Assistance Required - Cisco 1750

[Turiko]

Morning all

I am not a CCNA/CCNP or any of those, I am just an electronics guru so I was wondering if anyone can help me with my requirements.

I have, a Cisco 1750 router, which I have fitted with an Ethernet WIC (WIC-1T)

I would like to request of anyone that can help me, to please show/tell/help me configure this router to do the following:

Configure the router so that:

- The WIC side goes into a broadband connection i.e. another router that has no NATting i.e. all ports forwarded out on the other side.
- The router does DHCP, in a pool size of about 50 IP addresses.
- It performs NAT for the PC's attached on the standard Ethernet port
- The router does not do port forwarding.

This is a pretty simple set of requirements as far as I can see.

Can anyone help with this?

Regards,
Turiko

 

[leakybucket]

Assumptions:

- Ethernet0 is the WIC-1ENET, and it connects to the internet side
- FastEthernet0 is the onboard NIC, and it connects to the LAN side
- LAN subnet is 192.168.1.0/24
- Default gateway for the Cisco is 10.0.0.1
- DNS server for LAN clients is 10.1.1.1

------8<------8<------
no ip dhcp conflict logging

ip dhcp pool mydhcppool
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 10.1.1.1

interface FastEthernet0
ip address 192.168.1.1 255.255.255.0
ip nat inside

interface Ethernet0
ip address 10.0.0.2 255.255.255.0
ip nat outside

ip route 0.0.0.0 0.0.0.0 10.0.0.1

ip nat inside source list 1 interface Ethernet0 overload
access-list 1 permit 192.168.1.0 0.0.0.255
------8<------8<------

Good luck!

 

[Turiko]

Assumptions are correct.

Just confirm with me though:

Ethernet0 is a 192.168.0.x address
FastEthernet0 should be configured to use a range of 192.168.1.x

I presume that this routing will only permit connections the clients originate- in other words I don't want people from outside able to access my PC on some obscure port say, 1337. And I am not going to run p2p clients on the machines either.

Are these the IOS commands?

 

[leakybucket]

Assumptions are correct.

Just confirm with me though:

Ethernet0 is a 192.168.0.x address
FastEthernet0 should be configured to use a range of 192.168.1.x

I'm not getting the question, if it's there... If you're telling me that the Ethernet0 range is 192.168.0.x, and asking if it will still work, the answer is yes, it should be fine. If you're asking if the FastEternet0 range has to be 192.168.1.x, then no, it can be any range, preferably RFC1918 space (192.168/16, 172.16/12, 10/8)

If I totally missed it, sorry

I presume that this routing will only permit connections the clients originate- in other words I don't want people from outside able to access my PC on some obscure port say, 1337. And I am not going to run p2p clients on the machines either.

Correct. Clients on the LAN side of the router will be able to make connections to the outside, and return traffic will be passed. No incoming connections to the LAN clients will be allowed. Note that some protocols (like FTP) might give you headaches.

Are these the IOS commands?

Yes, they are. They can be entered in "enable" mode, after "configure terminal"

Also, it might be necessary to add:

ip dhcp excluded-address 192.168.1.1

to the config, where 192.168.1.1 is the LAN address of your router. I'm not sure if IOS is clever enough to not dish out the router's own address to a client... You can also specify a range if there's statically configured IPs in that subnet:

ip dhcp excluded-address 192.168.1.1 192.168.1.19

 

[Turiko]

Ok you've answered my questions- the next step is to try it. I will PM you if something doesn't work.

 

[leakybucket]

Ok you've answered my questions- the next step is to try it. I will PM you if something doesn't work.

Kewlness.

Keep in mind that you need to be extra careful if the router already has an active configuration. The sample configuration given will e.g. set IP addresses on the interfaces, which might override whatever was there previously. The interfaces might also not be named the same.

Carefully consider your current configuration and the impact any of the new commands will have on it before proceeding

 

[ghalied]

backup your old config to tftp 1st, and don't forget to bring the interfaces up ' no shutdown ' after configuring them.

 

[Turiko]

The router was wiped- I wiped it about 18 months ago following a how-to on Cisco's website. At the time I bricked it aswell, but managed to get it back up and running via the console by writing the EEPROM byte for byte manually. I don't want the current configuration either, as that was me and a bunch of misguided attempts.

 

[leakybucket]

The router was wiped- I wiped it about 18 months ago following a how-to on Cisco's website.

OK, great. It's important then, as ghalied noted, that you also do a 'no shutdown' on each interface, as they normally start up as 'shutdown' in a blank IOS config.

At the time I bricked it aswell, but managed to get it back up and running via the console by writing the EEPROM byte for byte manually.

Harcore!!

I don't want the current configuration either, as that was me and a bunch of misguided attempts.

Kewl. For the record, you should be able to erase the config using 'write erase' and then 'reload' to a clean slate.

 

[MidnightWizard]

Unbricked

The router was wiped- I wiped it about 18 months ago following a how-to on Cisco's website. At the time I bricked it as well, but managed to get it back up and running via the console by writing the EEPROM byte for byte manually. I don't want the current configuration either, as that was me and a bunch of misguided attempts.

WOW care to explain further......

With this sort of knowledge I am suprised that you are struggling to get the router set up

I always thought that a WIC-1T was a one port high speed serial interface ?
( using a mini-serial cable pinout ) and that the 1750's Fast Ethernet interface was internal

There IS a lot of info on the Cisco site WITH many different configuration examples. Just do a search on your particular product ,
get to those pages and then have a look for the links to the examples. Google is also VERY helpful in this regard.

The CISCO site is HUGE and can be confusing -- BUT -- it is all there. Even better see if you can find
someone from whom you can get the CISCO DOCUMENTATION DVD.

Seeing as you are talking about being an electrical type person who has "unbricking" experience would
you perhaps have much knowledge about EEPROM's SAMSUNG specifically ?

I am not too clued up with CISCO -- but I have a couple here. Running through one now
IF -- in the land of the blind the one eyed man is KING then surely TWO one eyed men must constitute an EMPEROR.

Perhaps we can help each other [:?:]


MW

 

[Turiko]

All and any help appreciated
OK, this is where we stand.

I reset the router to factory shipped condition about a year ago. I powered it up this morning and it gave me a questionnaire asking me to specify the passwords and the IP configuration for FastEthernet0.

I filled in all the fields, and set the IP address of FastEthernet0 to 192.168.0.1 with subnet mask of 255.255.255.0. I was asked to save the changes, which I did. The router restarted and I was thrown directly into the IOS proper.

So it seems my FastEthernet0 port is turned on. However it does bleat about it not being enabled. So far I am not seeing the ethernet WIC card I installed, which I suppose is what I should expect considering the router still needs to be configured further.

How do I proceed to get the WIC card configured? I need to do this before I start with the above steps no?

always thought that a WIC-1T was a one port high speed serial interface ?
( using a mini-serial cable pinout ) and that the 1750's Fast Ethernet interface was internal

I managed to get a WIC with ethernet port from someone at Verizon. They sold it to me for a bargain price.

As for the bricking. You see, the CISCO products are based on Freescale processors. If you know these processors, you can get into the debugger and recover from bricked conditions like I did. I am an embedded developer with most of Freescale (ex Motorola) products so I know my way around. So I used the debugger to write a new configuration to EEPROM and I was rewarded with a router that was in factory defaults mode

 

[leakybucket]

All and any help appreciated
OK, this is where we stand.

I reset the router to factory shipped condition about a year ago. I powered it up this morning and it gave me a questionnaire asking me to specify the passwords and the IP configuration for FastEthernet0.

That's the default basic configuration dialog they go through when you start them up with no configuration saved.

I filled in all the fields, and set the IP address of FastEthernet0 to 192.168.0.1 with subnet mask of 255.255.255.0. I was asked to save the changes, which I did. The router restarted and I was thrown directly into the IOS proper.

Sounds good.

So it seems my FastEthernet0 port is turned on. However it does bleat about it not being enabled. So far I am not seeing the ethernet WIC card I installed, which I suppose is what I should expect considering the router still needs to be configured further.

If the IOS detected the WIC it should've added a basic "interface Ethernet0" section to the config with "shutdown" and one or two other basic settings for the interface. Do you not see anything like that when you do a "show running-config" ?

How do I proceed to get the WIC card configured? I need to do this before I start with the above steps no?

Can you post a "show version" either here or on a pastebin somewhere?

I managed to get a WIC with ethernet port from someone at Verizon. They sold it to me for a bargain price.

Are you sure it's a WIC-1T, and not a WIC-1ENET?

As for the bricking. You see, the CISCO products are based on Freescale processors. If you know these processors, you can get into the debugger and recover from bricked conditions like I did. I am an embedded developer with most of Freescale (ex Motorola) products so I know my way around. So I used the debugger to write a new configuration to EEPROM and I was rewarded with a router that was in factory defaults mode

Impressive

/me tips hat to Turiko

 

[Turiko]

Yip, will do all you request. Just one thing. My PC is in a very sorry state at the moment thanks to that XPAntivirus2008 malware . I am trying to fix it as fast as I possibly can. So please bear with me for slow response.

 

[MidnightWizard]

Configuring a Cisco

Hi ,

I was thinking about this ( might be dangerous)

Just to answer your first questions here and go onto something else -- hopefully without second guessing "Leaky-Bucket" . Please pull me up if you think I am talking nonsense

IF you have the router set up connected with the console and a terminal program you should see the read out when the router boots up. As mentioned it will show your hardware configuration enumerating whatever WORKING hardware it sees. IT will also give you a listing of the IOS --version , memory and other stuff.

Can you log that and post it here.

When you get to that first section where you go through the "wizard" portion you can choose to say NO and then go straight to the IOS CLI. I assume that there are no passwords or user profiles set so you should be able to execute a show command. Use the " ? " to get a listing of commands. Cisco IOS is just basically a type -- almost subset of UNIX.

ie. show ? -- will show you all those commands you can use. This is dependent on whether you are in normal user mode or "enable" mode
(superuser)

show running-config will show you what is in RAM

show startup-config will show you what is in NVRAM

show diag ( if I have the command right ) will show you all your hardware

You should then get a listing of all the installed interfaces -- whether they are in an enable OR shutdown state they will still be listed.

Here you can see if your WIC is listed -- ie working -- and what sort of interface it is SERIAL , ISDN , ADSL , ETHERNET , FastEthernet , etc.

You can always do a Google search on whatever item you are not sure of. You can also do a search on the CISCO site. EVERYTHING is there. You just need to find it. ALL the hardware is there with lots of documentation.

DO a Google search for 1750 -- or whatever configuration -- Just need to do some sorting and sifting


TO come back to your original post and Leaky-Buckets config


------------
Configure the router so that:

- The WIC side goes into a broadband connection i.e. another router that has no NATting i.e. all ports forwarded out on the other side.


(Q) Where is the other router and what is it. What is it's configuration ?



- The router does DHCP, in a pool size of about 50 IP addresses.

(A) Far as I can see LB has this sorted


- It performs NAT for the PC's attached on the standard Ethernet port

(A) Again OK



- The router does not do port forwarding.

(A) OK


This is a pretty simple set of requirements as far as I can see.


(A) Everything is always "simple" once the puzzle is solved



==========
no ip dhcp conflict logging

ip dhcp pool mydhcppool
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 10.1.1.1

interface FastEthernet0
ip address 192.168.1.1 255.255.255.0
ip nat inside

interface Ethernet0
ip address 10.0.0.2 255.255.255.0
ip nat outside

ip route 0.0.0.0 0.0.0.0 10.0.0.1

ip nat inside source list 1 interface Ethernet0 overload
access-list 1 permit 192.168.1.0 0.0.0.255

==========

As far as I can make out here -- the route as indicated is a "static" route ie a stipulated next hop.

-- no need for any ROUTING protocols

HOW do your fifty ( I think that is the number you mentioned) workstations connect into this LAN ?

I am also not seeing any hint of a modified config on the "Gateway" Router -- the one that is actually doing the routing out onto the WAN. (Not necessary when connecting to the Internet via an ISP infrastructure as their routers are set up for this scenario -- but your description sounded different )

-- dns-server 10.1.1.1 Using the "gateway" router as a DNS Server rather than a "real" DNS Server ( Have I got this right ? )

IF you want some security on this you are going to have to set up a proper ACL or RADIUS or something similar -- which I am sure your Cisco model will be capable of ( depending on the IOS version )


IF you want I will scratch around on the Cisco site and see if I can find an applicable example config. But we need to look at that POST dump of yours first.


MW

 

[Turiko]

What I will do is also draw a diagram of what I want to do. I think that will also help.
This router is going to be called on to do no more than your average WRT54GL router. I have the thing and I want to make it work instead of sitting another year on the shelf. And in the process learn about these devices.

 

[MidnightWizard]

Resources for CISCO

What I will do is also draw a diagram of what I want to do. I think that will also help.
This router is going to be called on to do no more than your average WRT54GL router. I have the thing and I want to make it work instead of sitting another year on the shelf. And in the process learn about these devices.

If that is all it you are going to do with it then you are never really going to learn much.

IF you want to "learn about these devices" then you are going to need another couple of them to hook up together.
-- or -- attend one of the CCNA courses
-- or -- find your nearest Cisco Network Academy
-- or -- get some serious self study material.

Try

CISCO PRESS

as a start.

Look for the CCNA self study library and the Academy Lab Books

You can also try Googling -- Wendell ODOM


MW

 

[Turiko]

If that is all it you are going to do with it then you are never really going to learn much.

IF you want to "learn about these devices" then you are going to need another couple of them to hook up together.
-- or -- attend one of the CCNA courses
-- or -- find your nearest Cisco Network Academy
-- or -- get some serious self study material.

Try

CISCO PRESS

as a start.

Look for the CCNA self study library and the Academy Lab Books

You can also try Googling -- Wendell ODOM


MW

For now yes. Don't get me wrong. When it works well I'll be more adventurous.

I've bought the CCNA self-study books... cost me an arm and a leg they did
I develop embedded internet stuff and I am strongly interested in how Cisco do things as they are of course, a leader in their field.

 

[Turiko]

Hi there

OK, this is what we have. First of all let me point out that the WIC 1ENET was not seated properly in SLOT 0 of my Cisco 1750. Anyway here is the boot dump:

M860 processor: part number 0, mask 32
Bridging software.
X.25 software, Version 3.0.0.
1 FastEthernet/IEEE 802.3 interface(s)
32K bytes of non-volatile configuration memory.
4096K bytes of processor board System flash (Read/Write)



Press RETURN to get started!


00:00:04: %PQUICC-1-UNKNOWN_WIC: PQUICC(0), WIC card has an unknown ID of 0xFF
00:00:08: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
00:00:08: %SYS-5-CONFIG_I: Configured from memory by console
00:00:09: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed
state to up
00:00:10: %SYS-5-RESTART: System restarted --
Cisco Internetwork Operating System Software
IOS (tm) C1700 Software (C1700-SY-M), Version 12.1(9), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Wed 13-Jun-01 19:27 by kellythw
00:00:12: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed
state to down

I've highlighted the sections I am concerned about in BOLD.
According to Cisco's website I need to upgrade the firmware, on http://www.cisco.com/en/US/docs/routers/access/1700/software/feature/guide/cn1ENET.html#wp1046464 they say that I need a later version

The Cisco WIC-1ENET card requires Cisco IOS Release 12.2(2)XJ or later if the card is installed in any WIC slot other than slot 0 or if more than one card is installed.

The card can be used with Cisco IOS Release 12.2(4)T, but the card must be installed in slot 0 and only one Cisco WIC-1ENET card can be installed in the router.

I presume that this is why the router is coming back with "Unknown WIC"

So as a first step the firmware needs to be upgraded. Can anyone kindly provide me with the firmware needed and a howto to install it please?

 

[Turiko]

Good morning all

I managed to upgrade the firmware of my router to whatever I had. Unfortunately it still doesn't see my WIC but, at least now I can do stuff with the machine and I learnt a lot.

As per my previous post, can anyone assist with a .bin file of the requisite software to get the router to see my WIC? I've been on to Cisco's website but I cannot seem to find those version numbers 12.2(2)XJ and 12.2(4)T. I am also concerned about flash size I only have a 4Mbyte flash on this router.

 

[leakybucket]

I am also concerned about flash size I only have a 4Mbyte flash on this router.

Judging from the feature navigator, you'll need at least 32MB DRAM and 8MB Flash, depending on the feature set you're interested in. 32/8 would get you in a position to run the latest 12.2T "IP" feature set. For the "IP PLUS" feature set, you'll need 48MB DRAM and 16MB Flash.

Maybe try TFI for pricing? I haven't used them myself, but I spoke to one of their guys at a Computer Faire long ago, and I've always wanted to buy something from them