Hi,
I have a small network I'm learning on and I don't know how to correctly configure a default route to the Internet to pass along to other internal routers.
I have my cablemodem connected to a 2514 which is connected to a 2600 (s0-s0) which is connected to a 2950 with some clients. I have a 2950 hanging off of the 2514 and everything works fine for those clients, just not the clients on the 2950 hanging off the 2600.
The clients off of the 2514 can get to the Internet with no problem. Clients off of the 2600 on the other hand can't do anything. When I try and do a PING it says 'Reply from 192.168.126.161: Destination net unreachable'. After two hops a tracert from a PC also says '192.168.126.161 reports: Destination net unreachable'. I don't understand why the 2514 can route to the Internet for the clients off the 2514 but not for the clients off the 2600.
I put a default route and the command 'default-information originate always' on the 2514 but still no good. I see the default route on the 2600 but it's not working. Any help would be appreciated. Here's the config from the 2514:
version 12.3
service tcp-keepalives-in
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname R1
!
enable secret 5 xxxxxxxxxxxxxxxx
!
no aaa new-model
ip subnet-zero
no ip source-route
ip cef
ip dhcp excluded-address 192.168.126.1 192.168.126.8
!
ip dhcp pool DHCPPool
import all
network 192.168.126.0 255.255.255.240
default-router 192.168.126.1
!
interface Loopback0
ip address 192.168.126.65 255.255.255.240
!
interface Ethernet0
description Outside interface
ip address dhcp
ip access-group Incoming in
ip access-group Outgoing out
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
no ip mroute-cache
ntp disable
no cdp enable
hold-queue 32 in
hold-queue 100 out
!
interface Ethernet1
description Inside interface
ip address 192.168.126.1 255.255.255.240
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
no ip mroute-cache
!
interface Serial0
ip address 192.168.126.161 255.255.255.252
encapsulation frame-relay
ip ospf network broadcast
no keepalive
clock rate 64000
cdp enable
frame-relay interface-dlci 100
!
interface Serial1
ip address 192.168.126.165 255.255.255.252
encapsulation frame-relay
ip ospf network broadcast
no keepalive
clock rate 64000
cdp enable
frame-relay interface-dlci 200
!
router ospf 1
log-adjacency-changes
network 192.168.126.0 0.0.0.255 area 0
network 192.168.163.4 0.0.0.3 area 0
default-information originate always
!
ip nat inside source list 1 interface Ethernet0 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 dhcp
!
ip access-list extended Incoming
remark Deny NetBIOS Name, Datagram and Session service
deny udp any range netbios-ns netbios-ss any
deny tcp any range 137 139 any
remark Only allow ACKed tcp packets to our network
permit tcp any xx.xx.xx.0 0.0.15.255 gt 1023 established
remark Allow DHCP replies to reach the e0 interface
permit udp any any eq bootpc
remark Allow DNS queries
permit tcp any eq domain any
permit udp any eq domain any
remark Only allow specific ICMP message type & code
permit icmp any xx.xx.xx.0 0.0.15.255 net-unreachable
permit icmp any xx.xx.xx.0 0.0.15.255 host-unreachable
permit icmp any xx.xx.xx.0 0.0.15.255 port-unreachable
permit icmp any xx.xx.xx.0 0.0.15.255 packet-too-big
permit icmp any xx.xx.xx.0 0.0.15.255 administratively-prohibited
permit icmp any xx.xx.xx.0 0.0.15.255 source-quench
permit icmp any xx.xx.xx.0 0.0.15.255 ttl-exceeded
ip access-list extended Outgoing
remark Don't allow internal hosts to send icmp
deny icmp any any
remark Only allow packets from the internal network
permit ip xx.xx.xx.0 0.0.15.255 any
access-list 1 permit 192.168.126.0 0.0.0.255
