topic Re: How to configure Multiple DHCP with internet access in Routing and SD-WAN

How to configure Multiple DHCP with internet access

cool01 — Tue, 05 Mar 2019 17:36:34 GMT

I would like to ask some help to fix my configuration by using Multiple DHCP with internet access.

Currently my configuration below is connected to multiple dhcp unfortunately unsuccessful Internet access.

Current configuration : 1449 bytes

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname Router

boot-start-marker

boot-end-marker

no logging buffered

enable secret 5 $1$nrgd$KqCZrWkVWFUIV/4V5DNRn/

no aaa new-model

resource policy

mmi polling-interval 60

no mmi auto-configure

no mmi pvc

mmi snmp-timeout 180

ip subnet-zero

ip cef

ip dhcp excluded-address 192.168.10.1 192.168.10.10

ip dhcp excluded-address 192.168.20.1 192.168.20.10

ip dhcp pool vlan10

network 192.168.10.0 255.255.255.0

default-router 192.168.10.1

dns-server 103.225.36.226 103.225.36.238

ip dhcp pool vlan20

network 192.168.20.0 255.255.255.0

default-router 192.168.20.1

dns-server 103.225.36.226 103.225.36.238

interface FastEthernet0/1.10

encapsulation dot1Q 10

ip address 192.168.10.1 255.255.255.0

ip nat outside

interface FastEthernet0/1.20

encapsulation dot1Q 20

ip address 192.168.20.1 255.255.255.0

ip nat inside

username fair password 0 fairship

interface FastEthernet0/0

description Link_to_ISP$ETH-LAN$

ip address 103.225.36.242 255.255.255.252

ip nat inside

speed 100

full-duplex

interface FastEthernet0/1

description Link_to_LAN$ETH-LAN$$ES_LAN$

ip nat outside

no ip address

ip nbar protocol-discovery

speed 100

full-duplex

service-policy output DROP

interface Serial0/0/0

no ip address

shutdown

clock rate 2000000

ip classless

ip route 0.0.0.0 0.0.0.0 103.225.36.241

ip http server

control-plane

line con 0

password fairshipping

logging synchronous

line aux 0

line vty 0 4

password fairshipping

logging synchronous

end

Re: How to configure Multiple DHCP with internet access

Georg Pauwen — Thu, 07 Dec 2017 09:10:35 GMT

Hello,

I have made a few additions to your configuration (in bold😞

Current configuration : 1449 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 $1$nrgd$KqCZrWkVWFUIV/4V5DNRn/
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
ip dhcp excluded-address 192.168.10.1 192.168.10.10
ip dhcp excluded-address 192.168.20.1 192.168.20.10
!
ip dhcp pool vlan10
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 103.225.36.226 103.225.36.238
!
ip dhcp pool vlan20
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 103.225.36.226 103.225.36.238
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
ip nat inside
!
interface FastEthernet0/1.20
encapsulation dot1Q 20
ip address 192.168.20.1 255.255.255.0
ip nat inside
!
username fair password 0 fairship
!
interface FastEthernet0/0
description Link_to_ISP$ETH-LAN$
ip address 103.225.36.242 255.255.255.252
ip nat outside
speed 100
full-duplex
!
interface FastEthernet0/1
description Link_to_LAN$ETH-LAN$$ES_LAN$
ip nat inside
no ip address
ip nbar protocol-discovery
speed 100
full-duplex
!
service-policy output DROP
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
ip nat inside source list 1 interface FastEthernet0/0 overload
!
ip classless
ip route 0.0.0.0 0.0.0.0 103.225.36.241
!
access-list 1 permit 192.168.10.0
access-list 1 permit 192.168.20.0
!
ip http server
!
control-plane
!
line con 0
password fairshipping
logging synchronous
login
line aux 0
line vty 0 4
password fairshipping
logging synchronous
login local

Re: How to configure Multiple DHCP with internet access

cool01 — Fri, 08 Dec 2017 12:11:44 GMT

I already applied the configuration unfortunately still not working, but i try it again tomorrow. Thanks for your response i hope you can reply my inquiries until i success this configuration. I also include my Switch config below.

Switch

Building configuration...

Current configuration : 5369 bytes

! Last configuration change at 14:25:32 GMT+8 Tue Aug 18 2015

! NVRAM config last updated at 14:13:48 GMT+8 Tue Aug 18 2015

version 15.0

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname fair_switch

boot-start-marker

boot-end-marker

enable password f@1r

no aaa new-model

clock timezone GMT+8 8 0

crypto pki trustpoint TP-self-signed-2967729024

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-2967729024

revocation-check none

rsakeypair TP-self-signed-2967729024

crypto pki certificate chain TP-self-signed-2967729024

certificate self-signed 01

3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030

31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

69666963 6174652D 32393637 37323930 3234301E 170D3933 30333031 30303030

35385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39363737

32393032 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

8100A994 D09FA408 93DB36BB EB73F0E5 7B4E8FEE A19B52D4 345628F8 C1E7967D

1E4B5AFD B5B4CB26 9E80D684 8CE610CA A2313E38 04E053BC 21CC4660 B7694029

7E8FA283 65B72EFE 6D884BF1 1111F005 92734180 34B7C4F8 35F7DFD8 41D40037

668EEB24 23430096 8AF4C5B7 926E09A8 0C17E30B CD95A0DE 3F68D3EE 2FE75B5B

0A710203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603

551D2304 18301680 143DD2B4 5967CBE7 F732A40D 05A6F94D 1564072A 54301D06

03551D0E 04160414 3DD2B459 67CBE7F7 32A40D05 A6F94D15 64072A54 300D0609

2A864886 F70D0101 05050003 8181009F D800E049 CEC8977B F8C672B6 AB6F791E

5DD70B9D 1BA8E7D5 65326C3A 32CE5A19 1328B4C7 AEEF2386 E787B996 DF904E86

AC347DF1 0BAA1B8C 8B75667C 8A990367 1E8C2DC2 0C5789C4 214717C2 DCD50244

5B30FD76 3FB9E159 2B472F6A 3509676C 5FCEACD7 F20FDC10 9FE3B1A5 1EAA223E

24F57C5E E3CF6D35 743F50F1 2F6E96

quit

spanning-tree mode pvst

spanning-tree extend system-id

vlan internal allocation policy ascending

interface FastEthernet0

no ip address

shutdown

interface FastEthernet0/1

switchport mode trunk

description access-port

speed 100

duplex full

interface FastEthernet0/2

switchport access vlan 10

description access-port

interface FastEthernet0/3

switchport access vlan 10

description access-port

interface FastEthernet0/4

switchport access vlan 10

description access-port

interface FastEthernet0/5

switchport access vlan 10

description access-port

interface FastEthernet0/6

switchport access vlan 10

description access-port

interface FastEthernet0/7

switchport access vlan 10

description access-port

interface FastEthernet0/8

switchport access vlan 10

description access-port

interface FastEthernet0/9

switchport access vlan 10

description access-port

interface FastEthernet0/10

switchport access vlan 10

description access-port

interface FastEthernet0/11

switchport access vlan 10

description access-port

interface FastEthernet0/12

switchport access vlan 10

description access-port

interface FastEthernet0/13

switchport access vlan 10

description access-port

interface FastEthernet0/14

switchport access vlan 10

description access-port

interface FastEthernet0/15

switchport access vlan 10

description access-port

interface FastEthernet0/16

switchport access vlan 10

description access-port

interface FastEthernet0/17

switchport access vlan 10

description access-port

interface FastEthernet0/18

switchport access vlan 10

description access-port

interface FastEthernet0/19

switchport access vlan 10

description access-port

interface FastEthernet0/20

switchport access vlan 10

description access-port

interface FastEthernet0/21

switchport access vlan 10

description access-port

interface FastEthernet0/22

switchport access vlan 10

description access-port

interface FastEthernet0/23

switchport access vlan 10

description access-port

interface FastEthernet0/24

switchport access vlan 10

description access-port

interface FastEthernet0/25

switchport access vlan 10

description access-port

interface FastEthernet0/26

switchport access vlan 10

description access-port

interface FastEthernet0/27

switchport access vlan 10

description access-port

interface FastEthernet0/28

switchport access vlan 10

description access-port

interface FastEthernet0/29

switchport access vlan 20

description access-port

interface FastEthernet0/30

switchport access vlan 20

description access-port

interface FastEthernet0/31

switchport access vlan 20

description access-port

interface FastEthernet0/32

switchport access vlan 20

description access-port

interface FastEthernet0/33

switchport access vlan 20

description access-port

interface FastEthernet0/34

switchport access vlan 20

description access-port

interface FastEthernet0/35

switchport access vlan 20

description access-port

interface FastEthernet0/36

switchport access vlan 20

description access-port

interface FastEthernet0/37

switchport access vlan 20

description access-port

interface FastEthernet0/38

switchport access vlan 20

description access-port

interface FastEthernet0/39

switchport access vlan 20

description access-port

interface FastEthernet0/40

switchport access vlan 20

description access-port

interface FastEthernet0/41

switchport access vlan 20

description access-port

interface FastEthernet0/42

switchport access vlan 20

description access-port

interface FastEthernet0/43

switchport access vlan 20

description access-port

interface FastEthernet0/44

switchport access vlan 20

description access-port

interface FastEthernet0/45

switchport access vlan 20

description access-port

interface FastEthernet0/46

switchport access vlan 20

description access-port

interface FastEthernet0/47

switchport access vlan 20

description access-port

interface FastEthernet0/48

switchport access vlan 20

description access-port

interface GigabitEthernet0/1

interface GigabitEthernet0/2

interface Vlan1

ip http server

ip http secure-server

snmp-server community bl4ckf1b37 RO 99

snmp-server location FairShipping, Malate, Manila

snmp-server contact noc@blackfibersolutions.com

snmp-server chassis-id Cisco 2960

snmp-server enable traps tty

line con 0

line vty 0 4

password fairs

line vty 5 15

end

Re: How to configure Multiple DHCP with internet access

Georg Pauwen — Fri, 08 Dec 2017 13:36:53 GMT

Hello,

do your clients get an IP address ? You might want to add:

interface FastEthernet0/17

switchport access vlan 10

description access-port

spanning-tree portfast

to all the access ports.

Re: How to configure Multiple DHCP with internet access

cool01 — Sat, 09 Dec 2017 03:14:10 GMT

Thanks for your response, i will do your suggestion for my problem. I hope you still response my inquiry until i success this case.

Thank you again

Re: How to configure Multiple DHCP with internet access

cool01 — Sat, 09 Dec 2017 08:14:24 GMT

My client got IP address even without spanning-tree portfast but as per your advise i include the spanning-tree portfast. Unfortunately upon applying this config below i still having bad result. Please see below my config for Router and Switch. And please correct my config.

==========

ROUTER

Current configuration : 1449 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 $1$nrgd$KqCZrWkVWFUIV/4V5DNRn/
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
ip dhcp excluded-address 192.168.10.1 192.168.10.10
ip dhcp excluded-address 192.168.20.1 192.168.20.10
!
ip dhcp pool vlan10
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 103.225.36.226 103.225.36.238
!
ip dhcp pool vlan20
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 103.225.36.226 103.225.36.238
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
ip nat outside
!
interface FastEthernet0/1.20
encapsulation dot1Q 20
ip address 192.168.20.1 255.255.255.0
ip nat outside

username fairs password 0 fairs
!
policy-map DROP
class BLOCKED
drop
!
interface FastEthernet0/0
description Link_to_BlackFiber$ETH-LAN$
ip address 103.225.36.242 255.255.255.252
ip nat inside
speed 100
full-duplex
!
interface FastEthernet0/1
description Link_to_LAN$ETH-LAN$$ES_LAN$
ip nat outside
no ip address
ip nbar protocol-discovery
speed 100
full-duplex
!
service-policy output DROP
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
ip nat inside source list 1 interface FastEthernet0/0 overload
!
ip classless
ip route 0.0.0.0 0.0.0.0 103.225.36.241
!
access-list 1 permit 192.168.10.0
access-list 1 permit 192.168.20.0
!
ip http server
!
control-plane
!
line con 0
password fairs
logging synchronous
login
line aux 0
line vty 0 4
password fairs
logging synchronous
login local
!
end

==========

SWITCH

Switch

Building configuration...

Current configuration : 5369 bytes
!
! Last configuration change at 14:25:32 GMT+8 Tue Aug 18 2015
! NVRAM config last updated at 14:13:48 GMT+8 Tue Aug 18 2015
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!

hostname fair_switch
!
boot-start-marker
boot-end-marker
!
enable password f@1rs
!
no aaa new-model
clock timezone GMT+8 8 0
!
!
crypto pki trustpoint TP-self-signed-2967729024
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2967729024
revocation-check none
rsakeypair TP-self-signed-2967729024
!
crypto pki certificate chain TP-self-signed-2967729024
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32393637 37323930 3234301E 170D3933 30333031 30303030
35385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39363737
32393032 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A994 D09FA408 93DB36BB EB73F0E5 7B4E8FEE A19B52D4 345628F8 C1E7967D
1E4B5AFD B5B4CB26 9E80D684 8CE610CA A2313E38 04E053BC 21CC4660 B7694029
7E8FA283 65B72EFE 6D884BF1 1111F005 92734180 34B7C4F8 35F7DFD8 41D40037
668EEB24 23430096 8AF4C5B7 926E09A8 0C17E30B CD95A0DE 3F68D3EE 2FE75B5B
0A710203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 143DD2B4 5967CBE7 F732A40D 05A6F94D 1564072A 54301D06
03551D0E 04160414 3DD2B459 67CBE7F7 32A40D05 A6F94D15 64072A54 300D0609
2A864886 F70D0101 05050003 8181009F D800E049 CEC8977B F8C672B6 AB6F791E
5DD70B9D 1BA8E7D5 65326C3A 32CE5A19 1328B4C7 AEEF2386 E787B996 DF904E86
AC347DF1 0BAA1B8C 8B75667C 8A990367 1E8C2DC2 0C5789C4 214717C2 DCD50244
5B30FD76 3FB9E159 2B472F6A 3509676C 5FCEACD7 F20FDC10 9FE3B1A5 1EAA223E
24F57C5E E3CF6D35 743F50F1 2F6E96
quit
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0
no ip address
shutdown
!
interface FastEthernet0/1
switchport mode trunk
description access-port
speed 100
duplex full
!
interface FastEthernet0/2
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/3
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/25
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/26
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/27
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/28
switchport access vlan 10
description access-port
spanning-tree portfast
!
interface FastEthernet0/29
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/30
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/31
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/32
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/33
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/34
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/35
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/36
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/37
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/38
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/39
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/40
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/41
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/42
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/43
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/44
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/45
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/46
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/47
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface FastEthernet0/48
switchport access vlan 20
description access-port
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
!
ip http server
ip http secure-server
!
snmp-server community bl4ckf1b37 RO 99
snmp-server location FairS, Malate, Manila
snmp-server contact noc@blackfibersolutions.com
snmp-server chassis-id Cisco 2960
snmp-server enable traps tty
!
line con 0
line vty 0 4
password fairs
login
line vty 5 15
login
!
end

==========

Re: How to configure Multiple DHCP with internet access

Georg Pauwen — Sat, 09 Dec 2017 08:23:18 GMT

Hello,

the 'ip nat inside' and 'ip nat outside' statements on your router are reversed. Change them to what I marked in bold below:

ROUTER

Current configuration : 1449 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 $1$nrgd$KqCZrWkVWFUIV/4V5DNRn/
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
ip dhcp excluded-address 192.168.10.1 192.168.10.10
ip dhcp excluded-address 192.168.20.1 192.168.20.10
!
ip dhcp pool vlan10
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 103.225.36.226 103.225.36.238
!
ip dhcp pool vlan20
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 103.225.36.226 103.225.36.238
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
ip nat inside
!
interface FastEthernet0/1.20
encapsulation dot1Q 20
ip address 192.168.20.1 255.255.255.0
ip nat inside
!
username fairs password 0 fairs
!
policy-map DROP
class BLOCKED
drop
!
interface FastEthernet0/0
description Link_to_BlackFiber$ETH-LAN$
ip address 103.225.36.242 255.255.255.252
ip nat outside
speed 100
full-duplex
!
interface FastEthernet0/1
description Link_to_LAN$ETH-LAN$$ES_LAN$
ip nat inside
no ip address
ip nbar protocol-discovery
speed 100
full-duplex
!
service-policy output DROP
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
ip nat inside source list 1 interface FastEthernet0/0 overload
!
ip classless
ip route 0.0.0.0 0.0.0.0 103.225.36.241
!
access-list 1 permit 192.168.10.0
access-list 1 permit 192.168.20.0
!
ip http server
!
control-plane
!
line con 0
password fairs
logging synchronous
login
line aux 0
line vty 0 4
password fairs
logging synchronous
login local
!
end

Re: How to configure Multiple DHCP with internet access

cool01 — Wed, 13 Dec 2017 02:03:17 GMT

After configuration I ping my DNS 8.8.8.8 and 103.225.36.238 using telnet all has success rate 100 but my network connection still limited, i noticed while ping the DNS using cmd my result is "request time out" unlike before "unreachable". Also in my research, I recognized that our configuration for router/switch are correct but i can't understand the configuration still no internet access?

=ROUTER=

Current configuration : 1449 bytes

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname Router

boot-start-marker

boot-end-marker

no logging buffered

enable secret 5 $1$nrgd$KqCZrWkVWFUIV/4V5DNRn/

no aaa new-model

resource policy

mmi polling-interval 60

no mmi auto-configure

no mmi pvc

mmi snmp-timeout 180

ip subnet-zero

ip cef

ip dhcp excluded-address 192.168.10.1 192.168.10.10

ip dhcp excluded-address 192.168.20.1 192.168.20.10

ip dhcp pool vlan10

network 192.168.10.0 255.255.255.0

default-router 192.168.10.1

dns-server 8.8.8.8

ip dhcp pool vlan20

network 192.168.20.0 255.255.255.0

default-router 192.168.20.1

dns-server 8.8.8.8

interface FastEthernet0/1.10

encapsulation dot1Q 10

ip address 192.168.10.1 255.255.255.0

ip nat inside

interface FastEthernet0/1.20

encapsulation dot1Q 20

ip address 192.168.20.1 255.255.255.0

ip nat inside

username fairs password 0 fairs

interface FastEthernet0/0

description Link_to_BlackFiber$ETH-LAN$

ip address 103.225.36.242 255.255.255.252

ip nat outside

speed 100

full-duplex

interface FastEthernet0/1

description Link_to_LAN$ETH-LAN$$ES_LAN$

ip nat inside

no ip address

ip nbar protocol-discovery

speed 100

full-duplex

service-policy output DROP

interface Serial0/0/0

no ip address

shutdown

clock rate 2000000

ip nat inside source list 1 interface FastEthernet0/0 overload

ip classless

ip route 0.0.0.0 0.0.0.0 103.225.36.241

Access-list 1 permit 192.168.10.0

Access-list 1 permit 192.168.20.0

ip http server

control-plane

line con 0

password fairs

logging synchronous

line aux 0

line vty 0 4

password fairs

logging synchronous

end

=SWITCH=

Current configuration : 5369 bytes

! Last configuration change at 14:25:32 GMT+8 Tue Aug 18 2015

! NVRAM config last updated at 14:13:48 GMT+8 Tue Aug 18 2015

version 15.0

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname fair_switch

boot-start-marker

boot-end-marker

enable password f@1rsh1pp1ng

no aaa new-model

clock timezone GMT+8 8 0

crypto pki trustpoint TP-self-signed-2967729024

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-2967729024

revocation-check none

rsakeypair TP-self-signed-2967729024

crypto pki certificate chain TP-self-signed-2967729024

certificate self-signed 01

4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39363737

32393032 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

D800E049 CEC8977B F8C672B6 AB6F791E

5DD70B9D 1BA8E7D5 65326C3A 32CE5A19 1328B4C7 AEEF2386 E787B996 DF904E86

AC347DF1 0BAA1B8C 8B75667C 8A990367 1E8C2DC2 0C5789C4 214717C2 DCD50244

5B30FD76 3FB9E159 2B472F6A 3509676C 5FCEACD7 F20FDC10 9FE3B1A5 1EAA223E

24F57C5E E3CF6D35 743F50F1 2F6E96

quit

spanning-tree mode pvst

spanning-tree extend system-id

vlan internal allocation policy ascending

interface FastEthernet0

no ip address

shutdown

interface FastEthernet0/1

switchport mode trunk

description access-port

speed 100

duplex full

interface FastEthernet0/2

switchport access vlan 10

description access-port

spanning-tree portfast

interface FastEthernet0/47

switchport access vlan 20

description access-port

spanning-tree portfast

interface GigabitEthernet0/1

interface GigabitEthernet0/2

interface Vlan1 (telnet)

ip address 103.225.36.250 255.255.255.252

ip http server

ip http secure-server

snmp-server community bl4ckf1b37 RO 99

snmp-server location FairShipping, Malate, Manila

snmp-server contact noc@blackfibersolutions.com

snmp-server chassis-id Cisco 2960

snmp-server enable traps tty

line con 0

line vty 0 4

password fairs

line vty 5 15

end

Re: How to configure Multiple DHCP with internet access

cool01 — Wed, 13 Dec 2017 06:40:36 GMT

I share the details i had so can easily understand what i want supposed to do in my network.

1. Router= 1841 (1800 series)

2. Switch= 2960SF Catalyst

3. I need a separated network with both INTERNET ACCESS.

a. Network 1 = 192.168.10.1

b. Network 2 = 192.168.20.1

4. ISP Details(modem) - Direct

IP Address: 103.225.36.242

SM: 255.255.255.252

GW: 103.225.36.241

5. Router to Modem=fa0/0, Router to Switch=fa0/1

Re: How to configure Multiple DHCP with internet access

Georg Pauwen — Wed, 13 Dec 2017 08:11:57 GMT

Hello,

the config looks good. If you can ping 8.8.8.8 you (obviously) have Internet access. What is the output of 'ipconfig /all' from one of the PCs on Vlan 10 or Vlan 20 ?

Re: How to configure Multiple DHCP with internet access

cool01 — Wed, 13 Dec 2017 08:33:01 GMT

But if you ping 8.8.8.8 or 103.225.36.238 you have result "Request Time Out" also i noticed while checking the packet sent/received the sent was simultaneously responded unlike received has no responded. even google.com has rto result.

ipconfig /all for Vlan10

192.168.10.11

255.255.255.0

192.168.10.1

8.8.8.8

103.225.36.238

ipconfig /all for Vlan20

192.168.20.11

255.255.255.0

192.168.20.1

8.8.8.8

103.225.36.238

Re: How to configure Multiple DHCP with internet access

Georg Pauwen — Wed, 13 Dec 2017 09:00:06 GMT

Hello,

you have this configured:

interface FastEthernet0/0

description Link_to_BlackFiber$ETH-LAN$

ip address 103.225.36.242 255.255.255.252

ip route 0.0.0.0 0.0.0.0 103.225.36.241

Can you ping 103.225.36.241 from your router ?

Re: How to configure Multiple DHCP with internet access

cool01 — Wed, 13 Dec 2017 10:44:54 GMT

After configuring please see the below ping result for 8.8.8.8, 103.225.36.238, 103.225.36.241, 103.225.36.242. What do you say about this result?

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 48/48/48 ms
========================================================
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 103.225.36.238, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
========================================================
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 103.225.36.241, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
========================================================
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 103.225.36.242, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms

Re: How to configure Multiple DHCP with internet access

cool01 — Wed, 13 Dec 2017 12:02:43 GMT

I was thinking the IP Address provided by our ISP is not allowed for DHCP Server maybe because the IP Address provided use for static IP address per workstation. Our current configuration having installed Static IP Address due to the 103.225.36.242 was distributed to 30 usable IP Addresses and but the installed static ip address we are using please see this below.

IP: 103.225.37.131 - my pc

SM: 255.255.255.224

GW: 103.225.37.129

DNS1:103.225.36.238

DNS2:103.225.36.226

Current Configuration (Static IP Address per workstation)

Building configuration...

Current configuration : 1449 bytes

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname Router

boot-start-marker

boot-end-marker

no logging buffered

enable secret 5 $1$nrgd$KqCZrWkVWFUIV/4V5DNRn/

no aaa new-model

resource policy

mmi polling-interval 60

no mmi auto-configure

no mmi pvc

mmi snmp-timeout 180

ip subnet-zero

ip cef

ip name-server 103.225.36.238

ip name-server 103.225.36.226

ip name-server 8.8.8.8

username fairs password 0 fairs

interface FastEthernet0/0

description Link_to_BlackFiber$ETH-LAN$

ip address 103.225.36.242 255.255.255.252

speed 100

full-duplex

interface FastEthernet0/1

description Link_to_LAN$ETH-LAN$$ES_LAN$

ip address 103.225.36.249 255.255.255.252 secondary

ip address 103.225.37.129 255.255.255.224

ip nbar protocol-discovery

speed 100

full-duplex

service-policy output DROP

interface Serial0/0/0

no ip address

shutdown

clock rate 2000000

ip classless

ip route 0.0.0.0 0.0.0.0 103.225.36.241

ip http server

control-plane

line con 0

password fairs

logging synchronous

line aux 0

line vty 0 4

password fairs

logging synchronous

end

Re: How to configure Multiple DHCP with internet access

Georg Pauwen — Wed, 13 Dec 2017 12:20:33 GMT

Hello,

if these are routable public IP addresses of course you can statically assign them to your host. The only limitation is that the number of hosts is now limited to the number of public IP addresses you have available.

Re: How to configure Multiple DHCP with internet access

cool01 — Wed, 13 Dec 2017 14:52:20 GMT

In this case can i act my network to be multiple DHCP?

Re: How to configure Multiple DHCP with internet access

cool01 — Fri, 15 Dec 2017 01:08:18 GMT

Sir please see the show command of our configuration, still again no internet access in our Multiple DHCP. Thanks

Router#sh ip int brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            103.225.36.242 YES NVRAM up                    up
FastEthernet0/1            unassigned      YES manual up                    up
FastEthernet0/1.10         192.168.10.1    YES manual up                    up
FastEthernet0/1.20         192.168.20.1    YES manual up                    up
Serial0/0/0                unassigned      YES NVRAM administratively down down
NVI0                       unassigned      YES unset up                    up
Router#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is 103.225.36.241 to network 0.0.0.0

     103.0.0.0/30 is subnetted, 1 subnets
C       103.225.36.240 is directly connected, FastEthernet0/0
C    192.168.10.0/24 is directly connected, FastEthernet0/1.10
C    192.168.20.0/24 is directly connected, FastEthernet0/1.20
S*   0.0.0.0/0 [1/0] via 103.225.36.241
Router#sh int fa0/0
FastEthernet0/0 is up, line protocol is up
Hardware is Gt96k FE, address is 0024.9790.c502 (bia 0024.9790.c502)
Description: Link_to_BlackFiber$ETH-LAN
Internet address is 103.225.36.242/30
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
     reliability 255/255, txload 2/255, rxload 19/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 7492000 bits/sec, 1019 packets/sec
5 minute output rate 1161000 bits/sec, 802 packets/sec
     19548534 packets input, 1761729385 bytes
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog
     0 input packets with dribble condition detected
     14368984 packets output, 3187275944 bytes, 0 underruns
     0 output errors, 0 collisions, 4 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out
Router#sh int fa0/1
FastEthernet0/1 is up, line protocol is up
Hardware is Gt96k FE, address is 0024.9790.c503 (bia 0024.9790.c503)
Description: Link_to_LAN$ETH-LAN$$ES_LAN$
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
     reliability 255/255, txload 17/255, rxload 2/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:03, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 848000 bits/sec, 497 packets/sec
5 minute output rate 6948000 bits/sec, 699 packets/sec
     14172978 packets input, 3193396309 bytes
     Received 32367 broadcasts, 0 runts, 0 giants, 0 throttles
     15 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog
     0 input packets with dribble condition detected
     19344740 packets output, 1734312529 bytes, 0 underruns
     0 output errors, 0 collisions, 4 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out
Router#ping google.com
Translating "google.com"...domain server (103.225.36.238) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.58.200.14, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/22/24 ms
Router#ping 103.225.36
% Unrecognized host or address, or protocol not running.

Router#ping 103.225.36.238

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 103.225.36.238, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms

Re: How to configure Multiple DHCP with internet access

cool01 — Mon, 18 Dec 2017 01:42:13 GMT

Already resolve my problem. Thank you very much sir, really appreciated.