[winhack]

Hey all,

I've read through some of the posts here on the Cisco 1721, including some very helpful posts from O1111111O (did I miss any 1's?). I've even tried implementing them on my 1721 router here. My Serial0 port is configured somewhat differently than what is in the example, however, and I think that may be part of my problem in getting the new configuration to work.

I have a 1721 with Serial0 attached to a full T1 and FastEthernet0 is (or at least will be once I get it working) connected to my LAN. Right now, I have 5 external IP addresses, and the provider has set up the router to DHCP those 5 external addresses only. What I really need is a DHCP server on FE0 serving NAT'ed 10.10.1.x addresses and keep the 5 external addresses (or at least 4 of them since the router will need one most likely) for ip nat inside source static assignments. Therefore, I know I need NAT running as well as DHCP. I've got a 1605R at home (dual Ethernet ports) that I have working and I've tried to model my 1721 configuration based on that, but since all my addresses on the 1605R (internal and external) are fixed/known statics, it's a lot easier than the way the ISP here is trying to do things.

Here is the config file they have provided on the router:
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxx
!
no aaa new-model
ip subnet-zero
!
!
ip dhcp excluded-address 64.15.18.49
!
ip dhcp pool dhcp-pool1
import all
network 64.15.18.48 255.255.255.248
default-router 64.15.18.49
!
!
no ip cef
no ip domain lookup
!
!
!
!
interface FastEthernet0
ip address 64.15.18.49 255.255.255.248
speed auto
no keepalive
!
interface Serial0
no ip address
encapsulation frame-relay IETF
service-module t1 timeslots 1-24
service-module t1 fdl both
frame-relay lmi-type ansi
!
interface Serial0.1 point-to-point
frame-relay interface-dlci 16 ppp Virtual-Template1
!
interface Virtual-Template1
ip address negotiated
ppp chap hostname xxx@yyy
ppp chap password 7 xxxx
ppp ipcp dns request
ppp ipcp route default
ppp ipcp address accept
!
ip classless
no ip http server
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password 7 xxxx
login
!
end

I've changed some of the addresses and password entries for security reasons.

My LAN is using 10.10.1.0 as the base range, and the router can be at 10.10.1.1 for simplicity. What I was TRYING to do was as follows (but it didn't work):

!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxx
!
no aaa new-model
ip subnet-zero
!
!
! router
ip dhcp excluded-address 10.10.1.1
!
!
ip dhcp pool internal
network 10.10.1.0 255.255.255.0
default-router 10.10.1.1
dns-server 64.15.12.27
dns-server 64.15.15.27
!
!
no ip cef
no ip domain lookup
!
!
!
!
interface FastEthernet0
ip address 10.10.1.1 255.255.0.0
ip nat inside
ntp broadcast
speed auto
no keepalive
!
interface Serial0
no ip address
ip nat outside
encapsulation frame-relay IETF
service-module t1 timeslots 1-24
service-module t1 fdl both
frame-relay lmi-type ansi
!
interface Serial0.1 point-to-point
frame-relay interface-dlci 16 ppp Virtual-Template1
!
interface Virtual-Template1
ip address negotiated
ppp chap hostname xxxx@yyy
ppp chap password 7 xxxx
ppp ipcp dns request
ppp ipcp route default
ppp ipcp address accept
!
ip classless
no ip http server
!
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password 7 xxxx
login
!
!
end

When I tried this, it didn't work (obvioulsy). I am clearly missing a few pieces to the puzzle here. For example, I know I am missing the "ip nat inside source list internal overload" command. It seems that now you need to throw in the interface to apply this to before the Overload keyword, and trying both FastEthernet0 and Serial0 did not get me any closer to where I needed to be. I'm also missing the ip route 0.0.0.0 0.0.0.0 x.x.x.x line since I don't know what the ISP's router IP/gateway address to point at is.

On my 1605R at home I also have a number of entries for NTP on the router, but NTP support does not seem to be an option with the 1721--that or they've moved it somewhere where I cannot find it.

There are a few other things I've added/tried (access-list entries, etc.) but none of them seemed to be the magic to get this config to work. If anyone out there has any tips, I would be happy to read them.