891F not passing traffic

[radder33]

I have just installed and configured our 891f router to sit behind our BT leased line and create a guest network away from our internal network.  We have moved away from a Draytek router which had the below settings for WAN access and I have used these in my config.  

WAN IP 194.72.126.50

Default Gateway 194.72.126.49

Obviously the Cisco doesn't ask for the default gateway so I created a static route for that.  Devices get a DHCP address correctly and the 891f passes the ping and WAN connection tests from the router but none of the guest devices get an internet connection.  Can anyone advise if there is anything wrong or missing from the config?

urrent configuration : 2636 bytes
!
! Last configuration change at 11:13:48 GMT Thu Jun 7 2018 by ukadmin
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname UKCVWSSL
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 $1$vfpF$QcKwX/pUuri4ZVUk4g5lW0
enable password 7 097F4D014810031719
!
no aaa new-model
clock timezone GMT 0 0
!
!
!
!
!
!

!
ip dhcp excluded-address 172.22.226.1 172.22.226.30
!
ip dhcp pool WSSL
import all
network 172.22.226.0 255.255.255.0
default-router 172.22.226.10
domain-name WSSL
dns-server 172.22.226.10 172.22.226.10
!
!
!
ip domain name WSSL
ip name-server 194.72.6.57
ip name-server 194.73.82.242
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C891F-K9 sn FCZ221712CG
!
!
username ukadmin privilege 15 password 7 0326570A0504024D5A5B4A
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
!
interface FastEthernet0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0
no ip address
!
interface GigabitEthernet1
no ip address
shutdown
!
interface GigabitEthernet2
no ip address
shutdown
!
interface GigabitEthernet3
no ip address
shutdown
!
interface GigabitEthernet4
switchport access vlan 2
no ip address
!
interface GigabitEthernet5
switchport access vlan 2
no ip address
!
interface GigabitEthernet6
no ip address
shutdown
!
interface GigabitEthernet7
no ip address
shutdown
!
interface GigabitEthernet8
description PrimaryWANDesc_WSSL
ip address 194.72.126.50 255.255.255.248
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 172.22.226.10 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Async3
no ip address
encapsulation slip
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
!
!
ip nat inside source list nat-list interface GigabitEthernet8 overload
ip route 0.0.0.0 0.0.0.0 194.72.126.49
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
!
!
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
line con 0
exec-timeout 5 30
password 7 0326570A0504024D5A5B4A
login
no modem enable
line aux 0
line 3
modem InOut
speed 115200
flowcontrol hardware
line vty 0 4
password 7 123B091611002F053E7977
login
transport input all
!
scheduler allocate 20000 1000
!
end

[Georg Pauwen]

Hello,

you are missing the access list specifed as your NAT source:

ip nat inside source list nat-list interface GigabitEthernet8 overload

Add the below to your config:

access-list extended nat list permit ip 172.22.226.0 0.0.0.255 any

[radder33]

Firstly thanks for the reply I attempted to add the line to the config but got an invalid marker on the extended part so I did my best to go through the commands and add the list and got this config but the issue is still not resolved.

I can add an ACL through CP express but unsure on that as well

User Access Verification

Password:
UKCVWSSL>show running
^
% Invalid input detected at '^' marker.

UKCVWSSL>enable
Password:
UKCVWSSL#show running
Building configuration...

Current configuration : 2705 bytes
!
! Last configuration change at 13:02:00 GMT Thu Jun 7 2018 by ukadmin
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname UKCVWSSL
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 $1$vfpF$QcKwX/pUuri4ZVUk4g5lW0
enable password 7 097F4D014810031719
!
no aaa new-model
clock timezone GMT 0 0
!
!
!
!
!
!

!
ip dhcp excluded-address 172.22.226.1 172.22.226.30
!
ip dhcp pool WSSL
import all
network 172.22.226.0 255.255.255.0
default-router 172.22.226.10
domain-name WSSL
dns-server 172.22.226.10 172.22.226.10
!
!
!
ip domain name WSSL
ip name-server 194.72.6.57
ip name-server 194.73.82.242
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C891F-K9 sn FCZ221712CG
!
!
username ukadmin privilege 15 password 7 0326570A0504024D5A5B4A
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
!
interface FastEthernet0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0
no ip address
!
interface GigabitEthernet1
no ip address
shutdown
!
interface GigabitEthernet2
no ip address
shutdown
!
interface GigabitEthernet3
no ip address
shutdown
!
interface GigabitEthernet4
switchport access vlan 2
no ip address
!
interface GigabitEthernet5
switchport access vlan 2
no ip address
!
interface GigabitEthernet6
no ip address
shutdown
!
interface GigabitEthernet7
no ip address
shutdown
!
interface GigabitEthernet8
description PrimaryWANDesc_WSSL
ip address 194.72.126.60 255.255.255.240
ip access-group WSSL out
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 172.22.226.10 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Async3
no ip address
encapsulation slip
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
!
!
ip nat inside source list nat-list interface GigabitEthernet8 overload
ip route 0.0.0.0 0.0.0.0 194.72.126.49
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
!
ip access-list standard WSSL
permit any
!
!
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
line con 0
exec-timeout 5 30
password 7 0326570A0504024D5A5B4A
login
no modem enable
line aux 0
line 3
modem InOut
speed 115200
flowcontrol hardware
line vty 0 4
password 7 123B091611002F053E7977
login
transport input all
!
scheduler allocate 20000 1000
!
end

UKCVWSSL#
UKCVWSSL#
UKCVWSSL#
UKCVWSSL#?
Exec commands:
<1-99> Session number to resume
access-enable Create a temporary Access-List entry
access-profile Apply user-profile to interface
access-template Create a temporary Access-List entry
archive manage archive files
audio-prompt load ivr prompt
auto Exec level Automation
beep Blocks Extensible Exchange Protocol commands
bfe For manual emergency modes setting
calendar Manage the hardware calendar
call Voice call
call-home Call-Home commands
ccm-manager Call Manager Application exec commands
cd Change current directory
clear Reset functions
clock Manage the system clock
cns CNS agents
configure Enter configuration mode
connect Open a terminal connection
copy Copy from one file to another
credential load the credential info from file system
crypto Encryption related commands.
cts Cisco Trusted Security Exec Commands
debug Debugging functions (see also 'undebug')
delete Delete a file
dir List files on a filesystem
disable Turn off privileged commands
disconnect Disconnect an existing network connection
do-exec Mode-independent "do-exec" prefix support
dot1x IEEE 802.1X Exec Commands
eap EAP Exec Commands
emadmin Extension Mobility Commands
emm Run a configured Menu System
enable Turn on privileged commands
eou EAPoUDP
erase Erase a filesystem
ethernet Ethernet parameters
event Event related commands
exit Exit from the EXEC
file-acct File mode accounting exec command
flush File mode accounting flush options
format Format a filesystem
fsck Fsck a filesystem
help Description of the interactive help system
hunt-group hunt group exec command
if-mgr IF-MGR operations
ip Exec commands for IP features
ip IP SLA Exec Command
ips Intrusion Prevention System
isdn Run an ISDN EXEC command on an ISDN interface
license License information
lig LISP Internet Groper
lock Lock the terminal
logging Handles logging operations
login Log in as a particular user
logout Exit from the EXEC
microcode microcode commands
mkdir Create new directory
monitor Monitoring different system events
more Display the contents of a file
mpls MPLS commands
mrinfo Request neighbor and version information from a multicast router
mstat Show statistics after multiple multicast traceroutes
mtrace Trace reverse multicast path from destination to source
name-connection Name an existing network connection
no Disable debugging functions
onep ONEP related commands
pad Open a X.29 PAD connection
partition Partition disk
ping Send echo messages
ppp Start IETF Point-to-Point Protocol (PPP)
pwd Display current working directory
release Release a resource
reload Halt and perform a cold restart
rename Rename a file
renew Renew a resource
restart Restart Connection
resume Resume an active network connection
rlogin Open an rlogin connection
rmdir Remove existing directory
routing-context Routing Context
rsh Execute a remote command
sdlc Send SDLC test frames
send Send a message to other tty lines
set Set system parameter (not config)
setup Run the SETUP command facility
show Show running system information
slip Start Serial-line IP (SLIP)
software Software commands
spec-file format spec file commands
ssh Open a secure shell client connection
start-chat Start a chat-script on a line
systat Display information about terminal lines
tclquit Quit Tool Command Language shell
tclsh Tool Command Language shell
telnet Open a telnet connection
terminal Set terminal line parameters
test Test subsystems, memory, and interfaces
traceroute Trace route to destination
trm Trend Registration Module
tunnel Open a tunnel connection
undebug Disable debugging functions (see also 'debug')
upgrade Upgrade commands
verify Verify a file
vlan Configure VLAN parameters
voice Voice Commands
vtp Configure global VTP state
waas IOS Wide Area Application Services
webvpn WebVPN exec command
where List active connections
write Write running configuration to memory, network, or terminal
x28 Become an X.28 PAD
x3 Set X.3 parameters on PAD
xconnect Xconnect EXEC commands

UKCVWSSL#
UKCVWSSL#
UKCVWSSL#
UKCVWSSL#
UKCVWSSL#access-list extended nat list permit ip 172.22.226.0 0.0.0.255 any
^
% Invalid input detected at '^' marker.

UKCVWSSL#conf t
Enter configuration commands, one per line. End with CNTL/Z.
UKCVWSSL(config)#access-list extended nat list permit ip 172.22.226.0 0.0.0.255 any
^
% Invalid input detected at '^' marker.

UKCVWSSL(config)#access-list?
access-list

UKCVWSSL(config)#access-list
% Incomplete command.

UKCVWSSL(config)#?
Configure commands:
aaa Authentication, Authorization and Accounting.
aal2-profile Configure AAL2 profile
access-list Add an access list entry
alias Create command alias
appfw Configure the Application Firewall policy
application Define application
aqm-register-fnf Export audio/voice stats to flow record
archive Archive the configuration
arp Set a static ARP entry
async-bootp Modify system bootp parameters
authentication Auth Manager Global Configuration Commands
auto Configure Automation
autoupgrade Auto Upgrade Manager simplifies image upgrade process
backhaul-session-manager Configure Backhaul Session Manager
banner Define a login banner
bba-group Configure BBA Group
beep Configure BEEP (Blocks Extensible Exchange Protocol)
bfd BFD configuration commands
bfd-template BFD template configuration
boot Modify system boot parameters
bridge Bridge Group.
bstun BSTUN global configuration commands
buffers Adjust system buffer pool parameters
busy-message Display message when connection to host fails
call Configure Call parameters
call-history-mib Define call history mib parameters
call-home Enter call-home configuration mode
call-manager-fallback SRST for Cisco Call Manager fallback. For Cisco Unified Communications Manager Express configuration use the 'telephony-service' command
capf-server CAPF Server
carrier-id Name of the carrier associated with this trunk group
ccm-manager Call Manager
cdp Global CDP configuration subcommands
cef Cisco Express Forwarding
chat-script Define a modem chat script
cisp Set CISP parameters
class-map Configure CPL Class Map
clock Configure time-of-day clock
cns CNS agents
config-register Define the configuration register
configuration Configuration access
connect cross-connect two interfaces
content-scan Content-Scan
control-plane Configure control plane services
credentials credentials service
crypto Encryption module
csdb Common Session Database
ctl-client CTL Client
cts Cisco Trusted Security commands
cwmp Configure CPE WAN Management Protocol(CWMP)
default Set a command to its defaults
default-value Default character-bits values
define interface range macro definition
device-sensor IOS Sensor Commands
dial-control-mib Define Dial Control Mib parameters
dial-peer Dial Map (Peer) configuration commands
dialer Dialer commands
dialer-list Create a dialer list entry
dlsw Data Link Switching global configuration commands
dnsix-dmdp Provide DMDP service for DNSIX
dnsix-nat Provide DNSIX service for audit trails
do-exec To run exec commands in config mode
dot1x IEEE 802.1X Global Configuration Commands
downward-compatible-config Generate a configuration compatible with older software
dspfarm Enable the dspfarm service
eap EAP Global Configuration Commands
emm Specify pre-loading of MDF
enable Modify enable password parameters
end Exit from configure mode
energywise EnergyWise Global Configuration Commands
eou EAPoUDP Global Configuration Commands
ephone-type define ethernet phone type
epm EPM Global Configuration Commands
errdisable Error disable
ethernet Ethernet configuration
event Event related configuration commands
exception Exception handling
exit Exit from configure mode
fax Configure fax parameters
file Adjust file system parameters
flow Global Flow configuration subcommands
flow-sampler-map Flow sampler configuration
format Format the output
frame-relay global frame relay configuration commands
gateway Gateway
global-address-family Enter address-family base routing topology mode
gw-accounting Enable voip gateway accounting.
help Description of the interactive help system
hostname Set system's network name
http HTTP Config
id-manager ID Pool Manager
ida-client IDA Client provides infra for communication with IDA on cisco server
identity Identity Configuration Commands
interface Select an interface to configure
ip Global IP configuration subcommands
ipc Configure IPC system
iphc-profile Configure IPHC profile
ipv6 Global IPv6 configuration commands
isdn ISDN configuration commands
isdn-mib Specify isdn mib parameters
iua Configure ISDN user Adaptation Layer
ivr ivr utility command
ixi IXI Config command
key Key management
kron Kron interval Facility
l2 Layer 2 configuration
l2protocol-tunnel Tunnel Layer2 protocols
l2tp Layer 2 Tunneling Protocol (L2TP) parameters
l2tp-class l2tp-class configuration
l3vpn l3vpn encapsulation ip commands
li-view LI View
license Configure license features
line Configure a terminal line
lldp Global LLDP configuration subcommands
logging Modify message logging facilities
login Enable secure login checking
login-string Define a host-specific login string
mab MAC Authentication Bypass Global Configuration Commands
mac-address-table Configure the MAC address table
mace Measurement Aggregation and Correlation Engine
macro Create a command macro
map-class Configure static map class
map-list Configure static map list
memory Configure memory management
memory-size Adjust memory size by percentage
menu Define a user-interface menu
metadata Metadata Application
mgcp Enable Media Gateway Control Protocol
microcode configure microcode
mmoip Multi Media Over IP
modem Modem Management configuration commands
modemcap Modem Capabilities database
monitor Monitoring different system events
mpls Configure MPLS parameters
mrcp MRCP(Real Time Streaming Protocol) configuration
mta Configure the Mail Transfer Agent
multilink PPP multilink global configuration
netbios NETBIOS access control filtering
netconf Configure NETCONF
no Negate a command or set its defaults
ntp Configure NTP
num-exp Dial Map Number Expansion configuration commands
object-group Configure ACL Object Group
onep ONEP functionality
parameter-map parameter map
parser Configure parser
password Configure encryption password (key)
per-call Per call debug
pfr Performance Routing configuration submodes
pfr-map Create pfr-map and enter pfr-map command mode
policy-map Configure Policy Map
ppp PPP global configuration
privilege Command privilege parameters
process Configure process
process-max-time Maximum time for process to run before voluntarily relinquishing processor
prompt Set system's prompt
pseudowire-class Pseudowire-class configuration
qos Global QoS configuration subcommands
rbe Commands for Routing RFC 1483 Ethernet encapsulated packets
regexp regexp commands
resource Configure Embedded Resource Manager (ERM)
resume-string Define a host-specific resume string
rif Source-route RIF cache
rlogin Rlogin configuration commands
rmon Remote Monitoring
route-map Create route-map or enter route-map command mode
route-tag Route Tag
router Enable a routing process
rtsp RTSP(Real Time Streaming Protocol) configuration
sampler Define a Sampler
sasl Configure SASL
sccp Enable Skinny Client Control Protocol
scheduler Scheduler parameters
scripting Configure options for scripting languages
secure Secure image and configuration archival commands
security Infra Security CLIs
service Modify use of network based services
service-routing Configure service-routing
shell Configure shell command
shutdown Shutdown system elements
signaling-class Configure signaling class
sip-ua SIP User Agent (UA)
snap SNAP configuration
snmp Modify non engine SNMP parameters
snmp-server Modify SNMP engine parameters
sntp Configure SNTP
spanning-tree Spanning Tree Subsystem
stacks Configure stacks
standby Global HSRP configuration commands
state-machine Define a TCP dispatch state machine
stcapp Start SCCP Telephony Control Application
stun STUN global configuration commands
subscriber Subscriber configuration
subscriber-policy Subscriber policy
subscription ASNL based Subscriptions configuration
table-map Configure Table Map
tacacs-server Modify TACACS query parameters
telephony-service Configure Cisco Unified Communications Manager Express
template Select a template to configure
terminal-queue Terminal queue commands
tftp-server Provide TFTP service for netload requests
time-range Define time range entries
track Object tracking configuration commands
translate Translate global configuration commands
translation-rule Global digit manipulation and translation
trunk Global trunk configuration
user-group User Group Configuration Commands
username Establish User Name Authentication
vc-group Define a Frame Relay VC group
virtual-profile Virtual Profile configuration
virtual-template Virtual Template configuration
vlan VLAN commands
vm-integration enable in-band DTMF integration with voicemail systems
voice Global voice configuration
voice-card Configure a specific voice-card
voice-ctl-file Configure a ctl-file instance
voice-phone-proxy Configure Phone proxy
voicecap Add a voicecap entry
voip-incoming Global incoming VoIP configuration
vpdn Virtual Private Dialup Network
vpdn-group VPDN group configuration
vpdn-template vpdn-template configuration
vrf VRF commands
vstack Configure vstack parameters and enable or disable SmartInstall
vtp Configure global VTP state
vty-async Enable virtual async line configuration
waas IOS Wide Area Application Services
warm-reboot Warm reboot allows quick reload in case of a crash or by request
webvpn SSL VPN Commands
wrr-queue Configure weighted round-robin xmt queues
wsma Configure Web Services Management Agents
x25 X.25 Level 3
x29 X29 commands
xconnect Xconnect config commands
xot Global XOT commands
zone FW with zoning
zone-pair Zone pair command

UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#
UKCVWSSL(config)#access-list ?
<1-99> IP standard access list
<100-199> IP extended access list
<1100-1199> Extended 48-bit MAC address access list
<1300-1999> IP standard access list (expanded range)
<200-299> Protocol type-code access list
<2000-2699> IP extended access list (expanded range)
<2700-2799> MPLS access list
<700-799> 48-bit MAC address access list
dynamic-extended Extend the dynamic ACL absolute timer
rate-limit Simple rate-limit specific access list

UKCVWSSL(config)#access-list
% Incomplete command.

UKCVWSSL(config)#access-list 100
% Incomplete command.

UKCVWSSL(config)#access-list 100 ?
deny Specify packets to reject
dynamic Specify a DYNAMIC list of PERMITs or DENYs
permit Specify packets to forward
remark Access list entry comment

UKCVWSSL(config)#access-list 100 permit ?
<0-255> An IP protocol number
ahp Authentication Header Protocol
eigrp Cisco's EIGRP routing protocol
esp Encapsulation Security Payload
gre Cisco's GRE tunneling
icmp Internet Control Message Protocol
igmp Internet Gateway Message Protocol
ip Any Internet Protocol
ipinip IP in IP tunneling
nos KA9Q NOS compatible IP over IP tunneling
object-group Service object group
ospf OSPF routing protocol
pcp Payload Compression Protocol
pim Protocol Independent Multicast
sctp Stream Control Transmission Protocol
tcp Transmission Control Protocol
udp User Datagram Protocol

UKCVWSSL(config)#access-list 100 permit ip ?
A.B.C.D Source address
any Any source host
host A single source host
object-group Source network object group

UKCVWSSL(config)#access-list 100 permit ip any ?
A.B.C.D Destination address
any Any destination host
host A single destination host
object-group Destination network object group

UKCVWSSL(config)#access-list 100 permit ip 172.22.226.0 0.0.0.255 any
UKCVWSSL(config)#
UKCVWSSL(config)#show running
^
% Invalid input detected at '^' marker.

UKCVWSSL(config)#exit
UKCVWSSL#show running
Building configuration...

Current configuration : 2678 bytes
!
! Last configuration change at 13:19:07 GMT Thu Jun 7 2018
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname UKCVWSSL
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 $1$vfpF$QcKwX/pUuri4ZVUk4g5lW0
enable password 7 097F4D014810031719
!
no aaa new-model
clock timezone GMT 0 0
!
!
!
!
!
!

!
ip dhcp excluded-address 172.22.226.1 172.22.226.30
!
ip dhcp pool WSSL
import all
network 172.22.226.0 255.255.255.0
default-router 172.22.226.10
domain-name WSSL
dns-server 172.22.226.10 172.22.226.10
!
!
!
ip domain name WSSL
ip name-server 194.72.6.57
ip name-server 194.73.82.242
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C891F-K9 sn FCZ221712CG
!
!
username ukadmin privilege 15 password 7 0326570A0504024D5A5B4A
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
!
interface FastEthernet0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0
no ip address
!
interface GigabitEthernet1
no ip address
shutdown
!
interface GigabitEthernet2
no ip address
shutdown
!
interface GigabitEthernet3
no ip address
shutdown
!
interface GigabitEthernet4
switchport access vlan 2
no ip address
!
interface GigabitEthernet5
switchport access vlan 2
no ip address
!
interface GigabitEthernet6
no ip address
shutdown
!
interface GigabitEthernet7
no ip address
shutdown
!
interface GigabitEthernet8
description PrimaryWANDesc_WSSL
ip address 194.72.126.60 255.255.255.240
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 172.22.226.10 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Async3
no ip address
encapsulation slip
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
!
!
ip nat inside source list nat-list interface GigabitEthernet8 overload
ip route 0.0.0.0 0.0.0.0 194.72.126.49
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
!
!
access-list 100 permit ip 172.22.226.0 0.0.0.255 any
!
control-plane
!
!

UKCVWSSL#
UKCVWSSL#
UKCVWSSL#

[Georg Pauwen]

Hello,

to simplify this, use the config below:

ip nat inside source list 1 interface GigabitEthernet8 overload
ip route 0.0.0.0 0.0.0.0 194.72.126.49
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
!
access-list 1 permit 172.22.226.0 0.0.0.255

[radder33]

Ok we now have this but no change with the issue

Building configuration...

Current configuration : 2686 bytes
!
! Last configuration change at 14:04:43 GMT Thu Jun 7 2018 by ukadmin
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname UKCVWSSL
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 $1$vfpF$QcKwX/pUuri4ZVUk4g5lW0
enable password 7 097F4D014810031719
!
no aaa new-model
clock timezone GMT 0 0
!
!
!
!
!
!

!
ip dhcp excluded-address 172.22.226.1 172.22.226.30
!
ip dhcp pool WSSL
import all
network 172.22.226.0 255.255.255.0
default-router 172.22.226.10
domain-name WSSL
dns-server 172.22.226.10 194.72.6.57 194.73.82.242
!
!
!
ip name-server 194.72.6.57
ip name-server 194.73.82.242
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C891F-K9 sn FCZ221712CG
!
!
username ukadmin privilege 15 password 7 0326570A0504024D5A5B4A
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
!
interface FastEthernet0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0
no ip address
!
interface GigabitEthernet1
no ip address
shutdown
!
interface GigabitEthernet2
no ip address
shutdown
!
interface GigabitEthernet3
no ip address
shutdown
!
interface GigabitEthernet4
switchport access vlan 2
no ip address
!
interface GigabitEthernet5
switchport access vlan 2
no ip address
!
interface GigabitEthernet6
no ip address
shutdown
!
interface GigabitEthernet7
no ip address
shutdown
!
interface GigabitEthernet8
description PrimaryWANDesc_WSSL
ip address 194.72.126.50 255.255.255.240
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 172.22.226.10 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Async3
no ip address
encapsulation slip
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
!
!
ip dns server
ip nat inside source list nat-list interface GigabitEthernet8 overload
ip route 0.0.0.0 0.0.0.0 194.72.126.49
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
!
!
access-list 1 permit 172.22.226.0 0.0.0.255
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
line con 0
exec-timeout 5 30
password 7 0326570A0504024D5A5B4A
login
no modem enable
line aux 0
line 3
modem InOut
speed 115200
flowcontrol hardware
line vty 0 4
password 7 123B091611002F053E7977
login
transport input all
!
scheduler allocate 20000 1000
!
end

[Georg Pauwen · Accepted solution]

Hello,

you almost got it.

The access list needs to match what you have in your NAT statement. Make sure it looks exactly like the line in bold:

ip dns server
ip nat inside source list 1 interface GigabitEthernet8 overload
ip route 0.0.0.0 0.0.0.0 194.72.126.49
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
!
access-list 1 permit 172.22.226.0 0.0.0.255

[radder33]

I honestly cannot thank you enough that has resolved it this has been driving me crazy

[Georg Pauwen]

Glad that you got it resolved....it was just one little detail missing...