07-24-2017 02:08 PM - edited 03-08-2019 11:27 AM
hi
Sorry to all,I changed my router and i can not again connect to internet.I have done the configuration as i did before but this time i am missing some thing there is again no internet access.
please have a look at the following configuration and see whats the problem.
Router>
Router>
Router>en
Password:
Router#sh run
Building configuration...
Current configuration : 1291 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password test
!
no aaa new-model
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1 10.10.10.10
!
ip dhcp pool test
import all
network 10.10.10.0 255.255.255.0
dns-server 80.0.163.30
default-router 10.10.10.1
!
!
multilink bundle-name authenticated
!
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password test
login
!
scheduler allocate 20000 1000
!
end
Router#
i would apperciate help.
thanks
Solved! Go to Solution.
07-25-2017 07:30 AM
Looks like your issue is resolved for your device, problem with ping to 8.8.8.8 is located elsewhere (also try to power cycle modem, and test again).
07-24-2017 03:15 PM
Hi,
Can you change your access-list from
access-list 1 permit 10.10.10.0 0.0.0.255
to
access-list 100 permit ip 10.10.10.0 0.0.0.255 any
ip nat inside source list 100 interface FastEthernet0/0 overload
and test again?
HTH
07-24-2017 04:00 PM
hi
i have tried ping with source 10.10.10.1 but no reply ,the interface is up but cant get any ping.
i have done that and reload and restart my PC and laptop but its still the same.
The translations do work but no device can access.
Router#sh ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 192.168.0.33 YES DHCP up up
FastEthernet0/1 10.10.10.1 YES NVRAM up up
Serial0/0/0 unassigned YES NVRAM administratively down down
NVI0 192.168.0.33 YES unset up up
Router#ping 10.10.10.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
Router#ping 8.8.b
Router#ping 8.8.8.8 source fa0/1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.10.10.1
.....
Success rate is 0 percent (0/5)
*Jul 25 03:08:58.007: %SYS-5-CONFIG_I: Configured from console by console ip nat trans
Pro Inside global Inside local Outside local Outside global
udp 192.168.0.33:49690 10.10.10.11:49690 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:50126 10.10.10.11:50126 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:51000 10.10.10.11:51000 80.0.163.30:53 80.0.163.30:53
tcp 192.168.0.33:51456 10.10.10.11:51456 74.125.71.188:443 74.125.71.188:443
tcp 192.168.0.33:51464 10.10.10.11:51464 40.77.229.6:443 40.77.229.6:443
tcp 192.168.0.33:51465 10.10.10.11:51465 17.252.60.32:5223 17.252.60.32:5223
tcp 192.168.0.33:51466 10.10.10.11:51466 13.107.42.11:443 13.107.42.11:443
tcp 192.168.0.33:51469 10.10.10.11:51469 17.248.144.213:443 17.248.144.213:443
tcp 192.168.0.33:51475 10.10.10.11:51475 40.77.229.38:443 40.77.229.38:443
udp 192.168.0.33:51513 10.10.10.11:51513 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:52318 10.10.10.11:52318 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:53271 10.10.10.11:53271 165.254.162.243:8253 165.254.162.243:8253
udp 192.168.0.33:53750 10.10.10.11:53750 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:54140 10.10.10.11:54140 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:54277 10.10.10.11:54277 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:54849 10.10.10.11:54849 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:54863 10.10.10.11:54863 216.58.208.174:443 216.58.208.174:443
udp 192.168.0.33:54865 10.10.10.11:54865 216.58.210.36:443 216.58.210.36:443
udp 192.168.0.33:55554 10.10.10.11:55554 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:55681 10.10.10.11:55681 80.0.163.30:53 80.0.163.30:53
udp 192.168.0.33:56175 10.10.10.11:56175 65.55.158.118:3544 65.55.158.118:3544
--More--
i hope it helps
thanks
07-24-2017 04:00 PM
When you are on the router, can you ping 8.8.8.8?
ping 8.8.8.8
if this is successful, can you ping using the source interface
ping 8.8.8.8 source 10.10.10.1
Also, what is the output of "sh ip nat trans"?
07-25-2017 04:26 AM
hi
i have erased all the configs and then redone to clear up the router.
INT fa0/0 connects to my ISP modem and gets DHCP from the modem and has IP of 192.168.0.33
Int fa0/1 is my private IP of 10.10.10.1 and connects to my laptop.
I can not ping 8.8.8.8 but i can ping FQDN like bbc.co.uk
i have taken ip nat enable and left only IP nat outside .
please find the current running config along with IP nat trans and result of ping to 8.8.8.8 and then bbc.co.uk
Router#sh run
Building configuration...
Current configuration : 1261 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password test
!
no aaa new-model
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1 10.10.10.20
!
ip dhcp pool test
import all
network 10.10.10.0 255.255.255.0
dns-server 80.0.163.30
default-router 10.10.10.1
!
!
multilink bundle-name authenticated
!
!
voice-card 0
no dspfarm
!
!
archive
log config
hidekeys
!
!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4
password test
login
!
scheduler allocate 20000 1000
!
end
sh ip nat trans
Router#sh ip nat trans
Pro Inside global Inside local Outside local Outside global
udp 192.168.0.33:15732 10.10.10.21:15732 80.0.163.30:53 80.0.163.30:53
tcp 192.168.0.33:54018 10.10.10.21:54018 192.168.0.18:8009 192.168.0.18:8009
tcp 192.168.0.33:54043 10.10.10.21:54043 40.77.229.36:443 40.77.229.36:443
tcp 192.168.0.33:62519 10.10.10.21:62519 17.252.12.13:5223 17.252.12.13:5223
sh ip dhcp bind
Router#sh ip dhcp bind
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
10.10.10.21 01b4.750e.dd22.1a Jul 26 2017 03:09 PM Automatic
ping to 8.8.8.8
Router#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
ping to bbc.co.uk
Router#ping bbc.co.uk
Translating "bbc.co.uk"...domain server (194.168.4.100) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 212.58.244.23, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 24/28/32 ms
i hope that it enables you to help me.
Thanks
07-25-2017 06:58 AM
Typically, there is no "normal" reason for ping 8.8.8.8 to fail if ping to 194.168.4.100 was successful (typical reason for cases like this is traffic filtering or black hole routing).
Reza Sharifi asked you for results of ping 8.8.8.8 source 10.10.10.1 to check NAT, it is pointless if ping to 8.8.8.8 from WAN port is not successful. You can try ping 194.168.4.100 source 10.10.10.1 if it is successful, most likely setting of this device are OK.
You can also test traceroute to both IP addresses:
traceroute 8.8.8.8
traceroute 194.168.4.100
07-25-2017 07:16 AM
Hi
i tried that while connected to my ISP through there modem using CMD and ping to 8.8.8.8 fails while ping to 8.8.4.4 is ok
ping to 8.8.4.4 through 10.10.10.1 is 100 % success.
May be I need to check with my isp the reason.
thanks
07-25-2017 07:30 AM
Looks like your issue is resolved for your device, problem with ping to 8.8.8.8 is located elsewhere (also try to power cycle modem, and test again).
07-25-2017 11:57 AM
Hi
thanks to all got it working. Thanks
07-25-2017 01:08 PM
Out of curiosity: how ? By putting the ISP modem in bridge mode ?
07-25-2017 01:49 PM
I had to uncheck the option of blocking fragment IP on modem.
Changing the modem into bridge mode didn't help.
Also I had to open ports from 1 to 65536 on my isp modem ,there is full connectivity but still ping to 8.8.8.8 doesn't work.
i hope it helps.
Thanks
07-25-2017 01:53 PM
When you do a traceroute to 8.8.8.8, where does it stop?
07-25-2017 02:21 PM
No idea the ping just fails,no reply from dns server.
07-25-2017 02:26 PM
Router#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Router#
07-25-2017 02:31 PM
What about:
Router#traceroute 8.8.8.8
?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide