Cisco 837 Broadband Connection Problems.

Thanks for your advice, I never thought of that. It is set at the standard 1492 at the moment. But I am still a bit concerned as the ADSL modem I used worked perfectly but it may not have had a mtu restriction programmed into that.

Thanks, Jim

Hi.

I'm no expert but it sounds like a problem I had with an old 4500 I used for ADSL. It was an MTU size thing. I made it smaller (1394 I think) and it work. The way I found it was with windows ping and changing the MTU size till it worked consistantly. hth.

Hi,

You dont have CEF enabled by any chance?

Its been known to have some issues in certain IOS versions

If it is try and disable as a test "no ip cef" in config mode.

Post your config if you can.

Regards,

Rob

check the ios version for bugs, or upgrade the ios version... and as RobO stated, post your config.

HTH

Okay, I have the config here, and CEF is enabled. I will take this out, and see how it goes. I have taken out the passwords and the adsl username, just for security reasons. At the moment this config shows CEF as enabled.

Thanks, Jim

sh run Building configuration...

Current configuration : 4483 bytes ! version 12.3 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers ! hostname dubborouter ! logging buffered 51200 warnings enable secret 5 $1$s49K$YkPY7qd8XwCOmm22kb/dP/ ! username dubborouter privilege 15 password 7 username CRWS_Sangeetha privilege 15 password 7 no aaa new-model ip subnet-zero no ip source-route --More--  ip tcp synwait-time 10 ip name-server 139.134.5.51 ip name-server 203.12.160.35 ! ! no ip bootp server ip cef ip inspect name DEFAULT100 cuseeme ip inspect name DEFAULT100 ftp ip inspect name DEFAULT100 h323 ip inspect name DEFAULT100 icmp ip inspect name DEFAULT100 netshow ip inspect name DEFAULT100 rcmd ip inspect name DEFAULT100 realaudio ip inspect name DEFAULT100 rtsp ip inspect name DEFAULT100 smtp ip inspect name DEFAULT100 sqlnet ip inspect name DEFAULT100 streamworks ip inspect name DEFAULT100 tftp ip inspect name DEFAULT100 tcp ip inspect name DEFAULT100 udp ip inspect name DEFAULT100 vdolive ip audit notify log --More--  ip audit po max-events 100 no ftp-server write-enable ! ! ! ! ! ! ! interface Null0 no ip unreachables ! interface Ethernet0 description $ETH-LAN$$FW_INSIDE$ ip address 192.168.1.1 255.255.255.0 ip access-group 100 in no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip route-cache flow ip tcp adjust-mss 1452 no cdp enable --More--   hold-queue 100 out ! interface ATM0 no ip address no ip redirects no ip unreachables no ip proxy-arp ip route-cache flow atm vc-per-vp 64 no atm ilmi-keepalive dsl operating-mode auto ! interface ATM0.3 point-to-point no ip redirects no ip unreachables no ip proxy-arp pvc 8/35 pppoe-client dial-pool-number 1 ! ! interface FastEthernet1 no ip address duplex auto --More--   speed auto ! interface FastEthernet2 no ip address duplex auto speed auto ! interface FastEthernet3 no ip address duplex auto speed auto ! interface FastEthernet4 no ip address duplex auto speed auto ! interface Dialer3 description $FW_OUTSIDE$ ip address negotiated ip access-group 101 in no ip redirects no ip unreachables --More--   no ip proxy-arp ip mtu 1472 ip nat outside ip inspect DEFAULT100 out encapsulation ppp ip route-cache flow dialer pool 1 dialer-group 1 ppp authentication chap callin ppp chap hostname ppp chap password 7 ! ip nat inside source list 1 interface Dialer3 overload ip classless ip route 0.0.0.0 0.0.0.0 Dialer3 ip http server ip http access-class 2 ip http authentication local ip http secure-server ! access-list 1 remark INSIDE_IF=Ethernet0 access-list 1 remark SDM_ACL Category=2 access-list 1 permit 192.168.1.0 0.0.0.255 --More--  access-list 2 remark HTTP Access-class list access-list 2 remark SDM_ACL Category=1 access-list 2 permit 192.168.1.0 0.0.0.255 access-list 2 deny any access-list 23 remark SDM_ACL Category=17 access-list 23 permit 192.168.1.0 0.0.0.255 access-list 100 remark auto generated by SDM firewall configuration access-list 100 remark SDM_ACL Category=1 access-list 100 deny ip host 255.255.255.255 any access-list 100 deny ip 127.0.0.0 0.255.255.255 any access-list 100 permit ip any any access-list 101 remark auto generated by SDM firewall configuration access-list 101 remark SDM_ACL Category=1 access-list 101 permit udp host 203.12.160.35 eq domain any access-list 101 permit udp host 139.134.5.51 eq domain any access-list 101 deny ip 192.168.1.0 0.0.0.255 any access-list 101 permit icmp any any echo-reply access-list 101 permit icmp any any time-exceeded access-list 101 permit icmp any any unreachable access-list 101 deny ip 10.0.0.0 0.255.255.255 any access-list 101 deny ip 172.16.0.0 0.15.255.255 any access-list 101 deny ip 192.168.0.0 0.0.255.255 any access-list 101 deny ip 127.0.0.0 0.255.255.255 any --More--  access-list 101 deny ip host

255.255.255.255 any access-list 101 deny ip host 0.0.0.0 any access-list 101 deny ip any any log dialer-list 1 protocol ip permit no cdp run banner login ^^C ! line con 0 login local no modem enable transport output telnet stopbits 1 line aux 0 login local transport output telnet line vty 0 4 access-class 23 in privilege level 15 login local length 0 transport input telnet ssh ! scheduler max-task-time 5000 --More--  scheduler interval 500 ! end

router#

Diesel wrote:

Hi Jim,

Might be worth a shot, but I could be totally wrong!

I notice you have netflow switching enabled on all interfaces - are you using it?

Disable for testing purposes on all the interfaces:

int X no ip route-cache flow ip route-cache (fast switching)

Hope this helps,

Rob

No that didn't work, I am going to see if the client can replace his router as the router is only a couple of months old.

Thanks, Jim

RobO wrote: