The router in green has the following commands (to allow internet access to the vlans):
Each vlan has: ip nat inside
Then, the router has a list of the vlans created:
ip access-list standard MIS-REDES
permit 22.214.171.124 0.0.0.255 <----vlan 100
permit 126.96.36.199 0.0.0.255 <----vlan 120
permit 188.8.131.52 0.0.0.255 <----vlan 140
And then, we added the net interface:
ip nat inside source list MIS-REDES interface fa0/0 overload <----interfaz fa0/0
All vlans in the green area can access internet without any problem.
But in the blue section we have the second router (connected to the first one), which has internet. But when I added the vlans to this router, they do not have internet access. I tried using the same commands as in the first router, but unsuccessfully.
How can the vlans for the second router get internet access?
Does anyone know if the commands have to be different?
Things to keep in mind: -Only the border router should perform NAT. -As the border router needs a default route to route packets to unknown destinations, other routers also need a default route to know where to send packets to an unknown destination.
-All internal interfaces of the border router must be indicated as ip nat inside. -The border router must have a route to internal destinations, whether you learn them by a routing protocol or by static routes.
Check those parameters and let us know if they work for you.