Hallo, habe mir einen Cisco 801 ersteigert und ihn mit FastStep konfiguriert. Er stellt auch eine Verbindung zum ISP her, zumindest laut Test und LED :D
Hier die Config:
no service udp-small-servers
no service tcp-small-servers
service password-encryption
hostname Router
username Router password ***
enable secret ***
no ip source-route
isdn switch-type basic-net3
ip routing
ip classless
ip subnet-zero
ip inspect name firewall cuseeme
ip inspect name firewall fragment
ip inspect name firewall ftp
ip inspect name firewall http
ip inspect name firewall h323
ip inspect name firewall realaudio
ip inspect name firewall smtp
ip inspect name firewall sqlnet
ip inspect name firewall streamworks
ip inspect name firewall tftp
ip inspect name firewall vdolive
ip inspect name firewall tcp
ip inspect name firewall udp
interface ethernet 0
keepalive
no shutdown
ip address 192.168.0.100 255.255.255.0
ip route-cache
no ip proxy-arp
no ip directed-broadcast
ip nat inside
ip access-group 101 in
interface bri 0
encapsulation ppp
ppp authentication chap pap callin
no ppp multilink
isdn switch-type basic-net3
dialer pool-member 1
no shutdown
interface dialer 1
dialer remote-name Cisco1
dialer pool 1
no ip split-horizon
description ISP
encapsulation ppp
dialer idle-timeout 300
dialer hold-queue 10
dialer-group 1
dialer string *** class DialClass
ppp authentication chap pap callin
ppp chap hostname ***
ppp chap password ***
ppp pap sent-username *** password ***
no ppp multilink
ip address negotiated
ip route-cache
no ip proxy-arp
no ip directed-broadcast
ip inspect firewall out
ip nat outside
ip access-group 111 in
map-class dialer DialClass
no dialer isdn speed 56
dialer-list 1 protocol ip permit
no router rip
ip route 0.0.0.0 0.0.0.0 dialer 1
ip nat inside source list 18 interface dialer 1 overload
access-list 18 permit 192.168.0.0 0.0.0.255
access-list 111 permit icmp any any administratively-prohibited time-range TIME
access-list 111 permit icmp any any echo time-range TIME
access-list 111 permit icmp any any echo-reply time-range TIME
access-list 111 permit icmp any any packet-too-big time-range TIME
access-list 111 permit icmp any any time-exceeded time-range TIME
access-list 111 permit icmp any any traceroute time-range TIME
access-list 111 permit icmp any any unreachable time-range TIME
access-list 111 deny ip any any
access-list 101 deny udp any eq 138 any
access-list 101 deny udp any eq 137 any
access-list 101 deny udp any eq 139 any
access-list 101 deny tcp any eq 137 any
access-list 101 deny tcp any eq 138 any
access-list 101 deny tcp any eq 139 any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any time-range TIME
access-list 101 deny ip any any
time-range TIME
periodic daily 00:00 to 23:59
line console 0
exec-timeout 120
line vty 0 4
exec-timeout 0
login local
end
Ich komme allerdings mit keinem Rechner im Netzwerk über den Router ins Internet. Woran mag das liegen?
Danke für die Hilfe...
