07-20-2017 06:54 AM - edited 03-08-2019 11:24 AM
Hello,
I would like some help with 2801. I can ping from router e.g. 8.8.8.8 but PC's
doesn't have internet and they can't ping e.g 8.8.8.8.
I think the problem is with nat and access lists and I cant find it.
I have the 2801 as second router connected to main from fe0/0. I can ping the
main router (172.20.0.1/21).
fe0/1 is for local lan (192.168.100.254/24).
Here is my setup...
Current configuration : 1314 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname XXXXXXX
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable secret 5 $1$9h9a$j0J3TS8EUZaI/zLH03EK//
enable password XXXXXXXX
!
no aaa new-model
no network-clock-participate wic 1
ip source-route
!
!
!
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
archive
log config
hidekeys
!
!
controller E1 0/1/0
shutdown
!
!
!
!
!
interface FastEthernet0/0
description wan.interface
ip address 172.20.0.6 255.255.248.0
ip nat outside
ip virtual-reassembly
speed auto
half-duplex
no mop enabled
!
interface FastEthernet0/1
description local.interface
ip address 192.168.100.254 255.255.255.0
ip nat inside
ip virtual-reassembly
speed auto
half-duplex
no mop enabled
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 172.20.0.1
!
!
no ip http server
ip nat inside source list nat interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255
dialer-list 1 protocol ip permit
disable-eadi
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
line aux 0
line vty 0 4
password XXXXXXXX
login
!
scheduler allocate 20000 1000
Any suggestions what to fix please.
Thank you.
Solved! Go to Solution.
07-20-2017 07:06 AM
Hi,
Can you change your config to refer to to the access list number?
ip nat inside source list nat interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255
to
ip nat inside source list 10 interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255
and test again?
HTH
07-20-2017 07:06 AM
Hi,
Can you change your config to refer to to the access list number?
ip nat inside source list nat interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255
to
ip nat inside source list 10 interface FastEthernet0/0 overload
!
access-list 10 permit 192.168.100.0 0.0.0.255
and test again?
HTH
07-20-2017 07:20 AM
Hello,
Thanks for your replay.
I works now...
I tested using static ip's in 3 pc's and all have internet.
Thanks a lot
07-20-2017 07:26 AM
Hi,
Glad to know its all working for you.
Good Luck!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide