12-09-2008 05:42 AM - edited 03-06-2019 02:53 AM
I have a cisco 881 router directly connected to a vsat modem router which gives out ip addresses dynamically.
My problem is that i cannot ping or access internet through FE4 which is the WAN connection.The problem is how do i allow traffic to pass and access internet.I know i cannot configure frame-relay because the router does not have serial intrefaces help!!!!
12-09-2008 07:23 AM
Have you configured NAT on this router?
Can you ping the internet from the router itself?
Does the router obtain a public internet IP on its FE4 interface?
Can you post configs?
__
Edison.
12-09-2008 11:04 PM
12-09-2008 11:50 PM
I can ping the internet from the router. Just to clrify from my previous report
12-10-2008 07:22 AM
Your NAT config looks fine.
Can you drop some of the security features under Vlan 1 and see if the connection works?
zone-member security out-zone for instance.
Also, I don't see the corresponding ACL for this
ip access-group 189 in
ip access-group 189 out
In the external interface (F4), you have:
ip access-group Outside in
This ACL has no deny and a permit ip any any at the end - what's the point for this access-group?
ip access-group Inside out
Corresponding ACL is missing. Remove this access-group from the interface.
Also, try pinging the internet from the host by using IP instead of DNS and see if it works.
HTH,
__
Edison.
12-11-2008 06:52 AM
i have disabled the access-list on Vlan 1.
I am failing to disable access-list on the FE4
when i type
no ip access-group inside out-
i get a error message that- Access-group outside is not configured.
That is on both access-lists.
I can ping the server using the ip from a host machine but cannot ping the net still i guess because of the access-list on FE4.
i am and i am studying my CCNA its fun.
I waiting for you reply.
HTH
12-11-2008 07:01 AM
What server are you pinging? 4.2.2.1? If so, you are connecting to the internet just fine. The problem may be DNS related. What DNS is configured in the workstation?
__
Edison.
12-11-2008 07:08 AM
I am ping the vsat modem which i cannot reach.
But the FE4 i can reach.
The DNS that i am using is the ISP DNS add that they provided.
Do you think the access-list that i did not disable are blocking me
12-11-2008 07:12 AM
Can you ping 4.2.2.1 from the workstation? (Yes|No)
What's the default gateway set on the workstation?
As for the ACL, try create a dummy ACL in the router with the same name and remove the access-group, then remove the ACL. I never seen that error before, you should be able to remove the access-group without a corresponding ACL being configured.
__
Edison.
12-11-2008 07:17 AM
NO i cannot ping the 4.2.2.1 from the workstation.
The default gateway is my VLAN IP Address.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: