Can't get internet access

Hello,

I guess this a pretty much simple question..I have received a brand new uc520. unpacked and connected WAN por to our lan 10.0.1.0 which already have a dhcp server running on it.

By default WAN port on UC520 is configured to get and ip addrees by DHCP.

I've connected a laptop to one of the switch ports on UC520.

Im getting connected to Vlan1 with ip 192.168.10.11. default router 192.168.10.1 and dns server 63.203.35.55.

I'm just testing the UC520 since it's going to be installed somewhere else, I can dial from ext to ext. but when I try to access internet with the laptop, I cannot do it.

Question:
Do i need to do something on the configuration to make internet work?

I haven't changed anything on default configuration?

Thank you in advance for any help

0
Your rating: None

A purist, no. An IDIOT, yes.

Dear Marco,

People like yourself are the reason why my salary keeps growing bigger year after year. You keep thinking and telling your customers that the UC520 is a router. I'm sure they'll believe you. Pitty for them.

The 1861, which resembles the UC520,is a router.

- Dapunnisher

What is a router?

Dear Dapu,
It does not take much effort to find out what a router is and what is not.
I´m sure we could find some more formal places for a definition, but let´s use one that probably most of the people may find reliable, or enough, Wikipedia. While looking at the definition of router at Wikipedia, ooops, this is what it says:

"Routers connect two or more logical subnets, which do not necessarily map one-to-one to the physical interfaces of the router.[1] The term layer 3 switch often is used interchangeably with router, but switch is really a general term without a rigorous technical definition."

Pls note a layer 3 switch is rather a marketing term than a real concept.

No need to call idiot to anyone, don´t you think? I will you great success with your growing salary.

Happy to hear I help!

We classify this device as a Voice appliance, but from a strict technical standpoint, it also does routing between the LAN side and the WAN. I apologize if this sounded like something else.

Thanks,

Marcos

You need a router

The uC520 does not do routing. you need a DSL or Cable modem connected to the WAN port.

Dapunnisher, CCVP
http://www.VoipExam.com

UC500 is a router

This statement is technically incorrect. UC500 is a router. It can route between vlans and different interfaces. It doesn't support dynamic routing protocols, but it supports static routes.

You still need some sort of access device to connect to the internet, because the UC500 cannot natively terminate anything other than Ethernet (no native ADSL support, T1, ect.).

But the UC500 is a router.

Marcos

ttrentler's picture

I agree with Marcos

not just because he works for Cisco on the Uc500 team.
The UC520 is capable of static routing. Dynamic Routing protocals like EIGRP and OSPF are not available.

I don't care if Marcos' real

I don't care if Marcos' real identity is John Chambers. Just because he works for Cisco doesn't make him the athority. I'm not saying that I am any more authorised to make such a claim either.

I've worked with TAC engineers who are supposed to be "experts" yet they were as dumb as rocks! I won't name any names, but one TAC engineer told me to unplug my firewall because "Firewalls block stuff." LOL!!! We were troubleshooting a PTP T1 circuit.

Have you ever opened a TAC case and be fortunate enough to get an engineer in Austrailia? Ha! My dog knows more about VoIP then they do. hehe.

ttrentler's picture

ok but the UC520 does route.

ok but the UC520 does route.

MArcos, What you are

MArcos,

What you are describing is Layer 3 switching. I will correct myself by saying that the UC520 is not a WAN router.

- Dapunnisher, CCVP.

What a great topic

If we terminate a connection with an optional WAN card, is there a card or serivce in the UC500 that can dynamically allocate the bandwidth (so we don't have to buy a Cisco IAD).

Okie dokie

Not to sound like a purist, but when a packet goes from interface VLan 100 or BVI100 to the Fastethernet 0/0 (WAN) interface, the UC500 is routing, ergo, it is a router.

WOW!...I guess Cisco will

WOW!...I guess Cisco will give anyone a CCVP these days.

The UC520 is absolutely a router! It routes between the F0/0 interface, the service-module, between loopback interfaces, VLAN interfaces, BVI's, and will route to any IP network that I point it to. The UC520 can route between all of these layer 3 interfaces, and to call it anything BUT a router, is just silly and uneducated.

This comment "The uC520 does not do routing. you need a DSL or Cable modem connected to the WAN port." A DSL modem or cable modem has nothing to do with routing. Yes, you need a "modem" to handoff the cable or DSL pairs to an ethernet interface that is compatable to your UC520, but the UC520 can and will do the routing. Case in point - I just installed a UC520 that used a Bridged DSL modem. Bridged = L2, no routing. The UC520 is configured with the PPOE tied to the F0/0 port and handles ALL the routing to the ISP. The UC520 is a router.

Regarding Marcos' comment about routing between VLANs. The proper term for that would be "intervlan routing", not layer 3 switching, unless the switching is actually done in hardware versus a software process in the UC520. The biggest difference between a router and a L3 switch is that in a router the routing at layer 3 takes place in a software process where in a switch, the switching at layer 3 is a funtion of physical hardware. For that simple reason, Layer 3 switches are faster and support greater throughput. So to comment on the gentleman that stated it was all marketing, I can assure that it is much more than simple marketing hype, there is a difference.

Have a great day!

Gee Wiz....I've configured

I'm glad there is actually some fire brewing on this board! It was getting pretty boaring.

Gee Wiz....I've configured PPPoE authentication on ASAs.....guess that makes them a router too!!! Boy! Have you shed the light on network device deffinitions. What a fool I am, all this time thinking that an ASA is a firewall/VPN concentrator. But then again, the UC520 is a firewall/VPN concentrator too! Now i'm totally confused?? I better give my CCVP back to Cisco because I OBVIOUSLY have no clue what I'm talking about!

So my customer has a small branch office and needs a PTP connection back to the home office over their MPLS cloud. Hmmm.. I can sell them a UC520 because, by your deffinition it's a router! But wait, UC520s don't support WICs??

Darn you Cisco and your crazy network contraptions!

I dare you to post on the NetPro forums or on Gassamer Threads that a UC520 is a router. I'm sure they could all use a good laugh! HaHa!

Here is Cisco's official

Here is Cisco's official deffinition of a Router:

1. An interface device between two networks that selects the best route even if there are several networks between the originating network and the destination.

2. A device that provides network management capabilities (e.g., load balancing, network partitioning, usage statistics, communications priority and troubleshooting tools) that allow network managers to detect and correct problems.

3. An intelligent device that forwards data packets from one local area network (LAN) to another and that selects the most expedient route based on traffic load, line speeds, costs, or network failures.

http://www.cisco.com/univercd/cc/td/doc/product/voice/evbugl4.htm#xtocid...

Check faulty DNS

Assuming that you don't have any other connectivity problem and that you can ping outside IP's by number and not name, you can quickly go into the UC500 CLI and change that DNS server in the DHCP pool and put your own (the current IP is known to fail).

Telnet to 192.168.10.1

Login using you username/password - cisco/cisco is the default

enter enable mode (if not there already) by typing "enable"

UC500#conf t
Enter configuration commands, one per line. End with CNTL/Z.
UC500(config)#ip dhcp pool data
UC500(dhcp-config)#no dns-server 63.203.35.55
UC500(dhcp-config)#dns-server x.x.x.x

x.x.x.x is your new DNS server

UC500(dhcp-config)#exit
UC500#wr mem

The release/renew your IP on your computer and try again.

Marcos

Actually I do not have any

Actually I do not have any conectivity at all, however I tried what you said and still the same.

Just for you to remember, I'm trying to connect the uc520 to an existing lan with a dhcp server, I'm using the wan port on uc520 to connect to my current lan switch, I'm expecting to get and ip address from my current lan dhcp (please correct me if im wrong).

current lan network: 10.0.1.0
current lan dhcp ip: 10.0.1.1

uc520 vlan: 10.1.1.0

uc520 vlan: 192.168.10.0

I also run a show int this is the result

UC520#show int fast0/0
FastEthernet0/0 is up, line protocol is up
Hardware is PQII_PRO_UEC, address is 001e.1373.5f20 (bia 001e.1373.5f20)
Description: $FW_OUTSIDE$
Internet address will be negotiated using DHCP
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:41, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 3000 bits/sec, 4 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
7854 packets input, 674694 bytes
Received 4842 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
237 packets output, 111566 bytes, 0 underruns
0 output errors, 0 collisions, 23 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out

thank you.

Alfonso

Remove the WAN ACL

The out of the box config has an access-list on the WAN F0/0 interface, probably ACL 104. Remove that ACL, it specifically blocks packets from private address space from entering on F0/0. The LAN of your existing network would fall into this category.

After that it should pull DHCP and work fine. The UC520 will NAT whatever is behind it, so there should be any need to do anything else if it was pull all of the DHCP options correctly.

www.ketchumits.com

Stab in the Dark.

You may also want to check the return route. Is there a route on your internet router to the 192.168.10.0 subnet? Perhaps you need to tell your existing internet router that there is an entirely new subnet range(s) behind the UC500?

Cheer

Darryl

Need debug

Enable "debug dhcp" and then do a "shut"/"no shut" under FE0/0 to see what's happening.

Thanks,

marcos

jnikolatos's picture

I Think his NAT is the issue.

I Think his NAT is the issue. I bet he removed NAT inside and Outside statements or they are missing. Can you ping to an external address from INSIDE the Command Line interface.. I bet you can... If you can and your PC can not (and is getting all the correct IP information) then you have a NAT issue.

Listen from inside the CLI type

show IP nat trans *

Can you see any translations?

Also type

Clear IP NAT trans

see if your internet works.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.