cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
608
Views
0
Helpful
6
Replies

How to add Public Static Address Block

jeremigio
Level 1
Level 1

So i have a main public ip address to use for our internet connection which is in gi0/0/0 100.100.100.154 255.255.255.252 and my lan interface is gi0/0/1 192.168.1.1 255.255.255.0. and now we bought a block of 5 ip address from our ISP. which is 100.100.101.32/29 and on my interface gi0/0/2 is 100.100.101.33 255.255.255.248 the problem is when my computer is directly connected to the gi0/0/2 i cannot ping my gateway which is .33 and my computer ip is the next usable ip with is 100.100.101.34

 

and supposed to be the .34 will be directly connected to the internet.

 

this is the current configuration of my interface, static route and access list:

 

interface GigabitEthernet0/0/0
description Internet
ip address 100.100.100.154 255.255.255.252
ip nat outside
negotiation auto
!
interface GigabitEthernet0/0/1
description SG500
ip address 192.168.1.1 255.255.255.0
ip nat inside
negotiation auto
!
interface GigabitEthernet0/0/2
description Static IP
ip address 100.100.101.33 255.255.255.248
negotiation auto

 

ip route 0.0.0.0 0.0.0.0 100.100.100.153
ip route 192.168.2.0 255.255.255.0 192.168.1.2
ip route 192.168.3.0 255.255.255.0 192.168.1.2
ip route 192.168.4.0 255.255.255.0 192.168.1.2
ip route 192.168.5.0 255.255.255.0 192.168.1.2
ip route 192.168.10.0 255.255.255.0 192.168.1.2
ip route 192.168.11.0 255.255.255.0 192.168.1.2
ip route 200.0.0.0 255.255.255.0 192.168.1.2

 

access-list 1 permit 192.168.100.0 0.0.0.255
access-list 1 permit 192.168.10.0 0.0.0.255
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 192.168.2.0 0.0.0.255
access-list 1 permit 192.168.3.0 0.0.0.255
access-list 1 permit 192.168.4.0 0.0.0.255
access-list 1 permit 192.168.5.0 0.0.0.255
access-list 1 permit 192.168.11.0 0.0.0.255
access-list 1 permit 172.168.0.0 0.0.0.255
access-list 1 permit 200.0.0.0 0.0.0.255
access-list 112 permit ip any any

 

what do i need to add some configuration to make this work?

 

thank you

6 Replies 6

chrihussey
VIP Alumni
VIP Alumni

Looks pretty cut and dry.

Did the router interface show up/up?

Double check the mask you gave the laptop.

Did the router show an ARP entry?

Does the laptop have a firewall / security policy denying ICMP?

 

These are good questions to investigate the issue, especially the question about whether there is an arp entry. In addition it would help if we could see output from the PC for ipconf and for arp -a

 

HTH

 

Rick

HTH

Rick

my ipconfig on laptop:
ip address: 100.100.101.34
subnet mask: 255.255.255.248
gateway: 100.100.101.33

and this is the arp related to the subnet and cannot see the ip of my laptop on it:
Internet 100.100.101.33 - 002c.c853.6f82 ARPA GigabitEthernet0/0/2
Internet 100.100.101.36 0 Incomplete ARPA

Did the router interface show up/up?
Yes it is up/up and i can ping 101.33 from outside my network (different isp)

Double check the mask you gave the laptop.
yes i doubled check. the subnet mask is 255.255.255.248, my ip address is 100.100.101.34 and gateway is 100.100.101.33

Did the router show an ARP entry?
no i didn't see 101.34 in my arp entry.
Internet 100.100.101.33 - 002c.c853.6f82 ARPA GigabitEthernet0/0/2
Internet 100.100.101.36 0 Incomplete ARPA

Does the laptop have a firewall / security policy denying ICMP?
i tried disabling my firewall and still the same result.

the problem was the startech sfp module is not compatible with my cisco 4331 router. lol

Ahh. Thanks for the update. Glad you figured it out.

Review Cisco Networking products for a $25 gift card