So, I have a new 2921 connecting to a 100Mbps service (Internode NTU).
If I bypass the router and connect a laptop directly to the NTU I get blistering 95Mbps ...
But through the router, with very simple config I cannot get pages to load, they timeout.
I can ping from the router, both IP and domain name ... so DNS is working.
It seems like the inside interface is where the problem is ... but I cannot work out why.
Config below:
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname suho-wg
!
boot-start-marker
boot-end-marker
!
!
logging buffered 100000
enable secret 5 $1$MkZt$Of0N/7EqA7R6sa2n9dvzw1
!
aaa new-model
!
!
!
!
!
!
!
aaa session-id common
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip dhcp excluded-address 172.16.1.1
!
ip dhcp pool LAN
import all
network 172.16.1.0 255.255.255.0
default-router 172.16.1.1
dns-server 203.8.183.1 192.189.54.33
!
!
!
ip domain name suho.local
ip name-server 203.8.183.1
ip name-server 192.189.54.33
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
cts logging verbose
!
!
voice-card 0
!
!
!
!
!
!
!
!
license udi pid CISCO2921/K9 sn FGL191110N9
license boot module c2900 technology-package securityk9
license boot module c2900 technology-package NtwkEssSuitek9
!
!
username admin privilege 15 secret 5 $1$EbP3$BEExZfHhQ4QyEBnfr86wB0
username ssh password 0 *******
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address *.*.*.* 255.255.255.252
ip access-group TEST in
ip mtu 1492
ip nat outside
ip virtual-reassembly in
ip tcp adjust-mss 1452
duplex auto
speed auto
!
interface GigabitEthernet0/2
ip address 172.16.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
!
ip forward-protocol nd
!
ip http server
no ip http secure-server
!
ip dns server
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 *.*.*.*
!
ip access-list extended TEST
permit ip 172.16.1.0 0.0.0.255 any
permit icmp any any
permit udp 172.16.1.0 0.0.0.255 any
permit tcp 172.16.1.0 0.0.0.255 any
permit udp any any eq domain
permit udp any eq domain any
permit tcp any any eq www
permit tcp any any
permit ip any any
!
!
!
access-list 199 permit udp any any eq domain
access-list 199 permit udp any eq domain any
!
!
!
control-plane
!
!
!
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
transport input ssh
!
scheduler allocate 20000 1000
!
end
