cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
9967
Views
0
Helpful
24
Replies

again can not connect to internet

arif48301
Level 1
Level 1

hi

Sorry to all,I changed my router and i can not again connect to internet.I have done the configuration as i did before but this time i am missing some thing there is again no internet access.

please have a look at the following configuration and see whats the problem.

Router>
Router>
Router>en
Password:
Router#sh run
Building configuration...


Current configuration : 1291 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password test
!
no aaa new-model
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1 10.10.10.10
!
ip dhcp pool test
import all
network 10.10.10.0 255.255.255.0
dns-server 80.0.163.30
default-router 10.10.10.1
!
!
multilink bundle-name authenticated
!
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password test
login
!
scheduler allocate 20000 1000
!
end

Router#

i would apperciate help.

thanks

1 Accepted Solution

Accepted Solutions

Looks like your issue is resolved for your device, problem with ping to 8.8.8.8 is located elsewhere (also try to power cycle modem, and test again).

View solution in original post

24 Replies 24

Reza Sharifi
Hall of Fame
Hall of Fame

Hi,

Can you change your access-list from

access-list 1 permit 10.10.10.0 0.0.0.255

to 

access-list 100 permit  ip 10.10.10.0 0.0.0.255 any

ip nat inside source list 100 interface FastEthernet0/0 overload

and test again?

HTH

hi

i have tried ping with source 10.10.10.1 but no reply ,the interface is up but cant get any ping.

i have done that and reload and restart my PC and laptop but its still the same.

The translations do work but no device can access.

Router#sh ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 192.168.0.33 YES DHCP up up
FastEthernet0/1 10.10.10.1 YES NVRAM up up
Serial0/0/0 unassigned YES NVRAM administratively down down
NVI0 192.168.0.33 YES unset up up

Router#ping 10.10.10.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
Router#ping 8.8.b
Router#ping 8.8.8.8 source fa0/1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.10.10.1
.....
Success rate is 0 percent (0/5)

*Jul 25 03:08:58.007: %SYS-5-CONFIG_I: Configured from console by console ip nat trans
Pro Inside global Inside local Outside local Outside global
udp 192.168.0.33:49690 10.10.10.11:49690 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:50126 10.10.10.11:50126 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:51000 10.10.10.11:51000 80.0.163.30:53 80.0.163.30:53
tcp 192.168.0.33:51456 10.10.10.11:51456 74.125.71.188:443 74.125.71.188:443
tcp 192.168.0.33:51464 10.10.10.11:51464 40.77.229.6:443 40.77.229.6:443
tcp 192.168.0.33:51465 10.10.10.11:51465 17.252.60.32:5223 17.252.60.32:5223
tcp 192.168.0.33:51466 10.10.10.11:51466 13.107.42.11:443 13.107.42.11:443
tcp 192.168.0.33:51469 10.10.10.11:51469 17.248.144.213:443 17.248.144.213:443
tcp 192.168.0.33:51475 10.10.10.11:51475 40.77.229.38:443 40.77.229.38:443
udp 192.168.0.33:51513 10.10.10.11:51513 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:52318 10.10.10.11:52318 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:53271 10.10.10.11:53271 165.254.162.243:8253 165.254.162.243:8253
udp 192.168.0.33:53750 10.10.10.11:53750 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:54140 10.10.10.11:54140 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:54277 10.10.10.11:54277 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:54849 10.10.10.11:54849 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:54863 10.10.10.11:54863 216.58.208.174:443 216.58.208.174:443
udp 192.168.0.33:54865 10.10.10.11:54865 216.58.210.36:443 216.58.210.36:443
udp 192.168.0.33:55554 10.10.10.11:55554 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:55681 10.10.10.11:55681 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:56175 10.10.10.11:56175 65.55.158.118:3544 65.55.158.118:3544
--More--

i hope it helps 

thanks

When you are on the router, can you ping 8.8.8.8?

ping 8.8.8.8

if this is successful, can you ping using the source interface

ping 8.8.8.8 source 10.10.10.1

Also, what is the output of "sh ip nat trans"?

hi

i have erased all the configs and then redone to clear up the router.

INT fa0/0 connects to my ISP modem and gets DHCP from the modem and has IP of 192.168.0.33

Int fa0/1 is my private IP of 10.10.10.1 and connects to my laptop.

I can not ping 8.8.8.8 but i can ping FQDN like bbc.co.uk

i have taken ip nat enable and left only IP nat outside .

please find the current running config along with IP nat trans and result of ping to 8.8.8.8 and then bbc.co.uk

Router#sh run
Building configuration...


Current configuration : 1261 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password test
!
no aaa new-model
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1 10.10.10.20
!
ip dhcp pool test
import all
network 10.10.10.0 255.255.255.0
dns-server 80.0.163.30
default-router 10.10.10.1
!
!
multilink bundle-name authenticated
!
!
voice-card 0
no dspfarm
!
!
archive
log config
hidekeys
!
!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
password test
login
!
scheduler allocate 20000 1000
!
end

sh ip nat trans

Router#sh ip nat trans
Pro Inside global Inside local Outside local Outside global
udp 192.168.0.33:15732 10.10.10.21:15732 80.0.163.30:53 80.0.163.30:53
tcp 192.168.0.33:54018 10.10.10.21:54018 192.168.0.18:8009 192.168.0.18:8009
tcp 192.168.0.33:54043 10.10.10.21:54043 40.77.229.36:443 40.77.229.36:443
tcp 192.168.0.33:62519 10.10.10.21:62519 17.252.12.13:5223 17.252.12.13:5223

sh ip dhcp bind

Router#sh ip dhcp bind
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
10.10.10.21 01b4.750e.dd22.1a Jul 26 2017 03:09 PM Automatic

ping to 8.8.8.8

Router#ping 8.8.8.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

ping to bbc.co.uk

Router#ping bbc.co.uk
Translating "bbc.co.uk"...domain server (194.168.4.100) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 212.58.244.23, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 24/28/32 ms

i hope that it enables you to help me.

Thanks

Typically, there is no "normal" reason for ping 8.8.8.8 to fail if ping to 194.168.4.100 was successful (typical reason for cases like this is traffic filtering or black hole routing).

Reza Sharifi asked you for results of ping 8.8.8.8 source 10.10.10.1 to check NAT, it is pointless if ping to 8.8.8.8 from WAN port is not successful. You can try ping 194.168.4.100 source 10.10.10.1 if it is successful, most likely setting of this device are OK.

You can also test traceroute to both IP addresses:
traceroute 8.8.8.8
traceroute 194.168.4.100

Hi

i tried that while connected to my ISP through there modem using CMD and ping to 8.8.8.8 fails while ping to 8.8.4.4 is ok

ping to 8.8.4.4 through 10.10.10.1 is 100 % success.

May be I need to check with my isp the reason.

thanks

Looks like your issue is resolved for your device, problem with ping to 8.8.8.8 is located elsewhere (also try to power cycle modem, and test again).

Hi

thanks to all got it working. Thanks 

Out of curiosity: how ? By putting the ISP modem in bridge mode ?

I had to uncheck the option of blocking fragment IP on modem.

Changing the modem into bridge mode didn't help.

Also I had to open ports from 1 to 65536 on my isp modem ,there is full connectivity but still ping to 8.8.8.8 doesn't work.

i hope it helps.

 Thanks 

When you do a traceroute to 8.8.8.8, where does it stop?

No idea the ping just fails,no reply from dns server.

Router#ping 8.8.8.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Router#

What about:

Router#traceroute 8.8.8.8

?

Review Cisco Networking products for a $25 gift card