2911 Router, ping OK but web

[pavel_avant]

Hi i have some issues with router configuration. I cannot open any external web pages, but ping or telnet is just fine. Im using router-on-a-stick scenario. Router connected to LAN trough EtherSwitch module. Config attached.

[lgijssel]

Please change your default route as follows:

ip route 0.0.0.0 0.0.0.0 83.x.x.109

Is the next hop a firewall perhaps?

If so, pls check that it allows tcp port 80 (www) traffic.

regards,

Leo

[pavel_avant]

Did, no luck. 83.x.x.109 isnt a firewall.

[lgijssel]

Almost too obvious:

Do you have a (valid) dns configured on your clients?

regards,

Leo

[pavel_avant]

Sure, nslookup looks good. Nothing helps, even if i set my other local router as next hop for 0.0.0.0 0.0.0.0.

[lgijssel]

Still I have a feeling there is something obvious which you are not giving away.

Your nat connection looks ok because other protocols than www are working, i.e. dns and telnet.

Did you test with proper public addresses or url's?

Perhaps you only think that you have Internet connectivity but in fact you don't.

To test this, connect your client to the next-hop device instead of the router and give it the ip of the router's outside interface.

Set the default gw manually to the next-hop device as well.

Then configure the public dns from your ISP and test it. If this doesn't work, your Internet connection is malfunctioning.

Success!

Leo

[pavel_avant]

Thanks Leo, i'll do it tomorrow, when i'll be there.

[pavel_avant]

Done with tests. PC direct connected to external vlan with public ip and 83.x.x.109 as gw works fine. I've swapped 2911 for 1921 router with almost the same configuration, except trunk encapsulation (its running dot1q from now) - everything looks great now.

[lgijssel]

Thank you for rating helpful posts!

regards,

Leo