cisco 837 config help needed

I just recently bought a 837 (with IOS 12.3 (2) ) off ebay, as new, boxed with all leads manuals etc. I thought I would get it running initially via the CRWS but It won't play with Sun's Java and Firefox ( I only run Linux) and the SDM will only run on Windows so it is IOS or nothing. I have been trying different configs via the console lead and minicom but it looks a steep learning curve. Could some kind soul out there let me have a copy of a simple working config for my 837 (I can edit for my ISP) to get me online.

thanks

Hi
How do you want the router set up? NAT or NON-NAT

Ian

Hi Ian

Non NAT I think. my other router is set to SUA as I only have one public WAN address, is that one or none. I had got further than I thought when I last posted, the config I put in almost got me online, I could ping the router and the ADSL was up but I think I have the chap password bit wrong so couldn't connect to my ISP. I have only just got back to my PC so will now give it another go.

Yes, small flaw that incompatibility with certain types of Java.

Now for the long post:

version 12.3
no service pad
service timestamps debug uptime
service timestamps log datetime localtime

!
hostname panhandle
!
boot-start-marker
boot-end-marker
!
no logging buffered
no logging console
no logging monitor
!

clock timezone GMT 0
clock summer-time BST recurring last Sun Mar 2:00 last Sun Oct 2:00
no aaa new-model
ip subnet-zero
!
!
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool CLIENT
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 212.23.3.100 212.23.6.100
lease 0 2
!
!
ip inspect name myfw cuseeme timeout 3600
ip inspect name myfw ftp timeout 3600
ip inspect name myfw rcmd timeout 3600
ip inspect name myfw realaudio timeout 3600
ip inspect name myfw smtp timeout 3600
ip inspect name myfw tftp timeout 30
ip inspect name myfw udp timeout 15
ip inspect name myfw tcp timeout 3600
ip inspect name myfw h323 timeout 3600
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
ip address 192.168.1.200 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip mroute-cache
hold-queue 100 out
!
interface ATM0
no ip address
no ip mroute-cache
atm vc-per-vp 64
no atm ilmi-keepalive
dsl operating-mode auto
pvc 0/38
oam-pvc 0
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
interface Dialer0
no ip address
!
interface Dialer1
ip address negotiated
ip access-group 111 in
ip nat outside
ip inspect myfw out
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp chap hostname *ISP username*
ppp chap password *ISP password*
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
ip http authentication local
ip http secure-server
!
ip nat inside source list 1 interface Dialer1 overload
ip nat inside source list 102 interface Dialer1 overload
!
access-list 23 permit 192.168.1.0 0.0.0.255
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any traceroute
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq domain any
access-list 111 permit udp any any eq ntp
access-list 111 deny tcp any any eq 139
access-list 111 deny udp any any eq netbios-ns
access-list 111 deny udp any any eq netbios-dgm
access-list 111 deny tcp any any eq 445
access-list 111 deny ip any any log
dialer-list 1 protocol ip permit
!
!
control-plane
!
!
line con 0
password *console password here*
login
no modem enable
transport preferred all
transport output all
stopbits 1
line aux 0
transport preferred all
transport output all
line vty 0 4
access-class 23 in
exec-timeout 120 0
password *telnet password here*
login local
length 0
transport preferred all
transport input all
transport output all
!
scheduler max-task-time 5000
ntp clock-period 17179841
ntp server 158.43.128.33 *change to your isp's NTP server*
sntp broadcast client
end

Should get you up and running. Would be best to erase any existing config before copy and paste.

Thanks Dave,

I had edited your config and pasted in at the config terminal prompt having deleted the old one from nvram first, done CTRL-Z to save it and was doing copy running-config startup-config only to find I had accepted a command to delete the flash, (minicom is a bit slow and I had hit return a couple of times) so now no IOS. A minor problem with most routers but a big problem with Cisco proprietary lock down. This was the fifth time over the last couple of days I had pasted a config and the other times it had gone OK, with no offers to delete the OS, such is life.

OOP's not a good start. Have you managed to get a new IOS ??

Hi Dave,

Yes I have got another IOS but having problems installing it through the console although I have found a much better terminal with CuteCom. It wont connect to the modem any faster than 9600 ( tried lots of speeds) and I get the following error message when trying to install the image.

rommon 5 > xmodem -c C837-k9o3y6-Mz_20122-13_20Zh2.bin
Do not start the sending program yet...
File size Checksum File name
3313 bytes (0xcf1) 0x6355 startupconfig

WARNING: All existing data in bootflash will be lost!
Invoke this application only for disaster recovery.
Do you wish to continue? y/n [n]: y
Ready to receive file C837-k9o3y6-Mz_20122-13_20Zh2.bin
CCCCCCCCCC\0x18\0x18\0x18\0x18Download Complete!

Timeout waiting for data - aborting download...
rommon 6 >

Next I will try setting up an tftp server.

Edited by titan (Thu 27-Sep-07 21:16:33)

You can specify the terminal speed at the RMon prompt for IOS recovery, make the whole thing a bit faster.

A guide can be found here.Ignore the fact it's for a 2600, one size fits all for most Cisco kit.

Cheers Dave but it password access only, looks like it might have been interesting.

Sorry was logged in to cisco's site. It's freely available here .