cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
955
Views
10
Helpful
6
Replies

2901 Router - Router can hit ISP but not LAN Devices

dirk-demar
Level 1
Level 1

Hello All,

 

I recently purchased a 2910 Router in hopes of replacing my two Linksys routers with it, I also have a 2504 WLC on the way with 4 3600 AP's but that will be for later. I have researched this issue from quite a few other posts on here but nothing has helped.

 

Setup at this time is simple:

 

Arris Cable Modem to g0/0 of the 2901 - IP to g0/0 via DHCP

 

Laptop to g0/1 of the 2901 - Static IP on g0/1- 192.168.25.62 /26 - g0/1 will eventually go to a managed switch the way the existing Linksys router is. Note: the Linksys is set with the same IP configuration. I am merely switching cables between the two when testing

 

Here is the issue, all devices behind g0/1 cannot access the internet. For simplified testing, this is only the laptop direct to g0/1 but I did try other devices via g0/1 to the switch. The 2910 can hit the internet via IP. I have verified a DHCP address on g0/0 from the ISP. Not sure what I am missing or if I fat fingered something but any insight would be appreciated. I have tried different routes / natting / acl's but no change. Show nat commands also yield nothing at all.

 

Running config:

 

2901-ROUTER#sh run
Building configuration...


Current configuration : 2084 bytes
!
! Last configuration change at 14:42:31 EST Tue Feb 4 2020
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 2901-ROUTER
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
aaa new-model
!
!
!
!
!
!
!
aaa session-id common
ethernet lmi ce
clock timezone EST -5 0
clock summer-time EDT recurring
!
!
!
!
!
!
!
!
!
ip dhcp excluded-address 192.168.25.19 192.168.25.62
!
ip dhcp pool DHCP POOL
network 192.168.25.0 255.255.255.192
default-router 192.168.25.62
dns-server 8.8.8.8 8.8.4.4
!
!
!
ip domain name SHREDDER.LOCAL
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
license udi pid CISCO2901/K9 sn FJC1913A0UM
!
!
username xxxxxxxxxx privilege 15 secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description WAN-INTERFACE
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
description LAN-INTERFACE
ip address 192.168.25.62 255.255.255.192
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
ip default-gateway 192.168.25.62
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 101 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 dhcp
ip ssh version 2
!
!
!
access-list 101 permit ip 192.168.25.0 0.0.0.6 any
!
!
!
control-plane
!
!
!
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
transport preferred ssh
transport input ssh
!
scheduler allocate 20000 1000
!
end

2901-ROUTER#

 

 

Thank you in advance for any assistance.

 

Dirk

 

2 Accepted Solutions

Accepted Solutions

Hello,

 

not sure if this is a typo ?

 

access-list 101 permit ip 192.168.25.0 0.0.0.6 any

 

This needs to be:

 

access-list 101 permit ip 192.168.25.0 0.0.0.63 any

View solution in original post

The ip default-gateway has no effect, you might as well remove it, it won't make a difference...

View solution in original post

6 Replies 6

Hello,

 

not sure if this is a typo ?

 

access-list 101 permit ip 192.168.25.0 0.0.0.6 any

 

This needs to be:

 

access-list 101 permit ip 192.168.25.0 0.0.0.63 any

That did it. I must have gone blind on that. Thank you very much!!

balaji.bandi
Hall of Fame
Hall of Fame

Try remove below command :

 

no ip default-gateway 192.168.25.62

 

change the wild mask

 

access-list 101 permit ip 192.168.25.0 0.0.0.63 any

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

The wild card mask fixed the issue. Not sure if I would still need to remove the GW

 

Thanks for everyone's quick replies

The ip default-gateway has no effect, you might as well remove it, it won't make a difference...

Thanks again.

 

Dirk

Review Cisco Networking for a $25 gift card