12-23-2010 03:16 AM - edited 03-04-2019 10:52 AM
Dear All,
We configured 1941 k9 router for inernet purpose
ip name-server 218.248.255.146
ip name-server 218.248.255.212
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1941/K9 sn FHK144773MG
!
!
interface GigabitEthernet0/0
ip address x.x.x.x 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
ip forward-protocol nd
!
ip http server
no ip http secure-server
!
ip nat inside source list 2 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 x.x.x.x
!
access-list 2 permit any
when i given
access-list 2 permit 192.168.1.0 0.0.0.255
in my local systems internet is not working.
when i configured access-list 2 permit any .
Internet working on local systems but we are not able to connect telnet.
Give me solution.
12-28-2010 09:07 PM
I have seen problems with telnet access when address translation was configured with an access list using permit any. The usual solution is to use an access list that permits the local subnet. I know that you say that Internet does not work when you that kind of access list. But I believe that solving that problem will be the solution to the telnet problem. HTH Rick
12-28-2010 09:31 PM
I would suggest that you use an extended access-list.
ip access-list extended 123
permit ip 192.168.1.0 0.0.0.255 any
Change the nat statement as well:
ip nat inside source list 123 interface GigabitEthernet0/0 overload
If you still have issues, please send the whole config.
12-28-2010 09:34 PM
Try telnetting to the inside interface?. Can't you do that?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide