routing issues 3550 ---> 2600 --->internet router????

[johnsont]

I can't seem to figure out what i am missing here..

2600 is set to DMZ on the AT&T gateway.

Devices on the switch pull IP from dhcp pool on server.

     7960 Phones pull from 192.168.10.0

     PC pulls from 192.168.20.0

PC can ping 192.168.20.1, 192.168.10.1, and other devices on the 10.0 subnet as well so vlan routing is taking place.
PC can also ping 10.232.1.20 (the interface on the 2600 uplinked to the AT&T device)

However, I am not able to ping from the PC to the other end of that link (10.232.1.1) Or any devices on that subnet
or the upper end of the 10.232.1.0/26 subnet. I am not able to ping anything beyond the 10.232.1.20 link even
though the router is sitting in the DMZ..

Now, from the router I am able to ping 10.232.1.1, and 10.232.1.61, I can even ping sites on the internet via name resolution.
I can also ping anything on the vlan 10 or 20 on the switch of course.

So, it appears that any traffic originating from the switch is getting blocked at 10.232.1.20.

I know it is something really dumb, I just need a fresh set of eyes to show me

Configs attached.

[thomas.satafer.fan]

which router does 10.232.1.0/24 network attach to? and what't the ip address of that router?

make sure the router to which 10.232.1.0/24 network attached is running rip and receive rip routes from 2651 correctly.

[siddhartham]

can you post the traceroute ouputs from the router, switch and PC to 10.232.1.1 ip address and also the output of sh ip route on the router.

[Richard Burts · Accepted solution]

I have looked at the router config that was posted. I see ip nat inside and ip nat outside configured on interfaces. But I do not see any ip nat commands to do the address translation. Without address translation the private addresses within your network can not successfully get to the internet. Whe you configure the right commands to do the address translation then I believe that it will work.

HTH

Rick