Re: ASR 901 no Internet On LAN - Page 2

pavithran · ‎03-24-2019

My Configuration is below I'm able to ping websites inside the router. But unable to browse the internet on Lan IP address.

Building configuration...

Current configuration: 2680 bytes
!
! Last configuration change at 11:59:53 UTC Sun Mar 24 2019
! NVRAM config last updated at 10:46:41 UTC Sun Mar 24 2019
!
version 15.4
service config
service timestamps debug datetime msec
service timestamps log datetime msec
asr901-platf-multi-nni-cfm
!
hostname ROUTER
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
ip dhcp pool vois_pool
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 8.8.8.8 8.8.4.4
lease 0 1
!
!
ip name-server 8.8.8.8
ip name-server 8.8.4.4
no ipv6 cef
!
!
multilink bundle-name authenticated
l3-over-l2 flush buffers
!
!
spanning-tree mode pvst
spanning-tree extend system-id
license udi pid A901-6CZ-F-D sn CAT1832U26L
license accept end user agreement
license boot level AdvancedMetroIPAccess
!
!
!
interface GigabitEthernet0/0
no ip address
negotiation auto
service instance 1 ethernet
encapsulation untagged
bridge-domain 1
!
!
interface GigabitEthernet0/1
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/2
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/3
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/4
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/5
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/6
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/7
no ip address
negotiation auto
service instance 8 ethernet
encapsulation untagged
bridge-domain 8
!
!
interface GigabitEthernet0/8
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/9
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/10
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/11
no ip address
shutdown
negotiation auto
!
interface TenGigabitEthernet0/0
no ip address
shutdown
!
interface TenGigabitEthernet0/1
no ip address
shutdown
!
interface FastEthernet0/0
no ip address
shutdown
!
interface Vlan1
ip address 192.168.20.1 255.255.255.0

ip nat inside

!
interface Vlan8
ip address 10.70.70.254 255.255.255.0

ip nat outside

!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 10.70.70.1
!
access-list 1 permit 192.168.20.0 0.0.0.255
!
!
!
control-plane
!
environment monitor
!

exception crashinfo buffersize 128
!
!
end

pavithran · ‎03-28-2019

Is it necessary to have IPBase license? I have AdvancedIPMetroAccess License installed in my Router. Is there any relation to my issue?

Richard Burts · ‎03-28-2019

Which license you have does not have anything to do with this problem. And the license that you have provides more capabilities than the IPBASE license would. If it is still not working then please provide the most current output of show run. We would be looking especially for nat inside on the LAN interface, nat outside on the WAN interface and the command to translate with access list 1 on vlan 8 overload.

HTH

Rick

HTH

Rick

pavithran · ‎03-28-2019

VOIS_ROUTER#sh runn
Building configuration...

Current configuration : 2609 bytes
!
! No configuration change since last restart
!
version 15.4
service config
service timestamps debug datetime msec
service timestamps log datetime msec
asr901-platf-multi-nni-cfm
!
hostname VOIS_ROUTER
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
ip name-server 8.8.8.8
ip name-server 8.8.4.4
no ipv6 cef
!
!
multilink bundle-name authenticated
l3-over-l2 flush buffers
!
!
spanning-tree mode pvst
spanning-tree extend system-id
license accept end user agreement
license boot level AdvancedMetroIPAccess
!
!
!
interface GigabitEthernet0/0
no ip address
negotiation auto
service instance 1 ethernet
encapsulation untagged
bridge-domain 1
!
!
interface GigabitEthernet0/1
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/2
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/3
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/4
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/5
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/6
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/7
no ip address
negotiation auto
service instance 8 ethernet
encapsulation untagged
bridge-domain 8
!
!
interface GigabitEthernet0/8
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/9
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/10
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/11
no ip address
shutdown
negotiation auto
!
interface TenGigabitEthernet0/0
no ip address
shutdown
!
interface TenGigabitEthernet0/1
no ip address
shutdown
!
interface FastEthernet0/0
no ip address
shutdown
!
interface Vlan1
ip address 192.168.20.1 255.255.255.0
ip nat inside
!
interface Vlan8
ip address 10.70.70.254 255.255.255.0
ip nat outside
!
ip nat inside source list 1 interface Vlan8 overload
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 10.70.70.1
!
access-list 1 permit 192.168.20.0 0.0.0.255
!
!
control-plane
!
environment monitor
!
exception crashinfo buffersize 128
!
!
end

Richard Burts · ‎03-28-2019

Thank you for posting a fresh copy of the config. The address translation seems ok. I do see that both of the interfaces have specified encapsulation untagged I thought that earlier in the discussion you indicated that this created problems. Please change this and let us know if things work better.

HTH

Rick

HTH

Rick

paul driver · ‎03-26-2019

Hello
Never I had to use these before but your configuration seems to suggest your using EVC into the ISP (EVC doc)

After the review of the documentation it looks like your two interfaces are not able to communicate with each to allow traffic to traverse the evc connection - Could you try the following:

interface GigabitEthernet0/0
Description LAN port
encapsulation dot1q 1-8
bridge-domain 18

interface GigabitEthernet0/7
Description WAN port
encapsulation dot1q 8
rewrite ingress pop 1 symmetric
bridge-domain 18

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

pavithran · ‎03-26-2019

None is working :(

Richard Burts · ‎03-26-2019

Can the PC at 192.168.20.2 ping its gateway at 192.168.20.1? Can that PC ping the outside interface at 10.70.70.254?

HTH

Rick

HTH

Rick

pavithran · ‎03-26-2019

The PC can ping the gateway and the outside interface IP. I'm still surprised with ASR 901, what exactly the problem could be!

paul driver · ‎03-26-2019

Hello
Int vlan 1

ip nat inside < ——- looks like this is missing now!

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

Richard Burts · ‎03-26-2019

Paul

Yes it is. Good catch.

HTH

Rick

HTH

Rick

Deepak Kumar · ‎03-24-2019

Hi,

I found that you had missed the NAT configuration.

"ip nat inside source list 1 interface VLAN 8 overwrite"

Regards,

Deepak Kumar

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!