ISP TO ROUTER ISR 4300 TO CISCO CATALYST 3650

[blitzkirze]

Hi,

I having a hardtime configuring my devices to connect through internet, my router reached the isp but switch can't reached. I plugged my pc in switch and no internet access. Here's my configuration.

ISP ADDRESS : 24.50.185.72/29

GATEWAY : 24.50.185.73

ROUTER :

G0/0/0 : 24.50.185.74/29

IP ROUTE TO : 24.50.185.73

G0/0/1 : VLAN 10 10.1.1.1/24

VLAN 20 10.1.2.1/24

VLAN 30 10.1.3.1/24

SWITCH : 

G1/0/24 : SWITCHPORT TRUNK

SWITCHPORT ACCESS VLAN 10

G1/0/1 : SWITCHPORT ACCESS VLAN 20

G1/0/2 : SWITCHPORT ACCESS VLAN 30

Still my segment doesn't reached the other segment and no internet.

Thank you in advance.

[Deepak Kumar]

Hi,

Your router configuration will be like:

interface G0/0/0

no shut

IP address 24.50.185.74 255.255.255.248

ip nat outside

!

interface G0/0/1 

no shut

!

interface GigabitEthernet0/0/1.1
encapsulation dot1Q 10 native
ip address 10.1.1.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452
!
interface GigabitEthernet0/0/1.2
encapsulation dot1Q 20
ip address 10.1.2.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452

!

interface GigabitEthernet0/0/1.3
encapsulation dot1Q 30
ip address 10.1.3.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452

!

!

ip route 0.0.0.0 0.0.0.0 24.50.185.73

!

!

IP access extended NATING

Permit IP 10.1.1.0 0.0.0.255 any 

Permit IP 10.1.2.0 0.0.0.255 any 

Permit IP 10.1.3.0 0.0.0.255 any 

!

!

Ip nat inside source NATING interface GigabitEthernet0/0/0

!

!

Switch Configuration:

VLAN 10

!

VLAN 20

!

VLAN 30

!

Interface G1/0/24

switchport mode trunk

Switchport trunk allowed VLAN 10,20,30

Switchport trunk native vlan 10

no shut

!

!

Connection Details:

A cable is connected between Router port GigabitEthernet0/0/1 and Switch port G1/0/24.

WAN connection terminated on router Port GigabitEthernet0/0/0.

Regards,

Deepak Kumar

[blitzkirze]

Hi,
already configured the Router and Switch according to your instruction, the only problem I got is I can't reached/ping the switch through my Router but I can ping/reached the PC connected to my switch through router.

I tried to set an ip address to my switch g1/0/24: 10.1.1.2/24 ip route to router which is 10.1.1.1

but result is still no good. Can you help me please 😅

Thank you so much.

[Deepak Kumar]

Hi,

Configure your switch like this:

interface VLAN 10

IP address 10.1.1.2 255.255.255.0

Regards,

Deepak Kumar

[blitzkirze]

Already done but still can't reached. Is the problem is in my switch that's why I done have an internet ?
PC-router and router-pc is pingable. And there is also another problem when i check pc-pc which in different segment it can't reached each other.

vlan 20 pc - vlan 30 pc.

I don't have a cisco background sorry for the trouble.

[Deepak Kumar]

Hi,

Sorry I missed one more command on the switch: 

ip default-gateway 10.1.1.1

And modify few things on the Router:

no IP access extended NATING

!

IP access extended NATING

deny IP 10.1.0.0 0.0.255.255 10.1.0.0 0.0.255.255

Permit IP 10.1.1.0 0.0.0.255 any 

Permit IP 10.1.2.0 0.0.0.255 any 

Permit IP 10.1.3.0 0.0.0.255 any

Also, can you share Complete switch model number so we can configure the switch as L3 also if possible? 

Regards,

Deepak Kumar

[blitzkirze]

Hi,

I am using a Cisco Switch Catalyst 3650 24 ports.

I tried to use it as Layer 3 but when I can't create an inter vlan and when I check in the internet it does not support an encapsulation dot1q but maybe you can help me in there is another method to use my switch as a Layer 3.

Thank you.

[Deepak Kumar]

Hi,

Run Few commands:

config t

!

IP routing

!

Do Show IP route

!

Do Show version

and share output in a notepad file.

Regards,

Deepak Kumar

[blitzkirze]

Hi,

@Deepak Kumar 

please see attached file. Cisco Catalyst 3650.

Thank you,

[Deepak Kumar]

Hi,

Change the configuration as below:

interface G0/0/0

no shut

IP address 24.50.185.74 255.255.255.248

ip nat outside

!

interface G0/0/1 

no shut

no interface GigabitEthernet0/0/1.1
no interface GigabitEthernet0/0/1.2

no interface GigabitEthernet0/0/1.3

!

interface G0/0/1 

IP address 10.10.254.1 255.255.255.0

IP nat inside

ip tcp adjust-mss 1452

!

ip route 0.0.0.0 0.0.0.0 24.50.185.73

ip route 10.1.0.0 0.0.255.255 10.10.254.2

!

no IP access extended NATING

!

IP access extended NATING

Permit IP 10.1.1.0 0.0.0.255 any 

Permit IP 10.1.2.0 0.0.0.255 any 

Permit IP 10.1.3.0 0.0.0.255 any 

Permit ip 10.10.254.0 0.0.0.255 any

!

Ip nat inside source NATING interface GigabitEthernet0/0/0

!

!

Switch Configuration:

VLAN 10

!

VLAN 20

!

VLAN 30

!

VLAN 50

!

interface VLan 50

IP address 10.10.254.2 255.255.255.0

!

default Interface G1/0/24

!

Interface G1/0/24

switchport mode access

switchport mode access vlan 50

no shut

!

interface VLAN 10

iP address 10.1.1.1 255.255.255.0

!

interface VLAN 20

iP address 10.1.2.1 255.255.255.0

!

interface VLAN 30

iP address 10.1.3.1 255.255.255.0

!

Ip route 0.0.0.0 0.0.0.0 10.10.254.1

And your System Gateway must be Switch Interface IP as VLAN 20 Default Gateway will be 10.1.2.1 and for VLAN 30 default gateway will be 10.1.3.1 etc.

Regards,

Deepak Kumar

[blitzkirze]

Hi,

thanks for your help switch l3 now able to ping the isp ip address and gateway and same for the router but the pc doesn't have an internet. Pc to - L3 can't reached and Pc-Router also can't reached. For my last
2 question how can i have an access to internet ?

I've tried to configure my Cisco L3 like these.

Interface G1/0/1
switchport mode access
switchport access vlan 20
!
interface G1/0/2
switchport mode access
switchport access vlan 30

and if ever if have a budget for the L2 switch what is the configure to L3 to L2?

Thank you so much , you are the first person who help me regarding my concern hehe

[Deepak Kumar]

Please share your router and Switch configuration once So I can understand that what is missing.

Regards,
Deepak Kumar

[blitzkirze]

Hi,

@Deepak Kumar 

This is my configuration for both router and switch.

[Deepak Kumar]

Hi,
On the router run below commands:
no ip nat inside source list NATING interface GigabitEthernet0/0/0 overload
ip route 10.1.0.0 255.255.0.0 10.10.254.2
no ip route 10.1.0.0 255.255.255.0 10.10.254.2

Keep in mind that currently there are two same commands on the Cisco router.

ip nat inside source list NATING interface GigabitEthernet0/0/0 overload
ip nat inside source list Nating interface GigabitEthernet0/0/0 overload

Remove only one command.
Regards,
Deepak Kumar

[blitzkirze]

Hi,

wow.! all your configuration are working, but I have a new problem I hope I'm not troubling you I guess this will be the last (well I hope so xD) . When I tried to ping: PC1 ip address: 10.1.2.31/24 - PC2 ip address: 10.1.3.31/24 are not reachable. Hope you can help me on this one too.

Thank you for all the help you've done. THUMBS UP..