DHCP disable on WAN interface

Hello,
I have a cisco router 1721, IOS 12.4(25a)
I enabled dhcp server for my local LAN, and I setup my WAN interface as dhcp interface.
My ISP told me that my router is acting as dhcp server on WAN interface...and is not good for them. Can I stop my cisco router from sending dhcp offers on WAN interface, but send dhcp offers for my local LAN ?
ip dhcp pool LOCAL
   import all
   network 192.168.1.0 255.255.255.0
   dns-server 193.x.x.x
   default-router 192.168.1.222
   domain-name appt.ro
   lease infinite
ip dhcp pool host1
   host 192.168.1.11 255.255.255.0
   client-identifier 0100.0ee8.e23d.94
interface FastEthernet0
mac-address 0019.66b3.d689
ip address dhcp
ip nat outside
ip virtual-reassembly
speed auto
full-duplex
FastEthernet0 is my WAN interface.
Thanks!

I imagine that clients on the WAN side are sending requests with a GIADDR field that matches your DHCP pool's scope. In that case, the router would handout an address. You could add an ACL to the WAN interface to block incoming udp/68 packets:
access-list 101 deny udp any any eq 68access-list 101 permit ip any any!interface FastEthernet0 ip access-group 101 in
That should prevent the router from seeing the client requests while still being able to get server responses.

Similar Messages

RV180 DHCP IPv4 client working on WAN interface?

Hi,
Does the Cisco RV180 firewall/router support DHCP client on the WAN interface? This is specifically mentioned on the DHCPv6 client, however, it is not mentioned for the IPv4 client. I'd like to set it up using my cable modem in bridged mode connecting it to the WAN interface on the RV180? So I'd get the IP address from my ISP.
Thanks,
Niels
Sent from Cisco Technical Support iPad App

Hello Niels,
The RV180W certainly can pick up a DHCP address from your ISP on the WAN interface, through a bridged modem. In fact, this is the default configuration. Of course, you can also change your connection type to a static IP address or PPPoE connection profile (DSL).
All of our Small Business routers are definately capable of this confiugartion. Personally, I currently use a RV180W with a cable connection. The RV180W picked up the public IP address from my ISP just fine.
All the best,
-David Aguilar
Cisco Small Business Support Center
1-866-606-1866

SR520-FE DHCP disable

Hello
does anybody tell me how can I completely disable DHCP on SR520-FE?
thanks all for helping in advance!
Svyatoslav

I believe you should just need to delete the DHCP pool in CCA - this will stop the SR520 from acting as a DHCP server and offering addresses on the LAN.
I assume this is what you have required, rather than changing the addressing type on the WAN interface - by default the SR520-FE is configured to use DHCP to assign a WAN IP (as it often the case for broadband providers). If you need to set your own IP address, just select Static IP address in CCA for the Internet Connection and specify the required address, mask and DNS values.
Regards,
Andy

RV120W WAN interface doesn't automatically re-enable after WAN connection is restored

I found that RV120W WAN interface doesn't automatically re-enable after a cable pull and re-plug. I have to go into the Status->System Summary and click the "Enable" button. Is this normal on this router? Can I prevent that from happening? I would hope this is NOT normal as this would mean that I would have to be on-site and login to the web interface to re-enable it after a power failure or WAN link loss.

Tekliu,
Thanks for the response. But, as I mentioned in my prior post, this is, unfortunately, the designed behavior for this device, at least with a static IP and no ISP login. Cisco Small Business Customer Support was clear on this and didn't even open a ticket. I asked that they submit a feature request to change this behavior in a future release. Of course, they couldn't make any promises.
One possible source of confusion is the different circumstances that can occur. In my testing, the interface does come back up automatically on a soft reboot. It also comes back up automatically if both the RV120W and the upstream (WAN) device are power cycled together. I believe this is because the upstream device comes up much faster and is up before the RV120W. The case we are talking about is when the upstream device is cycled or the cable is pulled while the RV120W stays up. In this case, the WAN port remains disabled until you manually select the button on the status page.
Thanks again for following up on this.

Can't telnet on WAN interface, ping is ok

Hi all,
I'm not able to telnet to cisco1841 on WAN interface...( Connection timed out; remote host not responding )
telnet from inside network to LAN interface is fine
I can ping the WAN interface
port 23 appears to be closed ( nmap )
Does anyone have an idea why telnet is not working??
part of my config ( 2 wan links for redundancy, can't telnet to none of them):
interface FastEthernet0/0
description ##### LINE TO LAN #####
ip address 192.168.8.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1412
duplex auto
speed auto
interface FastEthernet0/1
description ##### TO CABLE MODEM #####
ip address dhcp client-id FastEthernet0/1
duplex auto
speed auto
no cdp enable
interface ATM0/0/0
no ip address
load-interval 30
atm restart timer 300
no atm ilmi-keepalive
dsl operating-mode auto
pvc 8/48
encapsulation aal5mux ppp dialer
dialer pool-member 1
interface Virtual-PPP1
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
no cdp enable
no ppp chap wait
ppp pap sent-username user password pass
pseudowire 212.25.127.15 1 pw-class dialer_to_bezeqint
interface Dialer0
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
load-interval 30
dialer pool 1
dialer idle-timeout 200000
no cdp enable
ppp pap sent-username user password pass
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Virtual-PPP1
ip route 0.0.0.0 0.0.0.0 Dialer0 50
ip route 212.25.127.15 255.255.255.255 FastEthernet0/1 dhcp
no ip http server
no ip http secure-server
ip nat inside source route-map ADSL_NAT interface Dialer0 overload
ip nat inside source route-map CABLE_NAT interface Virtual-PPP1 overload
route-map ADSL_NAT permit 10
match interface Dialer0
route-map CABLE_NAT permit 10
match interface Virtual-PPP1
control-plane
line con 0
login local
line aux 0
line vty 0 4
privilege level 15
logging synchronous
login local
transport input telnet
end

Friend, I recommend you use the settings below, I'm doing like this below I have no problem, look no free access telnet use SSH,
An ace
access-list 10 permit you ip
access-list 10 deny any
line con 0
password you password
login local
length 0
line aux 0
password you password
login local
line vty 0 4
access-class 10 in
exec-timeout 0 0
privilege level 15
password you password
login local
length 0
transport input telnet ssh
line vty 5 15
access-class 10 in
privilege level 15
password you password
login local
length 0
transport input telnet ssh

Cisco RV180 VLAN tagging WAN interface

Is there by any chance in the future firmware update that this product (RV180) will be able to support VLAN tagging on WAN interface like the Cisco's RV315W router? ISP in Singapore (Singtel) and Malaysia(Unifi) (http://klseet.com/index.php/mikrotik/mikrotik-rb750-750g/setup-for-unifi) requires certain type of vlan tagging on the WAN interface for it to work.
Is there any workaround to this?

I tried with only two vlans and set the DHCP active only for the office "vlan2". Computers receive the correct ip but some of them won't register on the network, i tried to set the ip manualy on the computers but that computer will still be isolated.
Ex: computer A receives ip 192.168.10.25, Subnet 255.255.255.0, Gateway 192.168.10.1, for 2-3 minutes i can access the router on 192.168.10.1 and the internet, after a random time interval the gateway won't even respond to ping.It's not from firewall related issues as i set to accept all both incoming and outgoing. If i set a manual ip corresponding to vlan1 "default" everything works.It's like that computer is isolated so i believe it has to do with the asignment of Tagged, untagged and Excluded settings on the vlans.

Multiple DMVPN Instances on Same WAN Interface

Hi Folks,
Is it possible to run Multiple DMVPN Instances on a single WAN Interface ? Can we for example configure 3 Tunnels on a Router using one same WAN Interface but running separate EIGRP Instances for each Tunnel ? Kindly let me know , Alioune

Hi Alioune,
Yes you can create DMVPN as you said with one WAN interface that is possible..... you can have multiple tunnel interfaces pointed to a WAN interface as the source interface which resides in public zone..... with different public ip's as the destination tunnel...
interface Tunnel1
description ** A-VPN Tunnel **
bandwidth 100000
ip vrf forwarding red
ip address 10.0.252.2 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1500
load-interval 60
tunnel source GigabitEthernet0/0 (WAN Interface)
tunnel destination 1.1.1.1
tunnel protection ipsec profile dmvpn
interface Tunnel1
description ** B-VPN Tunnel **
bandwidth 100000
ip vrf forwarding red
ip address 10.0.252.5 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1500
load-interval 60
tunnel source GigabitEthernet0/0 (WAN Interface)
tunnel destination 2.1.1.1
tunnel protection ipsec profile dmvpn
like the above..... shown sample...
Please rate if the given information helps!!!

Add Additional IP Addresses to WAN Interface on SRP527W

Hi,
Can anyone tell me how to add an additional IP addresses to the WAN interface on a SRP527W.
We are connecting to an ISP which assigns us a static IP address with our ADSL account. We also have another 2 additional WAN IP addresses that we have purchased from out ISP and wish to add them as Aliases to the WAN interface and use for other services. I would also like to use those additional IP addresses to create port forwards to our internal network.
I cannot find how to do this in the manual any where and any help would be much appreciated.
Regards
Craig

Hi Craig,
Unfortunately, this is not possible with the SRP520.
[For others reading this thread, this is possible with the SRP540]
Regards,
Andy

WDS and DHCP Disabled

I have been unable to configure any AirPort Express, or AirPort Extreme, to function in WDS mode with DHCP disabled. I have an existing wired router running DHCP. After connecting one AX via Ethernet to the router, disabling DHCP on that AX and then adding one or two AXes to the wireless network via WDS, computers joining this network do not receive IP addresses. The hardware topology is that the existing wired router acts as the DHCP server through the Ethernet-connected AX, whereas other AXes are connected as WDS basestations. Macs can join the AirPort network but fail to get IP addresses from the DHCP server.
I suspect that in WDS mode, the AXes do not function in bridge mode, failing to pass on IP address requests from the wirelessly connected Macs.
Macs connecting wirelessly to a single AirPort Express set up with DHCP disabled, but WDS disabled also, have no difficulty receiving an IP address.
I frequently set up similar WiFi networks using Linksys WiFi access points without difficulty, but I've never been able to configure two or more AirPort Expresess to conect to an existing network via WDS unless DHCP is enabled.
MacBook Pro Mac OS X (10.4.8)

Hi Don
I am getting PXE-E53 : No Boot image received. I believe my problem is my Client is in different IP range (10.1.18.1-255) and both DHCP and WDS is in (10.20.1.1-255)
In my environment I cannot change the Router configurations to point to some specific server. Do I just need to specify the option 66, 67 in DHCP or there is more to it.
Please advise
Regards
Sid

Waas Expresss need to be supported on 2 Wan Interfaces

Dear Team,
We have 1941 Router on our branch side currently its not supporting to enable the WAAS on our two wan interfaces.
Current Image: 15.1
Planning to upgrade to 15.2
My current IOS is c1900-universalk9-mz.SPA.151-4.M3.bin and Kindly suggest whether c1900-universalk9-mz.SPA.152-4.M1.bin image will support to enable the waas on 2 wan interfaces?
Thanks in advance
Regards,
Ranjith

Hi,
We can enable Waasfeture on 2 two interfaces in 15.2 3T cisco ios.
Regards,
Ranjith

Crypto on loopback or wan interface

hello,
i have routers terminating vpn on both sides with the loopback ip address as peers.
should i apply the crypto on the loopback interface or on the wan interface?
Thanks.

Hi,
You apply the crypto map on the wan interface.
Dont forget to identify the loopback interface as the source in you crypto-map
crypto map mapname local-address loopback 0
Please rate helpful post

WRVS-4400N no IPv6 on WAN Interface

Currently the WRVS-4400N will only support IPv6 limited.
Is there a time line when this device will support IPv6 also on the WAN Interface? I want to move over to IPv6 complete and get rid of IPv4.
PLEASE!!! START TO SUPPORT IPv6 FULL ON EVERY DEVICE!!
Best regards,
Torsten

In the meantime I have seen that the RV220W will full support IPv6.
I think about to trash the WRVS and move over to RV220W.
EDIT:
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=11973&postdays=0&postorder=asc&start=30
Check out the last posting pls.
I don't understand why CISCO support will give such comments. From my point of view this will say everything about the future of the WRVS device.
Thanks!

How to automatically disable the wireless interface when the LAN interface is connected

Hi,
Is there a way to automatically disable the wireless interface when the LAN interface is connected on R61s and X61s?
Thank you!

Hi,
Thanks for the answer. I'm trying to deploy the profile that I've created on all my laptops. But i'm facing an issue for a while.
When the profile is deployed on a laptop, Access Connections finds a new ethernet port and asks to assign it a profile. But the problem is that Access Connection don't allow me to assign it to my wired profile, only to my wireless profile and that doesn't make sens to me. Besides, it is written in the dialogue box that ethernet profiles are disable for the match of the new port...
Is there any way to assign the new port to the new profile without human interaction or just how to make the wired profile available when access connection is launched and find a new ethernet connection
Thanks in advance!

Does the RV042 have IP Aliases for WAN interface?

Hi All
We have a Small Business RV042 router, and have many Internet servers in our Internal and DMZ networks behind the router.
In our old GTA firewall, we were able to add IP aliases to our external (WAN) interface.   That is, our WAN interface can have many IP addresses besides the main IP address, e.g., 209.118.52.226, 209.118.52.227, 209.118.52.228, 209.118.52.229, etc.
209.118.52.226 is the main IP for the WAN interface.
209.118.52.227 is for our web server 1, e.g., www.example.com
209.118.52.228 is for our web server 2, e.g. support.example.com
209.118.52.229 is for our sftp server, e.g. sftp.example.com
And then we create 'tunnels' to forward incoming traffic for 209.118.52.227 to our www.example.com residing in our DMZ or Internal network, etc.
Now, is this possible with the RV042 router?    The only thing we found in RV042 is Forwarding (port range forward) but that does allow us to have IP aliases for the WAN interface.   It seems that we can only route service defined traffic or port defined traffic meant for only 1 WAN IP to our internal servers behind the router.
Actually, we had bought the RVS4000 earlier and then upgraded to the RV042 hoping that it will have what we want.
If the RV042 does not have IP alias for WAN interface, what is the lowest Cisco router model that has it?
Thank you very much in anticipation.
cmgui

Thank you tekliu
Yes, 1-to-NAT can do most of what we want.   But it is not able to direct only certain port traffic from the external WAN IP to the internal LAN IP?
For example, if we create a 1-to-1 NAT 192.168.41.50 =>
209.118.52.227, it basically opens all the traffic allowed in the Firewall to go from
209.118.52.227 to 192.168.168.41.50.
If we only want to allow say https, ie. tcp port 443, traffic to go from
209.118.52.227 to 192.168.41.50, it is not possible. Or is it?

WRVS4400n v1.1 VLAN on WAN interface

Hi,
Been trying to figure out howto create VLAN's on the WAN interface of the WRVS4400n. Is this even possible with the factory firmware?

Dear Steve,
Thank you for your reply.
The router already has the lastest firmware, 1.1.13
The situation is as follows. Our office gets several services over fiber which is switched to coper over an end node (not protocol just light <-> electric) so essentially we are connected to the internet over ethernet.
Anyway, our provider is rather mysterious over how their services work and preffer that everybody uses the equipment provided by them. The equipment is rather cheap and limited in functionality, also we're having a few problems because the equipment doesn't allow us to switch certain functions off.
We get 3 services from our provider.
1. Internet (VLAN tagged 12)
2. VPN like closed connection between locations (VLAN's tagged 123 and tagged 124)
3. SIP (VLAN untagged 13)
So I did A little investigation and came up with the following.
* For internet services they're using a PPPoE tunnel, this tunnel is established over a tagged VLAN 12.
* VLAN's 123 and 124 are for ourselves, so just connection between our offices. I don't know what the infrastructure/setup is behind this service but it somehow magically works.
* Then finally there's the SIP services which is done over VLAN 13 untagged.
So what I need todo is create a PPPoE tunnel over VLAN 12 (for internet access) and also setup VLAN's 13, 123 an 124 to be forwarded to specific ports on the the router.
/edit:
When I look at the settings in the web interface I only get the VLAN settings for ports 1 to 4 and WLAN (no port 0). I'm pretty sure this router does support it and I could set it if I had a shell on the device but I don't and I'm not seeing it in the webinterface either.

DHCP disable on WAN interface

Similar Messages

Maybe you are looking for