11-29-2016 08:51 AM - edited 03-05-2019 07:34 AM
I have setup a 1921 Cisco router to connect to and ISP to provide Guest Wifi and I am in the early stages of setting it up. the config is below but from a client PC plugged in gi0/1 I can ping 216.589.214.35 but when I open IE it won't connect.
I can also ping everything from the router except the client PC 192.168.0.11 which is supplied via DHCP from the router
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname TEST
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
no ipv6 cef
ip source-route
ip cef
!
!
!
ip dhcp excluded-address 192.168.0.1 192.168.0.10
!
ip dhcp pool DHCP_GUEST
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
!
!
multilink bundle-name authenticated
!
password encryption aes
crypto pki token default removal timeout 0
!
!
!
!
username admin privilege 15 secret 5
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description Link_to_ZEN
no ip address
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
no mop enabled
!
interface GigabitEthernet0/1
ip address 192.168.0.1 255.255.255.0
ip nat inside
no ip virtual-reassembly in
ip tcp adjust-mss 1452
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
interface Dialer1
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp chap hostname xxxxxxx
ppp chap password 0 xxxxxxx
ppp pap sent-username xxxxxxx password 0 xxxxxxx
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 10 interface Dialer1 overload
ip nat inside source list DSL_ACCESSLIST interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip access-list extended DSL_ACCESSLIST
permit ip any any
!
access-list 10 permit 192.168.0.0 0.0.0.255
!
!
control-plane
!
!
line con 0
login local
line aux 0
line 2
line vty 0 4
login local
transport input ssh
!
scheduler allocate 20000 1000
end
Also the out put from "sh ip route" and "sh ip int bri"
----------------------------------------------------------------------------------------------------
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
S* 0.0.0.0/0 is directly connected, Dialer1
62.0.0.0/32 is subnetted, 1 subnets
C 62.3.80.17 is directly connected, Dialer1
88.0.0.0/32 is subnetted, 1 subnets
C 88.97.23.187 is directly connected, Dialer1
192.168.0.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.0.0/24 is directly connected, GigabitEthernet0/1
L 192.168.0.1/32 is directly connected, GigabitEthernet0/1
--------------------------------------------------------------------------------------------------------------------
Any interface listed with OK? value "NO" does not have a valid configuration
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 unassigned YES unset up up
GigabitEthernet0/1 192.168.0.1 YES manual up up
Serial0/0/0 unassigned YES unset administratively down down
Dialer1 88.97.23.187 YES IPCP up up
NVI0 unassigned NO unset up up
Virtual-Access1 unassigned YES unset up up
Virtual-Access2 unassigned YES unset up up
-------------------------------------------------------------------------------------------------------------------
Solved! Go to Solution.
11-29-2016 09:15 AM
Hello,
could be just a DNS problem. Try and add the Google DNS servers to your DHCP pool:
ip dhcp pool DHCP_GUEST
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8 8.8.4.4
11-29-2016 09:02 AM
Hello,
try and add:
dialer-list 1 protocol ip permit
to the configuration.
11-29-2016 09:15 AM
Hi
I added dialer-list 1 protocol ip permit but the client still fails to open a web page from IE but yet can still ping 216.58.214.35, I have tried another PC and that to has the same issue.
11-29-2016 09:15 AM
Hello,
could be just a DNS problem. Try and add the Google DNS servers to your DHCP pool:
ip dhcp pool DHCP_GUEST
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8 8.8.4.4
11-29-2016 09:20 AM
I had just thought of the very same thing, and once added the DNS servers everything worked, Thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide