Help configuring the Cisco 1605-R

[Dark]

Hi, Each time I would connect to the router using the console, I would get a msg:%QUICC_ETHER-1-LOSTCARR: Unit 0, lost carrier. Transceiver problem?
Other than that the config goes pretty well.
Hem, maybe the error is weird for me and not for the cisco gurus out there The thing is that I never seen that with the 2500 series...

 

[Dark]

oops

 

[Damaged]

Well, you can only see this message from the console or if you issue term mon if telneted in.

What it means is that there's a connection problem with that ethernet port. Bad cable, wrong cable, no cable, a 10 only interface connected to a 100 only interface. Something like that. Remember, if you're going directly to a NIC from that router's ethernet port you'll need a crossover cable.

 

[Dark]

I c.

 

[Dark]

I was wondering if anyone can give me a hand in configuring the router. I've never done a Nat before but i'm fluent with the basic conf. The thing is that I can ping the isp router from our router but I can't from any pc from the LAN. I get a destination unreachable from our router, so I guess there is a problem with the routes???
The conf is:
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!

!
ip subnet-zero
!
!
!
interface Ethernet0
ip address 192.168.0.1 255.255.255.0
no ip directed-broadcast
ip nat inside
no cdp enable
!
interface Ethernet1
ip address 66.x.x.x 255.255.255.248
no ip directed-broadcast
ip nat outside
no cdp enable
!
ip nat inside source list 1 interface Ethernet1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet1
!
access-list 1 permit 192.168.0.0 0.0.0.255
no cdp run
!
line con 0
transport input none
line vty 0 4

login
!
end

What am i doing wrong?

 

[Captain_Rob]

!
version 12.0
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service password-encryption
!
hostname router1
!
logging buffered 5000 debugging
enable secret <removed>
!
username <removed> password <removed>
ip subnet-zero
no ip source-route
no ip finger
!
interface Ethernet0
description Inside LAN
ip address 192.168.0.1 255.255.255.0
no ip directed-broadcast
ip nat inside
!
interface Ethernet1
description Outside Internet
ip address 66.x.x.x 255.255.255.248
ip access-group 101 in
no ip directed-broadcast
ip nat outside
no ip mroute-cache
!
ip nat inside source list 1 interface Ethernet1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet1
!
access-list 1 permit any
!
access-list 101 deny ip 192.168.0.0 0.0.0.255 any
access-list 101 permit tcp any any established
access-list 101 permit udp any eq domain any
access-list 101 permit tcp any eq ftp-data any
access-list 101 permit icmp any any packet-too-big
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any unreachable
access-list 101 deny ip any any log
snmp-server community public RO
snmp-server location &quot;Columbus, Ohio&quot;
snmp-server contact &quot;John Smith&quot;
snmp-server chassis-id Cisco 1605R
!
line con 0
login local
terminal-type ansi
transport input none
line vty 0 4
login local
terminal-type ansi
!
end

 

[Dark]

Captain Rob: What was i doing wrong?

 

[Dark]

U don't touch the routes other than setting the gateway of last resort...?

 

[Xanathar]

On your route statement, enter in the exact address of the next hop. Using the Interface (Ethernet1) works wonderfully on serial implementations, but with Ethernet is sometimes flaky. Also check your IP Nat statement, im to tired to think about it, but it gives me a funny feeling, maybe Im used to seeing IPs there, and not the interface again..

 

[Dark]

Okie Xanathar, I'll do that. Any possible suggestion?

 

[Damaged]

I agree. RARP protocol on ethernet interfaces is flaky on Ciscos. Particularly when it's the default route. I don't like it, so I don't use it.

Here's a real simple config:


version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Router
!
enable secret 5 <blah>
enable password 7 <blah>
!
ip subnet-zero
no ip source-route
no ip finger
ip tcp synwait-time 10
ip name-server xxx.xxx.xxx.xxx
clock timezone CST -6
clock summer-time CDT recurring
!
!
!
interface Ethernet0
description Internal NAT IP Interface
ip address 192.168.0.1 255.255.255.0
no ip directed-broadcast
ip nat inside
!
interface Ethernet1
description Outside NAT IP Interface
ip address 66.x.x.x 255.255.255.248
no ip directed-broadcast
ip nat outside
!
ip nat inside source list 1 interface Ethernet1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 <next hop (66.something)>
!
access-list 1 permit 192.168.0.0 0.0.0.255
!
line con 0
transport input none
line vty 0 4
password 7 <blah>
login


write erase and start over.

 

[Damaged]

fsck! Debug is your friend, just don't do a debug all. Very bad!

You can so sh ip nat trans to see if anything is getting translated.