cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
569
Views
0
Helpful
18
Replies

unable to ping internet sites Via Wireless Router

mahesh18
Level 6
Level 6

Hi Everyone,

Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0              unassigned      YES unset  up                    down   
FastEthernet1              unassigned      YES unset  up                    down   
FastEthernet2              unassigned      YES unset  up                    down   
FastEthernet3              unassigned      YES unset  up                    down   
FastEthernet4              68.145.141.25   YES DHCP   up                    up     
NVI0                       unassigned      YES unset  administratively down down   
Vlan1                      10.20.30.1      YES NVRAM  up                    up     
Wlan-GigabitEthernet0      unassigned      YES unset  up                    up     
wlan-ap0                   2.2.2.2         YES NVRAM  up                    up

I can ping all the sites from Router but not from PC connected to Wifi Router.

ping 4.2.2.2 source 10.20.30.2

% Invalid source address- IP address not on any of our up interfaces

ping 4.2.2.2 source 10.20.30.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 10.20.30.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 60/60/64 ms

I have attached the Cisco 881w config.

Regards

MAhesh

18 Replies 18

Reza Sharifi
Hall of Fame
Hall of Fame

Hi Mahesh,

Looking at your output and config, you are sourcing the ping  from10.20.30.2 but your router does not have an interface with that IP.  The ping works correctly when you source it from 10.20.30.1 and that is because the router has on interface with this IP.

What is the subnet for wireless?

I see below in your config.  What is that for?

interface wlan-ap0
 ip address 2.2.2.2 255.255.255.255

HTH

Hi Reza,

I try from source IP 10.20.30.101 same thing.

Subnet for wifi is 10.20.30.0/24

it has dhcp pool on router.

Regards

Mahesh

Hi Mahesh,

If you are pinging from the router, you can only source it from 10.20.30.1, because that is the only IP from that segment on the router.  10.20.30.101 is not on the router.  From you config

interface Vlan1
 ip address 10.20.30.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in

HTH

This one is router with built in AP.

Ok, but there is no interface with the other IPs you are sourcing from.

Reza

I was reading on internet that we can assign any IP to

interface wlan-ap0 ip address 2.2.2.2 255.255.255.255

But seems it needs IP in the subnet range 10.20.30.x

As this is the IP for AP management.

I will try to change the AP IP to 10.20.30.3/24 and then test it.

Regards

MAhesh

That probably will not work because you would be assigning the same subnet to 2 different interfaces and routers will not let you do that. How about a new subnet for wireless interface like 10.20.40.0/24

HTH

tested with earlier 10.20.30.5 same thing.

If I use subnet 10.20.40.0/24  but dhcp pool in router is for 10.20.30.0?

You would need to create a second scope for 10.20.40.0 to server wireless.

You also need to add

ip nat inside

and also add the subnet to the access list for NAT
permit ip 10.20.40.0 0.0.0.255 any log
ip dhcp excluded-address 10.20.40.1 10.20.30.99
!
ip dhcp pool myDHCPpoo2
 import all
 network 10.20.40.0 255.255.255.0
 default-router 10.20.40.1 
 dns-server 64.59.135.133 
 lease 10

HTH

Hi Reza,

I put the new config with management and user wifi vlan

still same thing.

HEre is config

Building configuration...

Current configuration : 4180 bytes
!
! Last configuration change at 07:59:30 MST Fri Dec 23 2016
! NVRAM config last updated at 19:04:01 MST Thu Dec 22 2016 by mintoo18
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 881w
!
boot-start-marker
boot-end-marker
!
!

!
no aaa new-model
clock timezone MST -7 0
clock summer-time MST recurring
service-module wlan-ap 0 bootimage autonomous
!
crypto pki trustpoint TP-self-signed-2340310586
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2340310586
 revocation-check none
 rsakeypair TP-self-signed-2340310586
!
!
crypto pki certificate chain TP-self-signed-2340310586
 certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32333430 33313035 3836301E 170D3136 31323232 31333331
  32365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 33343033
  31303538 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100A6F0 15961909 8244145B 3F37E210 5BF87693 22E0B59D 883A89EF EA453E76
  2442DAC7 1309607E B4626CC7 74D882EB B608D0F1 D84C3B01 A47344CD C0B680EB
  4F0761C3 6868DAB2 5F6B25A0 91395557 970DD494 AD7B0858 FABF0D4D 05A515B7
  DD515865 599CAEE7 653ABF16 6CC38495 D67C3BA6 80FB2094 229EF090 F5C7F26D
  0BB50203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
  551D2304 18301680 145C1C79 627C8A03 B886ADF7 46551ECC 534B3A50 D6301D06
  03551D0E 04160414 5C1C7962 7C8A03B8 86ADF746 551ECC53 4B3A50D6 300D0609
  2A864886 F70D0101 05050003 8181000B 683143BE B48D80AC 8BFEC6D4 B00297FE
  3299922D BF66A2F3 C3F1FC23 2858B941 3769B966 3F622D7A 6C72DF98 AE9CCC1C
  971894D9 A8E77C3B 24C6678D 201DFACA FED67694 CC15DA7F ABE8ABE1 F1786524
  9E53A40D 58CAC6BE D564C6A0 3938EEFF F804A0D4 3FA70880 E58A43F0 B7FF003C
  9630F0F5 F8056442 173D2C19 393D55
   quit
!
!
!
!
!
!
!
!


!
ip dhcp excluded-address 10.1.10.254
!
ip dhcp pool vlan10-wifi
 network 10.1.10.0 255.255.255.0
 default-router 10.1.10.254
 dns-server 64.59.135.133
 lease 10
!
!
!
ip domain name mahesh.com
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C881W-A-K9 sn FTX1724839K
!
!
!
no spanning-tree vlan 1

!
!
!
!
!
ip ssh time-out 60
ip ssh version 2
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
 no ip address
!
interface FastEthernet1
 no ip address
!
interface FastEthernet2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface FastEthernet4
 ip address dhcp
 ip access-group NAT_ACL out
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface Wlan-GigabitEthernet0
 description Internal switch interface connecting to the embedded AP
 switchport mode trunk
 no ip address
!
interface wlan-ap0
 ip address 2.2.2.2 255.255.255.255
!
interface Vlan1
 ip address 10.1.1.254 255.255.255.0
 ip virtual-reassembly in
!
interface Vlan10
 ip address 10.1.10.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
ip forward-protocol nd
no ip http server
ip http secure-server
!
!
ip nat inside source list NAT_ACL interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 68.145.140.1
ip route 0.0.0.0 0.0.0.0 dhcp
!
ip access-list extended NAT_ACL
 permit ip 10.1.10.0 0.0.0.255 any log
!
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
!
line con 0
 privilege level 15
 login local
 no modem enable
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport input all
 stopbits 1
line vty 0 4
 privilege level 15
 login local
 transport input ssh
 transport output telnet ssh
line vty 5 15
 privilege level 15
 login local
 transport input ssh
 transport output telnet ssh
!
scheduler allocate 20000 1000
ntp server 128.100.56.135
!
!
end

Where 10.1.10.2 was my PC  IP

I was unable at add the wireshark capture

but it shows source 10.1.10.254 to destination 10.1.10.2 destination unreachable

communication administratively filtered

 

Hi Mahesh,

Are you following this guide to configure the wireless?

Are you able to logon to ap0 interface?

Have you tried using a static IP?

http://www.cisco.com/c/en/us/td/docs/routers/access/800/software/configuration/guide/SCG800Guide/SCG800_Guide_BookMap_chapter_01001.html#wp1061918

HTH

Hi Reza,

I followed this url now

https://networklessons.com/cisco/cisco-1941w-wireless-configuration-example/

I do not think static IP will make any difference.

Yes I can log onto AP interface.

Regards

MAhesh

Ok, that is good link too.

Is vlan 10 operational?

"sh int vlan 10"

or

sh ip int brie vlan10

Also, on the AP side, have you configured the correct interfaces?

Thanks,

Reza

Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0              unassigned      YES unset  up                    down   
FastEthernet1              unassigned      YES unset  up                    down   
FastEthernet2              unassigned      YES unset  up                    down   
FastEthernet3              unassigned      YES unset  up                    down   
FastEthernet4              68.145.141.25   YES DHCP   up                    up     
NVI0                       unassigned      YES unset  administratively down down   
Vlan1                      10.1.1.254      YES manual up                    up     
Vlan10                     10.1.10.254     YES manual up                    up     
Wlan-GigabitEthernet0      unassigned      YES unset  up                    up     
wlan-ap0                   2.2.2.2         YES manual up                    up

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: