cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1297
Views
0
Helpful
3
Replies

1941/K9 router configuration issue

Dear All,

We configured 1941 k9 router for inernet purpose

ip name-server 218.248.255.146
ip name-server 218.248.255.212
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1941/K9 sn FHK144773MG
!
!
interface GigabitEthernet0/0
ip address x.x.x.x 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
ip forward-protocol nd
!
ip http server
no ip http secure-server
!
ip nat inside source list 2 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 x.x.x.x
!
access-list 2 permit any

when i given

access-list 2 permit 192.168.1.0 0.0.0.255

in my local systems internet is not working.

when i configured access-list 2 permit any .

Internet working on local systems but we are not able to connect telnet.

Give me solution.

3 Replies 3

Richard Burts
Hall of Fame
Hall of Fame

I have seen problems with telnet access when address translation was configured with an access list using permit any. The usual solution is to use an access list that permits the local subnet. I know that you say that Internet does not work when you that kind of access list. But I believe that solving that problem will be the solution to the telnet problem.  HTH  Rick

HTH

Rick

Nikita Singh
Cisco Employee
Cisco Employee

I would suggest that you use an extended access-list.

ip access-list extended 123

permit ip 192.168.1.0 0.0.0.255 any

Change the nat statement as well:

ip nat inside source list 123 interface GigabitEthernet0/0 overload

If you still have issues, please send the whole config.

dijohn
Cisco Employee
Cisco Employee

Try telnetting to the inside interface?. Can't you do that?