Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco 837, Access list ?

Hi,

I've been configuring a cisco 837 router, I'm at a stage were I have the connection test completing with no errors,

Checking interface status... Up

Checking for DNS settings... Successful

Checking interface IP address.. Successful

Checking exit interface... Successful

Pinging to destination host... Successful

but when I try to get on the net my browser willn't open the net. It issues an ip to the desktop and gateway is present, I can ping the router.

Here's my current conf is attached

I thought I needed something like,

access-list 1 permit 192.168.0.0 0.0.0.255 any

I'm still learning so any help would be much appreciated.

3 REPLIES
Bronze

Re: Cisco 837, Access list ?

Hi,

I think you need to have the ACL 1 like this in global config mode..

Access-list 1 permit 192.168.1.0 0.0.0.255

Access-list 1 permit 190.160.1.0 0.0.0.255

Please check..n rate if it helps...

BR

*aijaz*

New Member

Re: Cisco 837, Access list ?

Thanks for the reply,

I added the lines but still didn't work, could these conflict with others in the list?

Should i delete everything else in the list and just have,

Access-list 1 permit 192.168.1.0 0.0.0.255

Access-list 1 permit 190.160.1.0 0.0.0.255

for starters?

Bronze

Re: Cisco 837, Access list ?

Hi,

In the access list 1 keep only these two lines.... The number "1" refers to the nat statement

ip nat inside source list 1 interface Dialer0 overload

If you change the list number in above nat statement, pls make sure that you have ACL with same number..

By the way why you are using the 190.160.1.0 segment on other Ethernet 2 interface..? just for info..

[Edit]

One more thing, try to remove the access-list 100 and 101 from the two ethernet interfaces n from dialer0 interface [no ip access-group 101 in] and check. The ACL 100,101 might be creating some problem here.

HTH

*aijaz*

166
Views
0
Helpful
3
Replies