02-22-2007 06:08 PM - edited 03-05-2019 02:32 PM
Good day all, my question is going to be really easy for all you experts out there, might be so easy you actually forgot since it has been such a long time for something like this. I have a cisco 806 dual ethernet router connected to a cable modem, after about 2 weeks and multiple tickets with my ISP, i got the ios upgrade to be able to pull a valid dhcp address for the ethernet1(wan) interface. But now i can not get it to do any Nat/Pat translations, i can ping out from the router fine, however from any device on the lan i cant get past the wan port on the router, can you look over my config and clue me in please.
!
! Last configuration change at 02:02:56 UTC Fri Feb 23 2007
! NVRAM config last updated at 01:38:34 UTC Fri Feb 23 2007
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 806Gate
!
no logging console
enable secret ****
enable password ********
!
username **** privilege 15 password 0 ********
ip subnet-zero
no ip routing
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool Clients
network 10.10.10.0 255.255.255.0
dns-server 65.32.1.70
default-router 10.10.10.1
!
!
!
!
interface Ethernet0
description LAN
ip address 10.10.10.1 255.255.255.0
ip nat inside
no ip route-cache
no ip mroute-cache
no cdp enable
!
interface Ethernet1
description Internet
ip address dhcp client-id Ethernet1 hostname 806Gate
ip access-group 1 in
ip nat outside
no ip route-cache
no ip mroute-cache
no cdp enable
!
ip nat inside source list 1 interface Ethernet1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet1
ip http server
ip http authentication local
!
!
access-list 1 permit 10.10.10.0 0.0.0.255
no cdp run
banner login ^C
We know where you live.... ^C
banner motd ^C
If you see the buddha, kill the buddha... ^C
!
line con 0
exec-timeout 0 0
stopbits 1
line vty 0 3
exec-timeout 0 0
password ******
login local
length 0
transport input telnet
!
scheduler max-task-time 5000
ntp clock-period 17176398
ntp server 192.*.*.209
end
Thanks for any help....
M@
02-23-2007 06:30 AM
Seems to be okay. Can u remove the ip access-group 1 in command from ur wan interface though and then test?
Cheers
Hoogen
02-23-2007 07:37 AM
removed the line as requested and retested still nothing cn get past the router.
IP nat translations and statistics show nothing.
806Gate#show ip nat translations
806Gate#show ip nat statistics
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Outside interfaces:
Ethernet1
Inside interfaces:
Ethernet0
Hits: 11 Misses: 13
Expired translations: 13
Dynamic mappings:
-- Inside Source
[Id: 2] access-list 1 interface Ethernet1 refcount 0
806Gate#
Once again any hlep is greatly appreciated.
M@
03-01-2007 01:57 PM
in your config you don't route.
so from the router you probably get everywhere, but if you try from the client you might not get very far.
no ip routing --> change this to "ip routing"
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: