Добрый день! Имею удовольствие настраивать 881W, но не имею результата. При настройке использовал приемы описанные в данной теме.
Есть CISCO881W-GN-E-K9. Подключается к Ультранет (Москва). Адрес от провайдера получает автоматически через PPPoE. К провайдеру подключился. Во внутренней сети IP адреса раздаются по dhcp как для проводного, так и для беспроводного подключения. Но интернета во внутренней сети нет. Подскажите, пожалуйста, где ошибка?

Еще вопрос, подскажите, как улучшить данную конфигурацию (что-то добавить/удалить). Спаршиваю, т.к. опыт настройки cisco близок к нулевому.

Заранее благодарю.

Конфиг роутера:

Current configuration : 3597 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 881w
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$23k6$AHhlzmjrGtC72QniSsnu//
!
no aaa new-model
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-3842491970
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3842491970
revocation-check none
rsakeypair TP-self-signed-3842491970
!
!
crypto pki certificate chain TP-self-signed-3842491970
certificate self-signed 01
  3082023D 308201A6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 33383432 34393139 3730301E 170D3131 30323130 31333332
  32355A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38343234
  39313937 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  81009F11 949593AB 6018D4BB C6BC763C 2EE08657 0BB859E6 E3850351 12C2DF6F
  CFC64F86 24AB480B 207C503B 23A72498 372E3829 134F45CA B699E739 2288DF7D
  A95A4E7F F24B4C9C 815B6DCC C774D38B CF5A9FB3 4E2C4FA4 4D6EF37D BAFA5078
  DBFC9CEE 4265719D 584C2840 430E11A3 F3583D9C 40E54C85 2A881AD6 94E9C7E8
  3A190203 010001A3 65306330 0F060355 1D130101 FF040530 030101FF 30100603
  551D1104 09300782 05444D54 656C301F 0603551D 23041830 16801473 6B606CB0
  3C73F241 3EB60203 E0B925C7 A6ED8D30 1D060355 1D0E0416 0414736B 606CB03C
  73F2413E B60203E0 B925C7A6 ED8D300D 06092A86 4886F70D 01010405 00038181
  0003BCE7 0324E5FD E6C02E11 D53C943D E6BCB4C5 9B637460 21A37018 05A1DB28
  C743F6AD BC1BE17A C9E9E73B 5E00B075 D3EC690F 1064BC7B 8D98D031 E37A48E8
  56594AB4 1C016A71 79FA8356 2EFE39E9 3CA3F425 0330379A A2D66428 180FECC9
  3723B0B3 E13E1E9B E56902D2 8AF48A02 001B7F10 F5DC06D3 2CC036A9 235C815A 5F
        quit
ip source-route
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
!
ip dhcp pool vlan1pool
   network 192.168.2.0 255.255.255.0
   default-router 192.168.2.1
   dns-server 192.168.2.1
!
!
ip cef
no ipv6 cef
!
!
license udi pid CISCO881W-GN-E-K9 sn FCZ1448927D
!
!
username name privilege 15 password 7 13011A060E00052E262D26
!
!
!
!        
!
!        
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description $ETH-WAN$
mac-address 001d.7286.9d1a
no ip address
duplex auto
speed auto
pppoe-client dial-pool-number 1
!
interface wlan-ap0
description Service module interface to manage the embedded AP
ip unnumbered Vlan1
arp timeout 0
!
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
switchport mode trunk
!
interface Vlan1
ip address 192.168.2.1 255.255.255.0
!
interface Dialer0
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap callin
ppp chap hostname name
ppp chap password 7 040C58555C701D1D
!        
ip forward-protocol nd
ip http server
ip http secure-server
!
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
!
!
!
control-plane
!
!
line con 0
password 7 045F06120A2D4D4A04100B
login
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
line vty 0 4
login
!
scheduler max-task-time 5000
end

Кофиг точки:

Current configuration : 2456 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ap
!
enable secret 5 $1$kL0J$luapkw9A4hyIZ5d8BWwst0
!
no aaa new-model
!
!
dot11 syslog
!
dot11 ssid wifi
   vlan 1
   authentication open
   mbssid guest-mode
!
!        
!
username name privilege 15 secret 5 $1$yDZR$JnUvVYc42fbgxpOCisW1g/
username name privilege 15 secret 5 $1$OAhy$DWZE2biBoO/kpjGdSzuiA0
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 1 key 1 size 128bit 0 3B5D3C7D207E37DCEEEDD301E3 transmit-key
encryption vlan 1 mode wep mandatory
!
broadcast-key vlan 1 change 30
!
!
ssid wifi
!
antenna gain 0
mbssid
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router
no ip address
no ip route-cache
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address dhcp client-id GigabitEthernet0
no ip route-cache
!
ip default-gateway 192.168.2.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 protocol ieee
bridge 1 route ip
!
!
banner login ^CC
% Password change notice.
-----------------------------------------------------------------------

Default username/password setup on AP is cisco/cisco with privilege level 15.
It is strongly suggested that you create a new username with privilege level
15 using the following command for console security.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to
use. After you change your username/password you can turn off this message
by configuring  "no banner login" and "no banner exec" in privileged mode.

-----------------------------------------------------------------------
^C
!
line con 0
privilege level 15
login local
no activation-character
line vty 0 4
login local
!
cns dhcp
end