Two adsl connection on router

Hi Guys,
I have a router with two adsl connection, one of them is working fine. The another one I cannot see any packet going to the ISP. The interface atm is up, there is no reset, error, etc but the router doesn't try to connect to ISP, I see this when I enable debug ppp authentication.
The two links are from the same service provider, so I have swap the links to be sure that both are working. I had no issues with links. The configuration are the same as you can see below, just the username and password are different.
Any idea where is the issue?
interface atm0
no shut
no ip address
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
interface dialer1
ip address negotiated
no ip directed-broadcast
ip nat outside
encapsulation ppp
dialer pool 1
ppp chap hostname [email protected]
ppp chap password 123A
ppp pap sent-username [email protected] password 123A
interface atm1
no shut
no ip address
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 2
interface dialer1
ip address negotiated
no ip directed-broadcast
ip nat outside
encapsulation ppp
dialer pool 2
ppp chap hostname [email protected]
ppp chap password 123B
ppp pap sent-username [email protected] password 123B
Cheers

Hi Vasilii,
Thank you for your reply. Actually the IOS was the issue, that one that I was using doesn't support the configs that I need. After the upgrade it started to work straightaway.
Tks

Similar Messages

Wi-fi bridge between two routers TP-LINK WR841ND (WDS). HP 1536 dnf MFP connect to one of this routers (copper). My Ipad or Iphone can't find HP 1536 dnf MFP (using Eprint). Ipad and iphone connect to router across WiFi.

Hello.
I have wi-fi bridge between two routers TP-LINK WR841ND.
The name of this technology - WDS.
HP Laser JET 1536 dnf MFP connect to one of this routers (copper).
Second device (my NETBOOK) connect to second router (WiFi).
I have good communication between NETBOOK and HP Laser JET 1536 dnf MFP via WiFI-bridge.
In usual case NETBOOK can find (and can Ping) network printer and make a print some files.
But my Ipad or Iphone can't find HP Laser JET 1536 dnf MFP (using Eprint). Ipad and iphone connect
to router across WiFi.
Please, help!

Are you using the ePrint Mobile App, the ePrint Printer Control App, or just trying to send an email to the printer's ePrint email address?
Does AirPrint work?
-------------How do I give Kudos? | How do I mark a post as Solved? --------------------------------------------------------

Using IP SLA and EEM to provide 3G backup to ADSL connection on CISCO887VAG+7-K9 router

On a Cisco887VAG+7-K9 router, I want to be able to use IP SLA and EEM to track connectivity to an external address via my ADSL line, if connectivity is UP then I want the 3G interface to be admin shutdown. If connectivity is down, then I want the 3G interface to be activated and connectivity to resume via 3G.
I have configured this and it works apart from one problem. If the config on the router is written to startup memory while the 3G interface is admin shutdown, we subsequently have a problem with the ADSL line and the router is then rebooted, then the EEM does not seem to re-activate the 3G interface so all connectivity is lost until the ADSL is returned to service. i.e. it seems to be the case that if the IP SLA starts off as "Down" then the EEM doesn't take any action. The IP SLA has to have gone into the "up" state before it starts working? Does that make sense and, if so, is there any way round it?
For info, here is my IP SLA and EEM config:
ip sla 1
icmp-echo 8.8.8.8 source-interface dialer2
timeout 60000
ip sla schedule 1 life forever start-time now
track 1 ip sla 1 reachability
ip route 0.0.0.0 0.0.0.0 Dialer2 track 1
ip route 0.0.0.0 0.0.0.0 Dialer1 20
event manager applet 3G-ACTIVATE
event track 1 state down
action 10 cli command "enable"
action 20 cli command "configure terminal"
action 30 cli command "interface Cellular0"
action 40 cli command "no shutdown"
action 50 cli command "end"
event manager applet 3G-DEACTIVATE
event track 1 state up
action 10 cli command "enable"
action 20 cli command "configure terminal"
action 30 cli command "interface Cellular0"
action 40 cli command "shutdown"
action 50 cli command "end"
Any assistance/advice on getting this to work effectively would be appreciated!
Thanks.

Yes, basically, when the tracked object is not reachable on initial router boot, the router doesn’t detect a transition of the tracking object from up to down and therefore does not execute the associated EEM script.
So, in my case, if I have an ADSL fault and the 3G interface has taken over, if the router is subsequently rebooted, all connectivity will be lost because the startup config of the router has the 3G interface as admin down and the EEM script to activate it does not kick in.
I've tried using "default-state up" under the track config but this didn't seem to have any effect - the reachability of my IP SLA was still down after a router reboot with no ADSL connection.
I also tried your script but this gave the errors:
%HA_EM-3-FMPD_ACTION_NOTRACK: bump-track: unable to set state for tracking object number 1; object does not exist or is not a stub-object.
Mar 19 10:23:00.005: %HA_EM-3-FMPD_ERROR: Error executing applet bump-track statement 1.0 %HA_EM-3-FMPD_ACTION_NOTRACK: bump-track: unable to set state for tracking object number 1; object does not exist or is not a stub-object.
Mar 19 10:23:00.005: %HA_EM-3-FMPD_ERROR: Error executing applet bump-track statement 1.0
I'm not sure how to resolve that?
Any further advice would be welcome! Thanks.

ISDN backup for ADSL connected sites using separate router

In our set-up we have a central site with a large number of remote sites connected.
We have moved a number of remote sites from ISDN connections to ADSL connections. However, we would like to keep the ISDN and use it for backup.
The problem I have is - how do I implement ISDN backup with our current set-up? From the documentation, I can see how to do this for more "straightforward" set-ups but not for the set-up we have! Let me explain:
At the central site, we have a Cisco 7206 router. The ISDN connected sites connect directly to this router (which is configured with a large number of dialer map statements for each site)
The 7206 connects to a PIX515E firewall. The ADSL connected sites connect over the public internet using IPSEC with the tunnels terminating on the PIX.
The 7206 router contains static routes for the ADSL connected sites, pointing to the firewall.
At the remote sites, we have a Cisco 837 router for the ADSL connection.
This is connected (via ethernet) to the router we want to use for ISDN backup - a Cisco 800. The 837 and 800 are configured with HSRP.
However, at the moment, if the 837 or the ADSL link was to go down, there would be no means to connect to the central site. How can we configure this to use the 2nd router for ISDN backup, given our set-up?
Any suggestions would be greatly appreciated!
(incidentally, I have only recently joined this company and have taken this over, without any information to go on as to why things are set up as they are !)

Hello again,
I think you can pretty much ignore my last message. I've done a bit more digging and I think I have a better idea of what you mean now!
Lets see if I've got this about right. To recap:
I need to set up a GRE tunnel between the remote site and 7206 router at head office, which in turn would be using IPSEC tunnel between remote router and PIX.
So, steps required:
1) set up IPSec tunnel to to PIX (this is the way it is already currenly configured - am I right in thinking no further configuration would be required as far as the PIX is concerned, for the new set-up?)
2) set up GRE tunnel between remote ADSL router and 7206 - requires tunnel interface on both router with start point and end point configured. Use GRE keepalive to enable the line protocol to be brought down if the far end cannot be reached.
3) Add static routes on ADSL router to reach head office network via tunnel interface
4) Add static route on 7206 router to reach remote network via tunnel interface
5) Configure ISDN map statement on 7206 mapping remote network to ISDN number
6) Configure "floating" static routes on 7206 to use ISDN to reach remote network
7) Configure HSRP on ADSL and ISDN routers with tracking of tunnel interface. If tunnel interface goes down, then ISDN router takes over as active.
8) Configure static routes on ISDN router to point to head office network using BRI0 interface.
So, under normal operation, traffic between head office and remote office will be routed across the GRE tunnel using the ADSL link.
If the ADSL link was to go down then the GRE tunnel would also go down. So, the 7206 would then use the floating static routes to reach the remote network via the ISDN connection.
The ISDN router would take over as active at the remote site since the tunnel interface would have gone down, forcing the HSRP to failover.
Does that all sound about right? Is there anything I've missed?
I'll start trying to put some configurations together when I get the chance - but, if its ok, I'll probably run these past you too, just to make sure they seem correct!
Thanks,
Neil

2 x 2911 HSEC router 3 ADSL connections each Site ti Site VPN Load Balancing Failover

Hello,
My senario is as described in Title.
Site A Headquarters. The router is Cisco 2911HSEC with 3 ADSL connections
Site B Remote Office. The router is Cisco 2911HSEC with 3 ADSL connections and 10 Users.
All ADSL connections have static IPs and belong to same ISP.
Need - Site to Site VPN between the routers.
Client requests to load balance the traffic, due to poor ADSL speed and have a failover senarion in case an ADSL line goes down.
Any help will be appreciated.

I don't believe you will find a One solution for this.
An idea would be to have all three ADSLs paired with ADSL on the other side.
Have 3 VTI (or GRE) tunnels up all the time (VRF-lite anybody?) and advertise routes to the other side with same metric.
This will cause IOS to load balance natively.
Potential problem: return path might not be the same as forward path, but it should not matter much for most applications.
Potential cool thing you can do: All the "magical" things in routing world (Did I head PfR?). FlexVPN on top to make it more flexible.
Benefit: Rely on IKE to bring down connections which are going down. Little-to-no management once it's up and running.

Two computers connected to one router, two external IP? How?

Hey Im just playing around with the Remote Desktop and I have two computers connected to a router but when i search for external IP it shows only one of them. Is there a way of distinguishing more computers in one network from outside of the network? THANKS!!!

http://support.apple.com/kb/TS1882
To connect to more than one computer behind an NAT router, you'll need to have Apple Remote Desktop 3.3.

Correct route for ADSL connection

Hi
I found a couple of threads on this topic but none of them seemed to be plain enough for a newbie to understand. I use an ADSL connection for my home box. The connection uses pppoe for authentication. When I start the computer, I have to run the following commands on every run to get access to internet:
su
route del default
route add default gw 81.91.128.10
Here is what my rc.conf reads:
# /etc/rc.conf - Main Configuration for Arch Linux
# LOCALIZATION
# LOCALE: available languages can be listed with the 'locale -a' command
# HARDWARECLOCK: set to "UTC" or "localtime"
# TIMEZONE: timezones are found in /usr/share/zoneinfo
# KEYMAP: keymaps are found in /usr/share/kbd/keymaps
# CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
# CONSOLEMAP: found in /usr/share/kbd/consoletrans
# USECOLOR: use ANSI color sequences in startup messages
LOCALE="en_US.utf8"
HARDWARECLOCK="localtime"
TIMEZONE="Asia/Tehran"
KEYMAP="us"
CONSOLEFONT=
CONSOLEMAP=
USECOLOR="yes"
# HARDWARE
# Scan hardware and load required modules at bootup
MOD_AUTOLOAD="yes"
# Module Blacklist - modules in this list will never be loaded by udev
MOD_BLACKLIST=(pcspkr)
# Modules to load at boot-up (in this order)
# - prefix a module with a ! to blacklist it
MODULES=(mii slhc via-rhine ac97_bus snd-mixer-oss snd-pcm-oss snd-seq-oss snd-seq-device snd-seq-midi-event snd-seq snd-page-alloc snd-pcm snd-rawmidi snd-timer snd snd-mpu401-uart snd-mpu401 snd-ac97-codec snd-via82xx soundcore fuse)
# Scan for LVM volume groups at startup, required if you use LVM
USELVM="no"
# NETWORKING
HOSTNAME="localhost"
# Use 'ifconfig -a' or 'ls /sys/class/net/' to see all available
# interfaces.
# Interfaces to start at boot-up (in this order)
# Declare each interface then list in INTERFACES
# - prefix an entry in INTERFACES with a ! to disable it
# - no hyphens in your interface names - Bash doesn't like it
# Note: to use DHCP, set your interface to be "dhcp" (eth0="dhcp")
lo="lo 127.0.0.1"
eth0="dhcp"
INTERFACES=(lo eth0)
# Routes to start at boot-up (in this order)
# Declare each route then list in ROUTES
# - prefix an entry in ROUTES with a ! to disable it
gateway="default gw 81.91.128.10"
ROUTES=(gateway)
# Enable these network profiles at boot-up. These are only useful
# if you happen to need multiple network configurations (ie, laptop users)
# - set to 'menu' to present a menu during boot-up (dialog package required)
# - prefix an entry with a ! to disable it
# Network profiles are found in /etc/network-profiles
#NET_PROFILES=(main)
# DAEMONS
# Daemons to start at boot-up (in this order)
# - prefix a daemon with a ! to disable it
# - prefix a daemon with a @ to start it up in the background
DAEMONS=(syslog-ng network netfs crond dbus hal adsl privoxy tor keytouch)
# End of file
Here's my ifconfig output:
eth0 Link encap:Ethernet HWaddr 00:05:5D:C8:A5:AA
inet addr:192.168.1.3 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::205:5dff:fec8:a5aa/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:93252 errors:0 dropped:0 overruns:0 frame:0
TX packets:69563 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:106552708 (101.6 Mb) TX bytes:6338531 (6.0 Mb)
Interrupt:5 Base address:0xd000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:931 errors:0 dropped:0 overruns:0 frame:0
TX packets:931 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1886158 (1.7 Mb) TX bytes:1886158 (1.7 Mb)
ppp0 Link encap:Point-to-Point Protocol
inet addr:91.184.72.216 P-t-P:81.91.128.10 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1
RX packets:92873 errors:0 dropped:0 overruns:0 frame:0
TX packets:69152 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:104480285 (99.6 Mb) TX bytes:4801320 (4.5 Mb)
What should I do to get the thing done without any manual intervention?

Please refer to this wiki for the detailed and correct steps to set it up:
http://wiki.archlinux.org/index.php/PPP … _with_pppd
And remember to set eth0 up in rc.conf as follow:
eth0="eth0 0.0.0.0 up"
I don't know why you have to set route up manually. I thought that the pppd daemon will do it for you.
And... just use /etc/rc.d/pppd not /etc/rc.d/adsl.
Hope this helps.
BR,
bsdson.tw

It appears since my Windows PC McAfee AV subscription expired my PC's iTunes doesn't see my two Apple TV2's. My computer has internet connection thru router and my ATV has internet connection thru same router. My iPad can see the ATV but it can't see iT

My Windows PC iTunes doesn't see my two Apple TV2's (in the speaker button in lower right of iTunes), I believe this problem began when my PC's McAfee AV subscription expired. My computer has internet connection thru router and my ATVs have internet connection thru same router so it's not a networking issue. My iPad can see the ATVs but it can't see iTunes so the problem appears to be PC/iTunes related. I turned the PC's firewall off but no joy. I uninstalled the expired McAfee and still no joy. Reboot = no joy. Glass of scotch = no joy. Need help!!

Wanted to add that I turned on Home Sharing w/the same account in iTunes and ATVs. And I've successfully streamed music/photos to my ATVs for over a year.

There are two iMacs connected through same router in my house but one refuses to login to facebook and other logged in sites. local techies are bemused, I have just reinstalled OSX and still have the problem. Login page recycles and no errors reported.

There are two iMacs connected through same router in my house but one refuses to login to facebook and other logged in sites. Local techies are bemused, I have just reinstalled OSX and still have the problem. Login page recycles, I get no further and no errors reported. Safari, Opera and Firefox. Deleted cookies and chain but still no action.

If you have not already done so, read the router's user manual troubleshooting section and/or contact its customer service department/forums.
If still having problems, post back w/details of all you have tried to resolve the problems along w/the troubleshooting solutions that the "local techies" had you try.

Connecting a WRT54G2 V1 to a ADSL Ovislink Modem router combo

I am trying to set up my linksy router to a ADSL Ovislink Modem router combo and when I install the CD on the main computer I keep getting this error message
"Error 322- New router or gateway not detected"
I have hooked everything up correctly as the CD has instructed me. My TV, phone and internet all are on the same package. I have powered down both th ADSL and my linksys and still not detecting the linksys. The 1 computer light on the linksys blinks evry now and than and so does the ((( light will blink sometimes too.
I had my cable modem hooked up to it in August and it worked fine and than we moved and the place we moved to has ADSL modem router and I need to hook up my router to get internet as the ADSL only allows one computer to be hooked up through the ADSL one. So I know there is nothing wrong with my router.
Any suggestions would be helpful.

If you are trying to setup your router using the setup disk you can exit from the setup and configure all the settings on your router manually.
If your Internet Service Provider is DSL follow this link

Help me set up ADSL connection

Hi everybody!
I'm new to this forum, and I'm using Arch linux for about a week or two. I'm using Linux for about 2 years, though, so I'm not a newbie Linux user.
However, I'm having troubles with my adsl connection to internet. I have Thomson SpeedTouch 530 v5 adsl modem, connected via integrated Realtec network card. I have internet as long I as I don't start adsl service. But when I start adsl service I can't access internet anymore.
Any help regarding this matter is highly appreciated.
P.S. I have already read a bunch of simillar topics on this forum, but nothing actually helped me.

Hi vogt!
First to say that my modem began to acting strange last few days. Even on my Mandriva system sometimes it gives me troubles.
I have dynamical IP, and my current setup on Arch is this:
rc.conf wrote:
HOSTNAME="demon"
lo="lo 127.0.0.1"
#eth0="eth0 0.0.0.0 up"
eth0="dhcp"
INTERFACES=(lo eth0)
gateway="dhcp"
ROUTES=(!gateway)
DAEMONS=(@syslog-ng network adsl @httpd @mysqld @netfs @crond @ntpd @sensors @cpufreq alsa hal fam kdm)
/etc/ppp/pppoe.conf wrote:ETH='eth0'
USER='pejakm@adsl'
DEMAND=no
DNSTYPE=SPECIFY
PEERDNS=no
DNS1=81.93.64.1
DNS2=81.93.64.9
DEFAULTROUTE=yes
CONNECT_TIMEOUT=30
CONNECT_POLL=2
ACNAME=
SERVICENAME=
PING="."
CF_BASE=`basename $CONFIG`
PIDFILE="/var/run/$CF_BASE-pppoe.pid"
SYNCHRONOUS=yes
CLAMPMSS=1412
LCP_INTERVAL=20
LCP_FAILURE=3
PPPOE_TIMEOUT=80
FIREWALL=NONE
LINUX_PLUGIN=
PPPOE_EXTRA=""
PPPD_EXTRA=""
RETRY_ON_FAILURE=no
and I had to blank /etc/ppp/options
and to change "/usr/sbin/pppoe-start" to "/usr/sbin/pppoe-connect" in /etc/rc.d/adsl script so I could even start pppoe.
But at the moment I don't get what I want: still no ppp0 interface, but I have internet connection. I need ppp0 interface, because I have apache web server running (so I can access it from outside using current ip address - this works in Mandriva).

MPLS Handling of Aggregated ADSL-connected sites

I'm familiar with serially-connected sites entering an MPLS core, where there is a physical connection associated with each site, and so the site is simply identifiable to the MPLS PE by virtue of a physical port. However, I'm trying to get my head round how to handle ADSL connections, where many sites' traffic is aggregated into one bearer. How does the MPLS network associate the right traffic with the right site under these conditions? Sorry if this is a bit of a "dumb newbie" question, but I've googled extensively, and just haven't got to the stage where I feel confident in my understanding.
Jim

Hi Jim,
When using DSL most architectures use PPPoA/PPPoE (you could just bridge at the dslam and use no PPP but that would result in a subinterface a VRF could be configured on).
PPP will create a virtual-access interface per PPP authentication (username).
When the virtual interface is being created the provider router (LNS) will ask a radius server if the user can be granted access. If yes, the radius can also give the router configuration information which can include IP address and VRF.
Ultimately the traffic is kept separate because point to point logical sessions can be built on top of a multi access network (PPPoE).
Hope this helps,
Matt Ayre

Trouble with two computers connecting to wireless on WRT54G

I am using a WRT54G router and I am unable to have two computers connected to the wireless at the same time. When one computer connects it will boot off the other computer and/or not allow it to connect. Both machines are macs and it switches between the both of them- it is not consistently one or the other who has the issue. Any ideas or suggestions?

You can try upgrading the router's firmware and then re-configure it...
Go to website linksysbycisco.com/downloads.........insert model no of your router in serach tab......select proper version of your router........download the firmware file......save that file on desktop
Follow these steps to upgrade the firmware on the device : -
Open an Internet Explorer browser page on a computer hard wired to the router...
In the address bar type - 192.168.1.1...Leave the Username blank & in Password use admin in lower case...
Click on the 'Administration' tab- Then click on the 'Firmware Upgrade' sub tab- Here click on 'Browse' and browse the .bin firmware file and click on "Upgrade"...
Wait for few seconds until it shows that "Upgrade is successful" After the firmware upgrade, click on "Reboot" and you will be returned back to the same page OR it will say "Page cannot be displayed".
Now reset your router :
Press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...

How do I connect WRT54GS Router to Talk Talk MT882?

I was able to set up my Talk Talk wired SmartAX MT882 modem but I now want to use my Linksys Wireless-G WRT54GS Broadband Router but it can't connect.
I entered the Talk Talk setup using the setup cd.
I then used the Linksys setup cd to connect the router.
But part way through the setup I get a message saying:
The router is not able to connect to the internet. Try turning the cable/DSL Modem Off and back On again.
Did that and nothing changes. Still the same message.
I've seen on a couple of forums that you should change the internet connection type of the SmartAX MT882 to Pure Bridge and the Linksys WRT54GS to PPPoE.
That doesn't change anything.
After having connected the Modem to the computer with the Ethernet cable vis the ethernet port I then take that out and place it into the internet port on the router and connect the other ethernet cable from one of the numbered ports(1-4) on the router to the ethernet port on the modem.
It seems that the modem has to be connected directly to the computer?
I'm completely stuck on what to do.

To get the Huawei SmartAX MT882 and the Linksys WRT54G to work together, you need to disable a DHCP server on one of the two (cause they are both routers, in this case we will disable the DHCP on the WRT54G). First leave the MT882 turned off and disconnected from the network for now. Connect to the WRT54G at http://192.168.1.1 with username and password set as "admin" unless you changed it beforehand. On the first page disable the DHCP server and change the address of the WRT54G to 192.168.1.200 (We are going to keep the IP within the same subnet as the MT882 but outside the range of the MT882's DCHP range). You will also need to switch the Advanced Dynamic routing on the WRT54G to the Router mode meaning that there is another router on the network. Also in the advanced dynamic routing mode turn on the the Dynamic Routing (RIP) to LAN+Wireless because we will plug in the MT882 into the LAN port (Not the WAN/Internet port) of the WRT54G. Disconnect from the WRT54G network. Plug in your MT882 directly into the computer via Ethernet or USB and log into the administration panel via http://192.168.1.1 if connected via Ethernet or http://192.168.1.2 if connected via USB. User name and password are both "admin". In the MT882 administration in the advanced setting turn on/enable RIP (Dynamic routing) for eth-0 (its most likely already enabled for ppp-0, ie. your provider, but now it is enabled with the Ethernet too). Now connect the MT882 Ethernet cable directly into one of the WRT54G's LAN ports and connect to the WRT54G with your computers via wireless or lan. Now once the computers are connected they will ask for an IP address and the WRT54G will forward them to the MT882's DHCP server for an address and thus you will get multiple computers through wireless connected to the MT882 and the "Internet". Good luck.

NAT on ADSL Connection

I am having a ADSL connection with dynamic IP from my ISP, I am using a Cisco 837 router.
I need to access one of my servers from the internet. I am using a dyndns agent in my server so that I will know the updated IP address. I tried setting NAT on the dialer0 interface, but it did not work. I need to NAT 2 ports (port 22 and 122) to a LAN server: 192.168.5.11
Here is the original config file:
Please see attached.
I searched the web and I tried this:
config t
interface dialer0
ip access-group 104 in
exit
access-list 104 permit tcp any any eq 22
access-list 104 permit tcp any any eq 122
ip nat inside source static tcp 192.168.5.11 25 interface dialer0 22
ip nat inside source static tcp 192.168.5.11 25 interface dialer0 122
After I entered these command, I can no longer access the internet.
May I know where did I do wrong?
Can anyone assist me?
Thanks.

You should be using "inspection" on the internal and external interfaces.
Inspection will create dynamic holes in the firewall to facilitate traffic in the return path, and will simplify your interface ACLs.
The internal interface ACL should be configured to permit the specific protocols permitted (by security policy) for outbound communication. Applying inspection on the internal interface will provision the return path by opening dynamic holes in the outside interface ACL.
The same is done on the external interface. An ACL is created to permit connections from external hosts to your internal servers. Inspection is applied there to facilitate packets returning from your servers, by opening dynamic holes in the internal interface's ACL.
Inspection would be a better choice that using the established key word in ACLs.
e.g.: A simple inspection example:
ip inspect log drop-pkt
ip inspect audit-trail
ip inspect name our-insp tcp
ip inspect name our-insp udp
ip inspect name our-insp icmp
ip inspect name our-insp dns
ip inspect name our-insp ftp
ip inspect name our-insp pop3
interface Ethernet0
description ~5Mbps Exposed to Internet
ip inspect our-insp in
interface FastEthernet0
description Internal Network
ip inspect our-insp in
Note: Ideally you would migrate to Granular Protocol Inspection and avoid the generic UDP and TCP inspection, but that is up to you.
I've not looked at your NAT issues, just the lack of Internet connectivity following application of the limited ACL on the external interface.

Two adsl connection on router

Similar Messages

Maybe you are looking for