cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1338
Views
0
Helpful
5
Replies

DHCP Problem when NAT is Enable

AlexBar76
Level 1
Level 1

Hi,

 

I've a trouble on a simple configuration.

I need to connect a cisco c1111 router with a modem tooway, 

the cisco have the gigabiteth under dhcp and need to acquire the address from the tooway

from the other side I have some clients that need to access to internet and also the cisco c1111 made a tunnel gre on another site for a private connection

no problem even i insert the nat rule on cisco so this stop to acquire the address from DHCP 

if i remove the nat rule this start to work again and take the ip from tooway dhcp

but i need the nat for the internet connetcion for the clients 

Any solution ?? 

 

Thanks a lot

Alessandro

1 Accepted Solution

Accepted Solutions

Hello,

 

the problem is most likely that the access list (197) used for NAT has 'permit ip any any' configured, which does not work for NAT.

 

Change the access list to:

 

ip access-list extended 197
10 permit ip 10.0.0.0 0.0.255.255 any
20 permit udp any any eq bootpc

View solution in original post

5 Replies 5

balaji.bandi
Hall of Fame
Hall of Fame

I believe you need to exempt the IP range from NAT exemption.Can you post the configuration show run from the device . and explain where is the DHCP Server and remote VPN address?

 

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

AlexBar76
Level 1
Level 1

Hi

Thanks, this is the configuration, i've put a note on the ip nat 

do not see the tunnel because i'm not already made firs i need to solve the DHCP problem 

many thanks for you help

 

A

Hello,

 

the problem is most likely that the access list (197) used for NAT has 'permit ip any any' configured, which does not work for NAT.

 

Change the access list to:

 

ip access-list extended 197
10 permit ip 10.0.0.0 0.0.255.255 any
20 permit udp any any eq bootpc

Many thanks

 

Yes now the DHCP aquire without problems

I Have also modify the defaul route in this way

ip route 0.0.0.0 0.0.0.0 gigabitethernet0/0/1 dhcp

 

Many thanks for you support

regards

Alessandro 

i may be late here, glad to know all working by removing that ACL, thank you.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help