03-13-2012 08:19 PM - edited 03-07-2019 05:32 AM
I am having an issue accessing the internet from a PC on the LAN. I have configured the PC with the gateway of the router infront of the ISP to test. I can ping from the router to google or any other internet IP. From the PC I can ping to the GIG0/1 (Inside LAN IP) and the GIG0/0 (Outside WAN IP going to ISP) but I can't ping the Next Hop IP of the ISP or anything past that. If I do a trace route from the PC to the google IP address it hits the GIG0/1 Inside LAN IP Address but fails from there. Here is a cut down snap shot of the router config, any help would be appreciated. Thank you.
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router-1941
!
boot-start-marker
boot-end-marker
!
!
no logging buffered
enable password 7 erty65512312343532q
!
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
!
!
!
!
!
aaa session-id common
!
clock timezone CST -6 0
clock summer-time cdt recurring
!
no ipv6 cef
ip source-route
ip cef
!
!
!
!
!
no ip domain lookup
ip domain name ourdomain.local
ip name-server 10.10.11.15
ip name-server 10.10.11.50
!
multilink bundle-name authenticated
!
!
!
crypto stuff bluh bluh bluh
!
!
username user1 privilege 15 secret 5 erhzxcghkjtyrsztreweryhre
username user2 secret 5 wertdjusyae54567uyytrtaretsydd
!
redundancy
!
!
!
!
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
!
!
!
!
!
!
!
interface Loopback0
no ip address
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description Outside WAN
ip address 68.68.68.68 255.255.255.248
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
description Inide LAN
ip address 10.10.35.10 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
ip forward-protocol nd
!
ip http server
ip http authentication aaa
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
!
ip nat source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 <ISP Next hop>
ip route 10.0.0.0 255.255.0.0 10.10.35.1(Gateway Router)
!
access-list 1 permit 10.10.35.0 0.0.0.255
!
!
!
!
!
snmp-server community strategic RW
snmp-server enable traps tty
tacacs-server host 10.10.11.41
tacacs-server key 7 123435465789123456
!
!
!
control-plane
!
!
!
line con 0
Solved! Go to Solution.