2

There is a Cisco router configured by another IT guy with specified addresses from ISP, now the problem is that the ISP give us new net mask and default gateway addresses, so what i did was changing the following addresses

old ISP address -

ip address: 10.131.61.246

net mask: 255.255.255.252

Default : 10.131.61.245

new ISP address - 

ip address: 10.131.61.246

net mask: 255.255.240.0

Default : 10.131.48.1

Old Configuration on router

flow monitor MellaFMon

 record netflow ipv4 original-input

 exporter MellaFEX

 cache timeout active 5

!

ip source-route

ip cef

!

!

!

ip dhcp excluded-address 192.168.1.2 192.168.1.50

ip dhcp excluded-address 192.168.1.0 192.168.1.50

ip dhcp excluded-address 192.168.1.1 192.168.1.50

!

ip dhcp pool 101

 network 192.168.1.0 255.255.255.0

 default-router 192.168.1.1

 dns-server 192.168.1.4 8.8.8.8 4.2.2.2

!

ip dhcp pool WiFi

 network 192.168.10.0 255.255.255.0

 default-router 192.168.10.1

 dns-server 8.8.8.8 4.2.2.2

!

ip dhcp pool LAN

 network 192.168.40.0 255.255.255.0

 default-router 192.168.40.1

 dns-server 192.168.1.4 8.8.8.8 4.2.2.2

!

ip dhcp pool CC-Cam

 network 192.168.30.0 255.255.255.0

 default-router 192.168.30.1

 dns-server 8.8.8.8

!

!

!

interface Embedded-Service-Engine0/0

 no ip address

 shutdown

!

interface GigabitEthernet0/0

 no ip address

 ip flow ingress

 ip flow egress

 duplex auto

 speed auto

!

interface GigabitEthernet0/0.10

 description Wifi-Vlan-Int

 encapsulation dot1Q 10

 ip address 192.168.10.1 255.255.255.0

 ip flow monitor MellaFMon input

 ip flow monitor MellaFMon output

 ip nat inside

 ip virtual-reassembly in

!

interface GigabitEthernet0/0.20

 description Server-VLAN-In

 encapsulation dot1Q 1 native

 ip address 192.168.1.1 255.255.255.0

 ip flow monitor MellaFMon input

 ip flow monitor MellaFMon output

 ip nat inside

 ip virtual-reassembly in

!

interface GigabitEthernet0/0.30

 description CC-Camera-Int

 encapsulation dot1Q 30

 ip address 192.168.30.1 255.255.255.0

 ip flow monitor MellaFMon input

 ip flow monitor MellaFMon output

!

interface GigabitEthernet0/0.40

 description LAN-Int

 encapsulation dot1Q 40

 ip address 192.168.40.1 255.255.255.0

 ip flow monitor MellaFMon input

 ip flow monitor MellaFMon output

!

interface GigabitEthernet0/1

 ip address 197.156.90.82 255.255.255.248 secondary

 ip address 10.131.61.246 255.255.255.252

 ip flow monitor MellaFMon input

 ip flow monitor MellaFMon output

 ip flow ingress

 ip flow egress

 ip nat outside

 ip virtual-reassembly in

 duplex auto

 speed auto

!

ip forward-protocol nd

!

no ip http server

ip http authentication local

no ip http secure-server

!

ip nat pool Server 197.156.90.85 197.156.90.85 netmask 255.255.255.248

ip nat pool USER 197.156.90.83 197.156.90.83 netmask 255.255.255.248

ip nat pool server 197.156.90.85 197.156.90.85 netmask 255.255.255.248

ip nat pool CC-Cam 197.156.90.86 197.156.90.86 netmask 255.255.255.248

ip nat inside source list 10 pool USER overload

ip nat inside source static 192.168.1.4 197.156.90.84

ip nat inside source static 192.168.1.3 197.156.90.85

ip route 0.0.0.0 0.0.0.0 10.131.61.245

!

access-list 10 permit 192.168.10.0 0.0.0.255

access-list 10 permit 192.168.1.0 0.0.0.255

access-list 20 deny   192.168.1.1

access-list 20 deny   192.168.1.3

access-list 20 deny   192.168.1.4

access-list 20 permit 192.168.1.0 0.0.0.255

!

!

!

!

new configuration Full

ip dhcp excluded-address 192.168.1.2 192.168.1.50
ip dhcp excluded-address 192.168.1.0 192.168.1.50
ip dhcp excluded-address 192.168.1.1 192.168.1.50
!
ip dhcp pool 101
 network 192.168.1.0 255.255.255.0
 default-router 192.168.1.1
 dns-server 192.168.1.4 8.8.8.8 4.2.2.2
!
ip dhcp pool WiFi
 network 192.168.10.0 255.255.255.0
 default-router 192.168.10.1
 dns-server 8.8.8.8 4.2.2.2
!
ip dhcp pool LAN
 network 192.168.40.0 255.255.255.0
 default-router 192.168.40.1
 dns-server 192.168.1.4 8.8.8.8 4.2.2.2
!
ip dhcp pool CC-Cam
 network 192.168.30.0 255.255.255.0
 default-router 192.168.30.1
 dns-server 8.8.8.8
!
!
!
!
!
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0
 no ip address
 ip flow ingress
 ip flow egress
 duplex auto
 speed auto
!
interface GigabitEthernet0/0.10
 description Wifi-Vlan-Int
 encapsulation dot1Q 10
 ip address 192.168.10.1 255.255.255.0
 ip flow monitor MellaFMon input
 ip flow monitor MellaFMon output
 ip nat inside
 ip virtual-reassembly in
!
interface GigabitEthernet0/0.20
 description Server-VLAN-In
 encapsulation dot1Q 1 native
 ip address 192.168.1.1 255.255.255.0
 ip flow monitor MellaFMon input
 ip flow monitor MellaFMon output
 ip nat inside
 ip virtual-reassembly in
!
interface GigabitEthernet0/0.30
 description CC-Camera-Int
 encapsulation dot1Q 30
 ip address 192.168.30.1 255.255.255.0
 ip flow monitor MellaFMon input
 ip flow monitor MellaFMon output
!
interface GigabitEthernet0/0.40
 description LAN-Int
 encapsulation dot1Q 40
 ip address 192.168.40.1 255.255.255.0
 ip flow monitor MellaFMon input
 ip flow monitor MellaFMon output
!
interface GigabitEthernet0/1
 ip address 197.156.90.82 255.255.255.248 secondary
 ip address 10.131.61.246 255.255.240.0
 ip flow monitor MellaFMon input
 ip flow monitor MellaFMon output
 ip flow ingress
 ip flow egress
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
ip forward-protocol nd
!
no ip http server
ip http authentication local
no ip http secure-server
!
ip nat pool Server 197.156.90.85 197.156.90.85 netmask 255.255.255.248
ip nat pool USER 197.156.90.83 197.156.90.83 netmask 255.255.255.248
ip nat pool server 197.156.90.85 197.156.90.85 netmask 255.255.255.248
ip nat pool CC-Cam 197.156.90.86 197.156.90.86 netmask 255.255.255.248
ip nat inside source list 10 pool USER overload
ip nat inside source static 192.168.1.4 197.156.90.84
ip nat inside source static 192.168.1.3 197.156.90.85
ip route 0.0.0.0 0.0.0.0 10.131.48.1
!
access-list 10 permit 192.168.10.0 0.0.0.255
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 20 deny   192.168.1.1
access-list 20 deny   192.168.1.3
access-list 20 deny   192.168.1.4
access-list 20 permit 192.168.1.0 0.0.0.255
!
!
!
!

is there anything i have to change on the configuration ? Thanks!

Improve this question
2
  • 1
    You have a huge security hole by allowing ip source route. You should delete it from your config – Mike Pennington Apr 23 '19 at 20:44
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer. – Ron Maupin♦ Dec 15 '19 at 2:20
3

You need to change your IP route to the specified default gateway from your ISP:

IP route 0.0.0.0 0.0.0.0 10.131.48.1

Other than that, your configuration change is correct.

Improve this answer
13
  • thanks for your reply sir, i have changed ip route , but still no internet from the router. – Nebiyu Deribe Apr 23 '19 at 8:29
  • How do you perform the test? – user56700 Apr 23 '19 at 8:31
  • connect laptop to router, set ip address to obtain automatically. – Nebiyu Deribe Apr 23 '19 at 8:39
  • What port do you connect your laptop to? – user56700 Apr 23 '19 at 8:51
  • GE0/0 port of the router. – Nebiyu Deribe Apr 23 '19 at 8:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.