topic Cannot access DNS/Internet from 1921 in Routing and SD-WAN

Cannot access DNS/Internet from 1921

murtuzakazmi — Tue, 05 Mar 2019 02:41:03 GMT

Hello Experts,

I have been playing around with a 1921/K9 router in our dev environment. It's been about 24 hours and I just can't seem to get it to work. My DHCP Server is working hence my internal network is getting IP address as desired. But Router doesn't seem to connect to internet for some reason.

I am trying to make it a internet facing router with static IP address (67.210.209.113). LAN side of this router will be our .11 Network which is our Dev Network.

Here is some network information:

WAN:

Interface IP: 67.210.111.111

Default Gateway: 67.210.111.222 (I can ping this address through router)

tlm1921A-11A#ping 67.210.111.222

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 67.210.111.222, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms

LAN:

Interface IP: 192.168.11.1

Network: 192.168.11.0/24

I cannot ping google.com OR 8.8.8.8 from the router

I am connected to the router through COM as well as CPP.

If any one of you can help me out - I would really really appreciate it.

King regards,

Murtuza

Here is my run file. Some settings might be a little messed up as I have been trying different guides and methods to get this up and running !!

hostname tlm1921A-11A

boot-start-marker

boot-end-marker

aaa new-model

aaa authentication login default local

aaa authorization exec default local

aaa session-id common

clock timezone PCTime -5 0

clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00

no ipv6 cef

ip source-route

no ip routing

no ip cef

ip dhcp excluded-address 192.168.11.1 192.168.11.184

ip dhcp excluded-address 192.168.11.206 192.168.11.254

ip dhcp pool 11Network

import all

network 192.168.11.0 255.255.255.0

dns-server 8.8.8.8 4.2.2.2

default-router 192.168.11.1

ip name-server 8.8.8.8

ip name-server 4.2.2.2

multilink bundle-name authenticated

crypto pki token default removal timeout 0

interface Embedded-Service-Engine0/0

no ip address

no ip route-cache

shutdown

interface GigabitEthernet0/0

description 11WAN$ETH-WAN$

ip address 67.210.111.111 255.255.255.224

ip nat outside

ip virtual-reassembly in

no ip route-cache

duplex auto

speed auto

no mop enabled

interface GigabitEthernet0/1

description 11LAN

ip nat inside

ip address 192.168.11.1 255.255.255.0

ip virtual-reassembly in

no ip route-cache

duplex auto

speed auto

ip forward-protocol nd

ip http server

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

ip nat pool Pool 10.10.10.1 10.10.10.10 netmask 255.255.255.0

ip route 0.0.0.0 0.0.0.0 67.210.111.222

access-list 1 remark CCP_ACL Category=2

access-list 1 permit 192.168.11.0 0.0.0.255

control-plane

line con 0

line aux 0

line 2

no activation-character

no exec

transport preferred none

transport input all

transport output pad telnet rlogin lapb-ta mop udptn v120 ssh

stopbits 1

line vty 0 4

password tlmcisco

transport input telnet ssh

transport output telnet ssh

line vty 5 15

transport input telnet ssh

transport output telnet

scheduler allocate 20000 1000

end

Cannot access DNS/Internet from 1921

liam onions — Fri, 11 Jan 2013 18:44:00 GMT

Try changing dns server too 192.168.11.1.

Cannot access DNS/Internet from 1921

murtuzakazmi — Fri, 11 Jan 2013 18:48:16 GMT

But I can't even reach 8.8.8.8 from the router itself - perhaps it's not finding the right route to go to my Default Gateway 67.210.111.222. Thoughts?

You think changing dns server to a LAN Interface would fix the issue?

Cannot access DNS/Internet from 1921

liam onions — Fri, 11 Jan 2013 18:54:43 GMT

yeah should be ok once you resolve dns locally.

Cannot access DNS/Internet from 1921

liam onions — Fri, 11 Jan 2013 18:57:07 GMT

what switch you using ?

Re: Cannot access DNS/Internet from 1921

Elton Babcock — Fri, 11 Jan 2013 22:11:45 GMT

I don't see where you have defined your NAT statement such as:

IP NAT inside source list 1 interface gigabitethernet overload

Sent from Cisco Technical Support iPhone App

Re: Cannot access DNS/Internet from 1921

cadet alain — Sat, 12 Jan 2013 11:46:46 GMT

Hi,

to be able to ping internet addresses from the router: enter this command in global config mode ip routing

to do the same from LAN: ip nat inside source list 1 interface g0/0

Regards.

Alain

Don't forget to rate helpful posts.

Re: Cannot access DNS/Internet from 1921

paul driver — Sat, 12 Jan 2013 18:58:59 GMT

Hello Murtuza,

A few things -

1) do you really have a allocation of 32 public addreses?

2) your public assigned ip address isnt NOT in the same subnet range has the gateway you have stated
3 your nat pool isnt in the same range as the isp range

4) misssing nat statement to bind the nat pool with acl 1 and inside nat

to test connectivity before applying nat etc , can you try-

1)removing nat statement from gig0/0

2)enable ip routing
3)add a default static route towards your ISP router lan ip address ( whatever this is)
4)try sourcing the icmp test from a specified interface of G0/0

res

Paul