similar Messages

IOs for cisco 1900 series router

Hi,
Kindly provide me the IOS version (cisco 1900 router) which can fix the below listed Bugs,
Cisco IOS TCP Listener Crafted Packets Remote DoS (CSCek37177)
Cisco Multiple Devices Crafted IP Option Remote Code Execution (CSCeh52410)
Cisco IOS System Timers Remote Overflow (CSCei61732)
Cisco IOS Secure Shell Server TACACS+ Multiple DoS (CSCed65778, CSCed65285)
Cisco IOS IKE XAUTH ISAKMP IPSec SA Establish Authentication Bypass(CSCeg00277)
Cisco IOS Telnet Service DoS (CSCef46191)
Cisco IOS H.323 Protocol Implementation Flaws Cisco IOS Malformed IPv4 Packet Remote DoS Cisco SSH2 Server/Client Malformed Packet Remote DoS (CSCdz60229, CSCdy87221, CSCdu75477)
Cisco IOS SSH Large Packet CPU Consumption DoS (CSCdw33027) Cisco SIP Crafted INVITE Message Handling DoS (CSCdz39284, CSCdz41124) Cisco IOS Data-link Switching (DLSw) Capabilities Exchange Remote DoS (CSCsf28840)
Cisco IOS AAA RADIUS Long Username Authentication Bypass (CSCee45312)
Cisco IOS TCLSH AAA Command Authorization Bypass (CSCeh73049)
Cisco IOS MMP Stack Group Bidding Protocol (SGBP) Crafted UDP Packet Remote DoS (CSCsb11124)
Cisco IOS IPv6 Packet Processing Arbitrary Code Execution (CSCef68324)
Cisco IOS Malformed BGP Packet Processing Remote DoS (CSCee67450)
Cisco IOS Multi Protocol Label Switching (MPLS) Packet Remote DoS (CSCeb56909)
Cisco IOS IPv6 Packet Processing Remote DoS (CSCed40933)
Cisco IOS SCCP Control Protocol Malformed Message DoS (CSCee08584)
Cisco IOS OSPF Packet Handling DoS (CSCec16481) Cisco IOS ARP Table Overwrite DoS (CSCdu81936)
Regards,
Bala

Hi,
The Current running IOS version is 12.2(4)T7. I tried through bug toolkit. but i couldn't able to consolidate the IOS to fix these bugs.
Regards,
A.Bala
leolaohoo wrote at Tue Jan 25 02:20:52 GMT+05:30 2011:
>Balakrishnan Appavu,
>
>A new message was posted in the Discussion thread "IOs for cisco 1900 series router":
>
>https://supportforums.cisco.com/message/3277195#3277195
>
>Author : leolaohoo
>Profile : https://supportforums.cisco.com/people/leolaohoo
>
>Message:

Question about setting up rdp using a cisco 800 series router

HI there,
I am currently in school for networking. One co-op placement I went too handed me a cisco 800 series router to practice my routing skills on. I am trying to setup RDP so I can access my server from outside my internal network. I ran this following acl command to do it.
ip nat inside source static tcp server IP address port# cable modem IP port # extendable.
My question here is, my cable modem will occasionally hand out a different IP since it has DCHP. I cannot turn DHCP off in my cable modem. So is there a way I can set this up to use a dynamic IP from my modem so I alwasy have access to it or every time my modem changes the IP address do I have to go in and modify this acl?

Configure DDNS ( Dynamic DNS ) on the router. For this you need to register with a DDNS provider. Go to
http://www.no-ip.com/ . they provide free reliable service.
With DDNS, Once your router gets a DHCP address from your ISP , it will dynamically update the DNS name record. For example if you register you routers name as, "myrouter.no-ip.org", from there onwards whatever the IP your router gets, you can refer to that by this name.
So do as what Paolo said regarding using interface instead of ip, and register with the DDNS and you are good to go..
Hope this helps
Please rate this post if helpful..
Thanks
Shamal

Does 1900 series router supports voice functon?

I have seen that 1921 and 1941 can insert a vwic3 interface card,but i cannot see pvdm on 1921&1941,my question is that how 1921&1941 support voice function(e.g voice termination)?

Hi.
Based on these docs, it does not support voice
http://www.cisco.com/en/US/products/ps10538/prod_series_comparison.html
http://www.cisco.com/en/US/prod/collateral/voicesw/ps6789/ps7290/ps10589/data_sheet_c78-598389.html
VWIC3 cards are not only for voice, that's why you can add them to a 1900 series router.
http://www.cisco.com/en/US/prod/collateral/routers/ps5855/data_sheet_c36-609138.html
HTH
Regards
Carlo
Sent from Cisco Technical Support iPhone App

Trying to Download a Software Image to Cisco 2800 series router through TFTP Using the tftpdnld ROMmon Command

Trying to Download a Software Image to Cisco 2800 series router through TFTP Using the tftpdnld ROMmon Command
and I am getting an Error , I cant figure out what I am doing wrong. I have also pasted my display down here can someone help me out, thanks in advance, I am still new to this utility.
My questions are How do you direct this utility to point to the desktop or the TFTP folder
does FE_PORT: Fast Ethernet 0 imply or point to Fa0/0 on my router
My router is suppose to have 10.0.0.3 255.0.0.0
Gateway of 10.0.0.1 255.0.0.0
My TFTP Server 10.0.0.2 255.0.0.0
How do I get the MAC address of the Router or the TFTP Server and which one is required?
my Ethernet port is 100Mb/Sec I cant tell whether it is full duplex or not so How do i set this FE_SPEED_MODE: Auto???
=====================================================================================
rommon 10 >
rommon 10 > set
PS1=rommon ! >
FE_PORT=0
WARM_REBOOT=
RET_2_RTS=20:35:55 UTC Thu Sep 25 2014
BSI=0
RET_2_RCALTS=
RANDOM_NUM=1600357627
?=0
IP_ADDRESS=10.0.0.3
IP_SUBNET_MASK=255.0.0.0
DEFAULT_GATEWAY=10.0.0.1
TFTP_SERVER=10.0.0.2
TFTP_FILE=
rommon 11 > TFTP_FILE=c2800nm-adventerprisek9-mz.124-24.T4
rommon 12 > TFTP_CHECKSUM=0
rommon 13 > SET
monitor: command "SET" not found
rommon 14 > set
PS1=rommon ! >
FE_PORT=0
WARM_REBOOT=
RET_2_RTS=20:35:55 UTC Thu Sep 25 2014
BSI=0
RET_2_RCALTS=
RANDOM_NUM=1600357627
IP_ADDRESS=10.0.0.3
IP_SUBNET_MASK=255.0.0.0
DEFAULT_GATEWAY=10.0.0.1
TFTP_SERVER=10.0.0.2
?=0
TFTP_FILE=c2800nm-adventerprisek9-mz.124-24.T4
TFTP_CHECKSUM=0
rommon 15 > tftpdnld
          IP_ADDRESS: 10.0.0.3
      IP_SUBNET_MASK: 255.0.0.0
     DEFAULT_GATEWAY: 10.0.0.1
         TFTP_SERVER: 10.0.0.2
           TFTP_FILE: c2800nm-adventerprisek9-mz.124-24.T4
        TFTP_VERBOSE: Progress
    TFTP_RETRY_COUNT: 18
        TFTP_TIMEOUT: 7200
       TFTP_CHECKSUM: No
        TFTP_MACADDR: 30:37:a6:49:35:a8
             FE_PORT: Fast Ethernet 0
       FE_SPEED_MODE: Auto
Invoke this command for disaster recovery only.
WARNING: all existing data in all partitions on flash: will be lost!
Do you wish to continue? y/n: [n]: y
ARP: address resolution for 10.0.0.2 timed out.
ARP failed with failure code 1. TFTP transfer aborted.
TFTP: Operation terminated prematurely.
rommon 16 >       " not found
rommon 17 >FE_SPEED_MODE=2
variable name contains illegal (non-printable) characters
rommon
rommon 18 > set
PS1=rommon ! >
FE_PORT=0
WARM_REBOOT=
RET_2_RTS=20:35:55 UTC Thu Sep 25 2014
BSI=0
RET_2_RCALTS=
RANDOM_NUM=1600357627
IP_ADDRESS=10.0.0.3
IP_SUBNET_MASK=255.0.0.0
DEFAULT_GATEWAY=10.0.0.1
TFTP_SERVER=10.0.0.2
TFTP_FILE=c2800nm-adventerprisek9-mz.124-24.T4
TFTP_CHECKSUM=0
?=0
rommon 19 > tftpdnld [ur]
usage: tftpdnld [-hr]
Use this command for disaster recovery only to recover an image via TFTP.
Monitor variables are used to set up parameters for the transfer.
(Syntax: "VARIABLE_NAME=value" and use "set" to show current variables.)
"ctrl-c" or "break" stops the transfer before flash erase begins.
The following variables are REQUIRED to be set for tftpdnld:
            IP_ADDRESS: The IP address for this unit
        IP_SUBNET_MASK: The subnet mask for this unit
       DEFAULT_GATEWAY: The default gateway for this unit
           TFTP_SERVER: The IP address of the server to fetch from
             TFTP_FILE: The filename to fetch
The following variables are OPTIONAL:
          TFTP_VERBOSE: Print setting. 0=quiet, 1=progress(default), 2=verbose
      TFTP_RETRY_COUNT: Retry count for ARP and TFTP (default=18)
          TFTP_TIMEOUT: Overall timeout of operation in seconds (default=7200)
         TFTP_CHECKSUM: Perform checksum test on image, 0=no, 1=yes (default=1)
          TFTP_MACADDR: The MAC address for this unit
               FE_PORT: 0= (default), 1
         FE_SPEED_MODE: 0=10/hdx, 1=10/fdx, 2=100/hdx, 3=100/fdx,
                        5=Auto (default)
      TFTP_DESTINATION: The flash destination device for the file
                        flash:(default), usbflash0:, usbflash1:
Command line options:
   -h: this help screen
   -r: do not write flash, load to DRAM only and launch image
rommon 20 > tftpdnld
          IP_ADDRESS: 10.0.0.3
      IP_SUBNET_MASK: 255.0.0.0
     DEFAULT_GATEWAY: 10.0.0.1
         TFTP_SERVER: 10.0.0.2
           TFTP_FILE: c2800nm-adventerprisek9-mz.124-24.T4
        TFTP_VERBOSE: Progress
    TFTP_RETRY_COUNT: 18
        TFTP_TIMEOUT: 7200
       TFTP_CHECKSUM: No
        TFTP_MACADDR: 30:37:a6:49:35:a8
             FE_PORT: Fast Ethernet 0
       FE_SPEED_MODE: Auto
Invoke this command for disaster recovery only.
WARNING: all existing data in all partitions on flash: will be lost!
Do you wish to continue? y/n: [n]: y
ARP: address resolution for 10.0.0.2 timed out.
ARP failed with failure code 1. TFTP transfer aborted.
TFTP: Operation terminated prematurely.
rommon 21 >

What I notice in the original post is this error
ARP: address resolution for 10.0.0.2 timed out.
which says that the router is looking for the 10.0.0.2 server but not getting response to its arp request. Can the original poster clarify for us how the device that has the image file is connected to the router that has the problem? Also what kind of device is 10.0.0.2? Is it a PC running TFTP server software or is it something else?
HTH
Rick

License on the Cisco 3900 Series router.

I am trying to understand what does the "data" license exactly do on the Cisco 3900 series router. What I understood is that the data license supports "MPLS.ATM. Multiprotocol support".
Question is is a do not have this license will I not be able to run BGP, EIGRP and terminate service provider links?
Technology Package License Information for Module:'c3900e'
Technology    Technology-package                  Technology-package
              Current              Type           Next reboot
ipbase        ipbasek9             Permanent      ipbasek9
security      securityk9           Permanent      securityk9
uc            None                 None           None
data          None                 None           None
NtwkEss       None                 None           None
CollabPro     None                 None           None
Configuration register is 0x2102
Thanks,
Nik

I think WAAS express is one of the technologies you will lose out on. Amongst other advanced features. See link below.
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/software-activation-on-integrated-services-routers-isr/white_paper_c11_556985.html
EDIT: And performance routing.

NetConfig issue wrt Cisco 3900 Series Router

Hi Cisco;
I can't able to configure my Cisco 3900 series Router via NetConfig tool. While I am able to Configure all other Routers (7600, & 2800) and Switchs (6500, 3700, 3560). I can accessable 3900 Series Router via Inventory Collection, Sync Archieve, Campus Manager, DFM and etc.
I have Cisco LMS 3.2 with RME 4.3 & using SNMPV3.
Thanks for your support.
Best regards;
Shoaib Ahmed

Hi Clarke;
Please find the requested Screen Shot.
Actully my problem is that, I can't configure my Cisco 3945 Routers (Shows not applicable devices) via NetConfig tool. I can use other tools like Sync archieve and etc is working fine for these 3945 routers.
Best regards;
Shoaib Ahmed

How to bridge a linksys cisco E1200 series router?

I have recently purchased a linksys cisco E1200 series router and would like to know how to bridge the connection to my xbox

purchase 881w, get rid of linksys. That should do it.
Sent from Cisco Technical Support iPad App

2 Public Interfaces and NAT

Hello-
We currently have NW6 running BM3.7 set up with 1 public interface and 1
private interface. Our private interface is 10.1.1.1 and we are NATing
that to our public interface. We are using HTTP proxy services for all our
internet browsing---proxy being the 10.1.1.1 address. The public interface
is on a state WAN link and we are using it for internet browsing, email,
citrix and other state applications. We want to offload our email,
internet and citrix traffic onto another public intrface--which is
provided by a different ISP. I know what I need to do to change over the
email to the new ipaddress on the new interface. How do I set up BM to
route internet traffic to the new public interface? Also how do I make
sure that my citrix traffic is routed to the new interface as well? Any
help with this would be greatly appreciated.
Thanks all in advance!

You cannot arbitrarily send some type of traffic to one NIC, and the
rest to another. The outbound traffic will follow the default route.
You can have some limited control by using static routing to force
traffic to certain addresses out one NIC, but that tends to be useful
mostly with S2S VPN dedicated links.
You can also enable dynamic NAT on the LAN side of one of your internet
routers, and make reply traffic to inbound traffic from that link go
back the way it came in.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Vpn tunnels and Nat on Cisco soho 91 routers ??

Is it possible to create the following, using the soho 91 routers:
Router A (192.168.1.0) network
E0 192.168.1.250
E1 external ip (world ip)
Router B (192.168.99.0) network
E0 192.168.99.1
E1 external ip (world ip)
Router C (192.168.103.0) network
E0 192.168.103.1
E1 external ip (world ip)
tunnel1 = from Router A to Router B
tunnel2 = from Router A to Router C
on Router A
ip route 192.168.2.0 255.255.255.0 192.168.1.2
ip route 192.168.3.0 255.255.255.0 192.168.1.3
ip route 192.168.4.0 255.255.255.0 192.168.1.4
ip route 192.168.99.0 255.255.255.0 to-tunnel1
ip route 192.168.103.0 255.255.255.0 to-tunnel2
ip route nat (everything thing else)
on Router B
ip route 192.168.1.0 255.255.255.0 to-tunnel1
ip route 192.168.103.0 255.255.255.0 to-tunnel1
ip route nat (everything else)
on Router C
ip route 192.168.1.0 255.255.255.0 to-tunnel2
ip route 192.168.103.0 255.255.255.0 to-tunnel2
ip route nat (everything else)
Thanks.
Wayne

I assume you are using GRE tunnel and not IPSec. If GRE tunnel, the configuration looks OK except for Router C. The "ip route 192.168.103.0 255.255.255.0 to-tunnel2" should be "ip route 192.168.99.0 255.255.255.0 tunnel2 " pointing to the network connected to Router B. Also the correct command should not have "to-tunnel1", it is simply "tunnel1"

Generate new interface and camera

i have installed niimaq 251. How do i create a camera that meets my specs?. the ones i see, the fields are
grayed out and can not be modified. How can i enable grayed out fields in the camera file?....
My camera is parallel interface and uses 12 bits. I can not change these in the camera files i open.
Habib

Habib,
If you can not find a camera file for your camera that ships with the IMAQ driver, try looking at out camera advisor for any support we may provide for the camera:
http://sine.ni.com/apps/we/nipc.specs?action=search&asid=1102
This will incude Camera Files, Support Files, Cabling etc...
If you are unable to locate the file for your camera, we typically will attempt to create one in house. You will need to fill out the attached questionnaire and return it to [email protected] (IMAQ/Motion). We will also need the timing diagrams, pinouts and any other instructional information from the camera. It is also benefical if you can send in the camera so we can verify the file works properly. Once our engineers have more info ont eh camera they can give you a time
line for completion.
I hope this helps!
Best Regards,
Chris D.
NI Applications Engineer
Attachments:
Digital_Camera_Questionnaire.xls ‏384 KB

Please help me in configuring a Cisco 2800 series router!

Hi! I have to configure a new router with a static route. No routing protocol will be used. I just have to set default route on it and NAT. My senior Network Engineer has asked me to configure this router. There's an apartment where our Overseas employees stay, earlier this apartment had a broadband connection which was further divided through the APs(Cisco Wireless Access Points) and made usable to around 20 users. Now, they have bought in their own lease line and I have to configure this router. We just have to connect it with the ISP using Ethernet (not serial link). I would be so so grateful if you can just type in complete configuration for this. Thanks a ton in advance!

Hi There,
Thanks for your great help!
Below is the final template which my NE provided me:
Now I have to configure this router and then further need to connect various workstations with the same network. Please let me know what needs to be done further.
Thanks!
Configuration:::
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
ip domain-name CVT.net
logging buffered 128000 informational
logging console errors
logging monitor notifications
no aaa new-model
clock timezone IST 5 30
ip cef
no ip domain lookup
username aptadmin secret
enable secret
crypto key generate rsa
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
service dhcp
ip dhcp pool LAN-POOL
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.8.8 4.2.2.2
domain-name CVT.net
lease 1
interface FastEthernet0/0
description *********Spectranet WAN*********
ip address x.x.x.x 255.255.255.252
load-interval 30
duplex full
speed 100
ntp disable
no cdp enable
interface FastEthernet0/1
description Connect to LAN
ip address 192.168.1.0 255.255.255.0
no ip redirects
duplex auto
speed auto
ntp disable
ip forward-protocol nd
no ip http server
no ip https server
control-plane
banner exec $
Network Provided by CVT
This system is restricted to authorized individuals. Unauthorized access is a
criminal violation of the law and is subject to prosecution. Please disconnect
if you are not an authorized individual. Otherwise, you will be prosecuted
to the full extent of State and Federal law.
All connections and changes are logged.
************** Warning - Warning - Warning **************
$
banner login $
Authorized Associates only! Please disconnect your connection if
you are not an authorized Associate. Otherwise, you will be
prosecuted to the full extent of State and Federal law.
All connections and changes are logged.
$
line con 0
exec-timeout 15 0
password 7
login local
line aux 0
exec-timeout 15 0
password 7 C@pt
login local
line vty 0 4
access-class 50 in
exec-timeout 5 0
login local
transport preferred ssh
transport input ssh
line vty 5 15
access-class 50 in
exec-timeout 5 0
login local
transport preferred ssh
transport input ssh
end

Cisco 2600 series router and cable modems

Hi everyone, I am just about to get started preparing for my CCNA... I am looking to pick up some used Cisco 2600 series routers to set up a home lab. I am wondering if it is possible to connect a cable modem directly to a 2600 series router? If so, do I need a certain type of WIC? I want to go from my cable modem, to a router, to my switch. Thanks in advance!

Hi,
Yes you can, using the Ethernet port on the cable modem, you can connect the cable modem to the router 2600, and the 2600 comes with builtin ethernet or fastethernet (according to your platform).
HTH,
Mohammed Mahmoud.

Creating VLAN on our Cisco 300 series router

I am wanting to create separate VLANs on our Cisco 300 series switches, but I am struggling to find any decent examples out there.
Our basic infrastructure is
Router with
192.168.1.1 VLAN1
192.168.2.1 VLAN2
The switch is set up on ports 2345 for VLAN2
Port 1 is attached to the router on VLAN1 and VLAN2 assigned.
My problems seem to be that I really not sure what settings I should be using for each the ports to get this to work correctly

Hi,
Hope below link will have the information which you are looking for.
https://supportforums.cisco.com/document/140341/vlan-configuration-articles-sx200300-series-managed-switches
If you are looking for only vlan creation then below link will help.
http://sbkb.cisco.com/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=80
According to your above description you have connected the router to port 1 of switch and you have configured it as vlan 1...Should this port be trunk???
Regards
Najaf

IPS on 1900 series Router

This should be a simple question.
Customer is thinking about the whole IDS/IPS environment.
He has some 1921 routers.
Am I correct is saying that If the router has the FL-SEC installed, then all they would need is to purchase the CON-SUSA-1921SEC subscription?
And if he has a plain router, then he needs to add the FL-SEC and then the CON-SUSA-1921SEC?
Thanks

Within the Cisco Virtual Switching System, one chassis is designated as the active virtual switch and the other is designated as the standby virtual switch. It should be noted that there is no requirement that the two members of the Cisco Virtual Switching System use the same chassis type. The members consisting of the Cisco Virtual Switching System can be different chassis with varying slot counts. Additionally, note that no Cisco 7600 Series chassis will be supported after the system is converted to Cisco Virtual Switching System mode. The initial release of the Cisco Virtual Switching System supports only one Supervisor Engine 720-10G VSS per chassis. A subsequent software release will allow for redundant supervisors to exist in a single physical chassis within the VSS.

Configuring New Interface and NAT on Cisco 1900 Series Router.

Similar Messages

Maybe you are looking for