cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
477
Views
0
Helpful
1
Replies

Cannot ping out to the internet

lennys1972
Level 1
Level 1

I have a small Supermicro server behind a router, and while I can access the server from outside over ports 22, 80 and 443 I cannot ping out from the inside. Something is causing packets generated by my server to be dropped, and I need help figuring it out. Here's my router config, its a Cisco 2811. What am I missing?

 

 

Building configuration...


Current configuration : 1667 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname lennys-router
!
boot-start-marker
boot-end-marker
!
! card type command needed for slot/vwic-slot 0/0
logging message-counter syslog
enable secret 5 dflgjkdsfgnhkdsujrghwerkgfjwes
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef    
!
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!         
!
voice-card 0
 no dspfarm
!
!
!
!
!
username lennys secret 5 sdfg,jsd,fgnskldjfgsdrgfilkj
archive
 log config
  hidekeys
! 
!
!
!
!
ip ssh version 2
!
!
!
!
interface FastEthernet0/0
 ip address 45.x.x.x 255.255.255.248
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
router ospf 10
 log-adjacency-changes
 network 45.x.x.x 0.0.0.7 area 0
 default-information originate
!
router ospf 1
 log-adjacency-changes
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 45.x.x.x
no ip http server
no ip http secure-server
!
!
ip nat inside source static tcp 192.168.1.10 22 45.x.x.x 22 extendable
ip nat inside source static tcp 192.168.1.10 80 45.x.x.x 80 extendable
ip nat inside source static tcp 192.168.1.10 443 45.x.x.x 443 extendable
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
!
!
!
!
!
control-plane
!
!
!
voice-port 0/1/0
!
voice-port 0/1/1
!
voice-port 0/1/2
!
voice-port 0/1/3
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 exec-timeout 0 0
 login local
 transport input ssh
!
scheduler allocate 20000 1000
end
1 Accepted Solution

Accepted Solutions

YOU need
below command 
ip nat inside source list 1 interface f0/0 overloal

View solution in original post

1 Reply 1

YOU need
below command 
ip nat inside source list 1 interface f0/0 overloal