cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
172
Views
5
Helpful
3
Replies

NAT and Access Lists help

Katsikantais
Level 1
Level 1

Hello,

I would like some help with 2801. I can ping from router e.g. 8.8.8.8 but PC's
doesn't have internet and they can't ping e.g 8.8.8.8.
I think the problem is with nat and access lists and I cant find it.

I have the 2801 as second router connected to main from fe0/0. I can ping the
main router (172.20.0.1/21).

fe0/1 is for local lan (192.168.100.254/24).

Here is my setup...

Current configuration : 1314 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname XXXXXXX
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable secret 5 $1$9h9a$j0J3TS8EUZaI/zLH03EK//
enable password XXXXXXXX
!
no aaa new-model
no network-clock-participate wic 1
ip source-route
!
!
!
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
archive
log config
hidekeys
!
!
controller E1 0/1/0
shutdown
!
!
!
!
!
interface FastEthernet0/0
description wan.interface
ip address 172.20.0.6 255.255.248.0
ip nat outside
ip virtual-reassembly
speed auto
half-duplex
no mop enabled
!
interface FastEthernet0/1
description local.interface
ip address 192.168.100.254 255.255.255.0
ip nat inside
ip virtual-reassembly
speed auto
half-duplex
no mop enabled
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 172.20.0.1
!
!
no ip http server
ip nat inside source list nat interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255
dialer-list 1 protocol ip permit
disable-eadi
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
line aux 0
line vty 0 4
password XXXXXXXX
login
!
scheduler allocate 20000 1000

Any suggestions what to fix please.

Thank you.

1 Accepted Solution

Accepted Solutions

Reza Sharifi
Hall of Fame
Hall of Fame

Hi,

Can you change your config to refer to to the access list number?

ip nat inside source list nat interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255

to

ip nat inside source list 10 interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255

and test again?

HTH

View solution in original post

3 Replies 3

Reza Sharifi
Hall of Fame
Hall of Fame

Hi,

Can you change your config to refer to to the access list number?

ip nat inside source list nat interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255

to

ip nat inside source list 10 interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255

and test again?

HTH

Hello,

Thanks for your replay.

I works now...
I tested using static ip's in 3 pc's and all have internet.

Thanks a lot

Hi,

Glad to know its all working for you.

Good Luck!

Review Cisco Networking products for a $25 gift card