Routing issues

[chicagotech]

There are 3 routers in the main office. OX router (outside x.x.x.x and inside 192.168.0.250) connects the Internet. Cisco 1841 192.168.0.81 and USR 8200 192.168.0.95 connect to a switch. Both 192.168.0.x and 192.168.2.x subnets can access the Internet without any issues.

Cisco 1841 192.168.100.1 in the main office also connects to Cisco 1841 192.168.100.2 in a remote office. The remote office 192.168.1.x can access the main office without problems, but no Internet. The computers in the remote office even can’t ping the OX router 192.168.0.250. Tracert 4.2.2.1 stop 192.168.100.1.

The main office 1841 has these routing command

ip route 0.0.0.0 0.0.0.0 192.168.0.250

ip route 192.168.1.0 255.255.255.0 192.168.100.2

The remote office 1841 has these routing command

ip route 0.0.0.0 0.0.0.0 192.168.100.1

ip route 192.168.0.0 255.255.255.0 192.168.100.1

Ay ideas why the remote office can’t access the Internet?

The drawing can be found here http://www.howtonetworking.com/ciscoissues.htm

Bob Lin, MS-MVP, MCSE & CNE

How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com

[pkhatri]

Hi,

Could you apply the following, attempt to ping an internet address from a 192.168.1.x and then get the output of 'sh ip nat translations' from the 1841 router:

interface FastEthernet0/1

ip address 192.168.0.81 255.255.255.0

ip nat outside

interface Serial0/0/0

ip address 192.168.100.1 255.255.255.0

ip nat inside

access-list 10 permit 192.168.1.0 0.0.0.255

ip nat pool NAT 192.168.0.x 192.16.0.x netmask 255.255.255.252 ! replace x with an unused address from the 192.168.0.0 netwok

ip nat inside source list 10 pool NAT overload

Paresh

[chicagotech]

Hi Paresh,

Thank you for the reply. I can’t do much about that now. Sometimes I make a change, two offices can’t talk to each and I need someone to reset the Cisco Router for me (I access these routers remotely). May the following information help you?

On 192.168.0.81 (main office Cisco router)

show ip nat trans

Pro Inside global Inside local Outside local Outside global

tcp 192.168.0.81:23 192.168.100.1:23 192.168.0.95:1973 192.168.0.95:1973

tcp 192.168.0.81:80 192.168.100.1:80 192.168.0.95:4950 192.168.0.95:4950

--- 192.168.0.81 192.168.100.1 --- ---

show ip nat stat

Total active translations: 3 (1 static, 2 dynamic; 2 extended)

Outside interfaces:

FastEthernet0/1

Inside interfaces:

FastEthernet0/0, Serial0/0/0

Hits: 6729 Misses: 180

CEF Translated packets: 3710, CEF Punted packets: 0

Expired translations: 161

Dynamic mappings:

Queued Packets: 0

I can ping the XO router (192.168.0.250) from 192.168.0.81 but not 192.168.1.91.

ping 192.168.0.250 (from 192.168.0.81)

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.0.250, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

ping 192.168.0.250 (from 192.168.1.91)

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.0.250, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

[chicagotech]

The remote Office router (192.168.100.2/192.168.1.91) has these route. Do you think this is the problem?

ip route 0.0.0.0 0.0.0.0 192.168.100.1

ip route 192.168.0.0 255.255.255.0 192.168.100.1

Thank you!