Two things:
1) I don't see an access-list 1 in the config, but it's referenced in the
statement "ip nat inside source list 1 interface Dialer1"
2) Any time I see something work once and then fail, I turn off route
caching. "no ip route-cache" on Dialer1 might help you find the real
problem.
Rodgers Moore
"Hai Xu" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi,
>
> My friend built a network like:
>
> [Inside Lan192.168.1.0/24]---cisco2620---ISDN--[Outside]
>
> When he ping sites outside, the first packet can reach, but the
> packets follow will fail to go out. The records in NAT table is:
>
> inside global 61.133.134.148:256
> inside local 192.168.1.1:256
> outside local 202.108.41.2:256
> outside global 202.108.41.2:256
>
>
>
>
> I cann't help him. So I ask
> help here.
>
>
> His configure file is:
>
> service timestamps debug uptime
> service timestamps log uptime
> service password-encryption
> no service tcp-small-servers
> no service udp-small-servers
> hostname c2620
> !
> enable password 54jfdj
> !
> no ip name-server
> !
> isdn switch-type basic-5ess
> !
> ip subnet-zero
> no ip domain-lookup
> ip routing
> !
> interface Dialer 1
> description connected to Internet
> ip address negotiated
> ip nat outside
> no ip split-horizon
> encapsulation ppp
> dialer in-band
> dialer idle-timeout 300
> dialer string 163
> dialer hold-queue 10
> dialer-group 1
> ppp authentication chap pap callin
> ppp chap hostname "163"
> ppp chap password "163"
> ppp pap sent-username "163" password "163"
> ppp multilink
> no cdp enable
> !
> interface Ethernet 0
> no shutdown
> description connected to EthernetLAN
> ip address 192.168.1.254
> ip nat inside
> keepalive 10
> !
> interface BRI 0
> no shutdown
> description connected to Internet
> no ip address
> ip nat outside
> dialer rotary-group 1
> !
> !
> ! Dialer Control List 1
> !
> dialer-list 1 protocol ip permit
> !
> ! Dynamic NAT
> !
>
> ip nat translation timeout 86400
> ip nat translation tcp-timeout 86400
> ip nat translation udp-timeout 300
> ip nat translation dns-timeout 60
> ip nat translation finrst-timeout 60
> ip nat inside source list 1 interface Dialer 1 overload
> !
> router rip
> version 2
> network 192.168.1.0
> passive-interface Dialer 1
> no auto-summary
> !
> !
> ip classless
> !
> ! IP Static Routes
> ip route 0.0.0.0 0.0.0.0 Dialer 1
> no ip http server
> snmp-server community public RO
> no snmp-server location
> no snmp-server contact
> !
>
>
>
> Xu,Hai CCNA
> Network Center, SysAdmin
> Univ. of Sci. & Tech. of China
>
>
>
> ___________________________________
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
