cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
898
Views
5
Helpful
2
Replies

C881 Not Routing

Gene Horr
Level 1
Level 1

Trying to set up a new C881W.

 

WAN port (FastEthernet4) can ping the internet gateway (192.168.0.254) and addresses in the internet.

VLAN1 and a computer attached to FastEthernet0 can ping the FastEthernet4 port address (192.168.0.10) but no other addresses upstream.

 

Config information:

 


Building configuration...

Current configuration : 5816 bytes
!
! Last configuration change at 20:56:58 GMT Sun Oct 15 2017 by admin
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname C881
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
no aaa new-model
clock timezone GMT -6 0
service-module wlan-ap 0 bootimage autonomous
!
crypto pki

<snip>

!
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool ccp-pool
 import all
 network 192.168.1.0 255.255.255.0
 default-router 192.168.1.1
 dns-server 192.168.1.25 8.8.8.8
 lease 0 2
!
!
!
ip domain name pvm.local
ip name-server 8.8.8.8
ip name-server 192.168.0.254
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
cts logging verbose
license udi pid C881W-A-K9 sn FJC2123L25W
!
!
username <snip>
!
!
!
!
no cdp run
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
 no ip address
!
interface FastEthernet1
 no ip address
!
interface FastEthernet2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface FastEthernet4
 description PrimaryWANDesc_
 ip address 192.168.0.10 255.255.255.0
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface Wlan-GigabitEthernet0
 no ip address
!
interface wlan-ap0
 description Service module interface to manage the embedded AP
 ip address 192.168.2.1 255.255.255.0
!
interface Vlan1
 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
 ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list nat-list interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 192.168.0.254
!
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
<snip>
!
!
line con 0
 login local
 no modem enable
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport input all
 stopbits 1
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
line vty 5 15
 access-class 23 in
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler allocate 20000 1000
!
!
!
end

 

-----------------------------------

 

Gene Horr

 

1 Accepted Solution

Accepted Solutions

Hello @Gene Horr

 On your configuration we refers to an ACL called nat-list on you NAT statement, but I did not see this ACL anywhere else.

You should have something  access-list  nat-list permint 192.168.1.1 0.0.0.255

 

-If I helped you somehow, please, rate it as useful.-

View solution in original post

2 Replies 2

Hello @Gene Horr

 On your configuration we refers to an ACL called nat-list on you NAT statement, but I did not see this ACL anywhere else.

You should have something  access-list  nat-list permint 192.168.1.1 0.0.0.255

 

-If I helped you somehow, please, rate it as useful.-

That was it.  Thanks!

 

Gene