10-16-2017 01:58 PM - edited 03-21-2019 10:57 AM
Trying to set up a new C881W.
WAN port (FastEthernet4) can ping the internet gateway (192.168.0.254) and addresses in the internet.
VLAN1 and a computer attached to FastEthernet0 can ping the FastEthernet4 port address (192.168.0.10) but no other addresses upstream.
Config information:
Building configuration...
Current configuration : 5816 bytes
!
! Last configuration change at 20:56:58 GMT Sun Oct 15 2017 by admin
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname C881
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
no aaa new-model
clock timezone GMT -6 0
service-module wlan-ap 0 bootimage autonomous
!
crypto pki
<snip>
!
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool ccp-pool
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.25 8.8.8.8
lease 0 2
!
!
!
ip domain name pvm.local
ip name-server 8.8.8.8
ip name-server 192.168.0.254
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
cts logging verbose
license udi pid C881W-A-K9 sn FJC2123L25W
!
!
username <snip>
!
!
!
!
no cdp run
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
description PrimaryWANDesc_
ip address 192.168.0.10 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Wlan-GigabitEthernet0
no ip address
!
interface wlan-ap0
description Service module interface to manage the embedded AP
ip address 192.168.2.1 255.255.255.0
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list nat-list interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 192.168.0.254
!
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
<snip>
!
!
line con 0
login local
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
stopbits 1
line vty 0 4
privilege level 15
login local
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
!
!
!
end
-----------------------------------
Gene Horr
Solved! Go to Solution.
10-16-2017 02:59 PM
Hello @Gene Horr
On your configuration we refers to an ACL called nat-list on you NAT statement, but I did not see this ACL anywhere else.
You should have something access-list nat-list permint 192.168.1.1 0.0.0.255
-If I helped you somehow, please, rate it as useful.-
10-16-2017 02:59 PM
Hello @Gene Horr
On your configuration we refers to an ACL called nat-list on you NAT statement, but I did not see this ACL anywhere else.
You should have something access-list nat-list permint 192.168.1.1 0.0.0.255
-If I helped you somehow, please, rate it as useful.-
10-17-2017 11:49 AM
That was it. Thanks!
Gene
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide