cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
492
Views
0
Helpful
2
Replies

Can't resolve DNS in PC through CISCO 2811

Fabiola
Level 1
Level 1

Hi to everyone

 

I have a Cisco 2811 that can ping and can resolve domain names (like "www.google.com")

I'm my PC connected to the 2811 I have "Internet connection", but yet, I'm not able to browse any site.

I can ping with CMD to Google's DNS 8.8.8.8, 4.2.2.2 but can't resolve domain name server. Any ideas?

I think I'm missing some NAT configuration but I'm not quite sure.

This is the configuration I have:

Building configuration...

Current configuration : 3690 bytes
!
version 12.4
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname IC_SISTEMAS_APLICADOS_TAMPICO
!
boot-start-marker
boot-end-marker
!
logging buffered 10000 informational
!
no aaa new-model
clock timezone CENTRAL -6
clock summer-time CENTRAL recurring 1 Sun Apr 3:00 last Sun Oct 2:00
dot11 syslog
!
!
no ip cef
!
!
ip domain name idt.mx
ip name-server 207.248.224.72
ip name-server 8.8.8.8
multilink bundle-name authenticated
!
!
crypto pki trustpoint TP-self-signed-1940156066
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1940156066
 revocation-check none
 rsakeypair TP-self-signed-1940156066
!
!
crypto pki certificate chain TP-self-signed-1940156066
 certificate self-signed 01
  3082025E 308201C7 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 31393430 31353630 3636301E 170D3137 30393131 31363031
  32315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 39343031
  35363036 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100BF34 222117DB CBF9EFD1 FEBAEEE6 E401C335 BD30A327 8EA18062 BC938DC5
  F80C27EC C5986BE2 3DB3C8A2 27C53EC4 39319C0E 17359171 26983CCD BA7DF0E2
  DE6CAB2C 25E9E972 82A66FFB B0FBA98C 400BDB50 23B763B0 92CDE814 7E5112AB
  38541A85 B5051DFC 81E20F85 7EEFD350 2E96F535 756FB50A 2F72F1DA C7361358
  EB5D0203 010001A3 81853081 82300F06 03551D13 0101FF04 05300301 01FF302F
  0603551D 11042830 26822449 435F5349 5354454D 41535F41 504C4943 41444F53
  5F54414D 5049434F 2E696474 2E6D7830 1F060355 1D230418 30168014 1AF9FA24
  8A9858CC 4EB60404 5F55A626 AC45A351 301D0603 551D0E04 1604141A F9FA248A
  9858CC4E B604045F 55A626AC 45A35130 0D06092A 864886F7 0D010104 05000381
  810081FC BBE3E9E5 3724A412 794D63B0 23E56F5C 2C50C9D2 7BC7CE17 75D0DE40
  796BC427 AAD29457 86767CFA 6605785B 61468DE8 110F5C55 123583C1 C41F2868
  9C65977B CB334B9F 8D93CE21 E04EB298 62BEF9B4 09700D5D C1F90008 CF4CDC79
  8E1E0F53 F44B35BB 54432F3B 0B89A25D 813FA1C0 45A53C2A 6097BD24 3DA26D65 D925
        quit
!
!
username anarro privilege 15 password 7 0702344F4F1B100918140E
archive
 log config
  hidekeys
!
!
!
!
!
interface FastEthernet0/0
 description CONEXION CON EQUIPO LAN CLIENTE
 ip address 200.23.130.228 255.255.255.224
 ip nat outside
 ip nat enable
 ip virtual-reassembly
 load-interval 30
 duplex full
 speed 100
!
interface FastEthernet0/1
 description CONEXION CON  FB4-1201-0037
 ip address 192.168.150.1 255.255.255.0
 ip nat inside
 ip nat enable
 ip virtual-reassembly
 ip route-cache flow
 load-interval 30
 duplex full
 speed 100
!
ip default-gateway 200.23.130.251
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 200.23.130.251
ip route 192.168.2.0 255.255.255.0 200.23.130.234
!
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat source list 50 interface FastEthernet0/0 overload
!
access-list 50 permit any
!
!
control-plane
!
privilege interface all level 10 ip accounting output-packets
privilege interface level 10 ip accounting
privilege interface level 10 ip
privilege exec level 10 show logging
privilege exec level 10 show configuration
privilege exec level 10 show
privilege exec level 10 clear ip accounting
privilege exec level 10 clear ip
privilege exec level 10 clear
!
line con 0
 exec-timeout 30 0
 login local
line aux 0
 exec-timeout 30 0
 login local
line vty 0 4
 exec-timeout 30 0
 login local
!
scheduler allocate 20000 1000
!
end

 

Any help would be appreciated. Thanks.

2 Replies 2

johnd2310
Level 8
Level 8

Hi,

 

If you can ping an ip on the Internet, then your NAT should be fine. The issue could be dns setting on the PC. What is the DNS setting on the PC?

Thanks

John

**Please rate posts you find helpful**

I have tried the ones given by my ISP (207.248.224.72 and 73), and google dns. And one of my ISP as primary and google as secondary and vice-versa. None of them worked. 

Review Cisco Networking for a $25 gift card