10-11-2017 02:39 AM - edited 03-05-2019 09:17 AM
So i have a main public ip address to use for our internet connection which is in gi0/0/0 100.100.100.154 255.255.255.252 and my lan interface is gi0/0/1 192.168.1.1 255.255.255.0. and now we bought a block of 5 ip address from our ISP. which is 100.100.101.32/29 and on my interface gi0/0/2 is 100.100.101.33 255.255.255.248 the problem is when my computer is directly connected to the gi0/0/2 i cannot ping my gateway which is .33 and my computer ip is the next usable ip with is 100.100.101.34
and supposed to be the .34 will be directly connected to the internet.
this is the current configuration of my interface, static route and access list:
interface GigabitEthernet0/0/0
description Internet
ip address 100.100.100.154 255.255.255.252
ip nat outside
negotiation auto
!
interface GigabitEthernet0/0/1
description SG500
ip address 192.168.1.1 255.255.255.0
ip nat inside
negotiation auto
!
interface GigabitEthernet0/0/2
description Static IP
ip address 100.100.101.33 255.255.255.248
negotiation auto
ip route 0.0.0.0 0.0.0.0 100.100.100.153
ip route 192.168.2.0 255.255.255.0 192.168.1.2
ip route 192.168.3.0 255.255.255.0 192.168.1.2
ip route 192.168.4.0 255.255.255.0 192.168.1.2
ip route 192.168.5.0 255.255.255.0 192.168.1.2
ip route 192.168.10.0 255.255.255.0 192.168.1.2
ip route 192.168.11.0 255.255.255.0 192.168.1.2
ip route 200.0.0.0 255.255.255.0 192.168.1.2
access-list 1 permit 192.168.100.0 0.0.0.255
access-list 1 permit 192.168.10.0 0.0.0.255
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 192.168.2.0 0.0.0.255
access-list 1 permit 192.168.3.0 0.0.0.255
access-list 1 permit 192.168.4.0 0.0.0.255
access-list 1 permit 192.168.5.0 0.0.0.255
access-list 1 permit 192.168.11.0 0.0.0.255
access-list 1 permit 172.168.0.0 0.0.0.255
access-list 1 permit 200.0.0.0 0.0.0.255
access-list 112 permit ip any any
what do i need to add some configuration to make this work?
thank you
10-11-2017 09:58 AM
Looks pretty cut and dry.
Did the router interface show up/up?
Double check the mask you gave the laptop.
Did the router show an ARP entry?
Does the laptop have a firewall / security policy denying ICMP?
10-11-2017 12:39 PM
These are good questions to investigate the issue, especially the question about whether there is an arp entry. In addition it would help if we could see output from the PC for ipconf and for arp -a
HTH
Rick
10-11-2017 03:43 PM
10-11-2017 03:40 PM
10-11-2017 09:05 PM
10-12-2017 03:18 AM
Ahh. Thanks for the update. Glad you figured it out.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide