cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
315
Views
0
Helpful
1
Replies

Cannot connec to internet

Eduardo Guerra
Level 1
Level 1

I am configuring a Cisco 1941, Initially a basic configuration (1 ISP and 1 inside network). I made the configuration that I think was ok for use the internet, but i cannot do anything from inside network to outside neither a ping to gateway. It is really important because the next step is to configure 2 more ISPs and remote VPNs listener. Someone can help me on the internet issue please. Here's the config

Building configuration...
Current configuration : 5462 bytes
!
! Last configuration change at 23:09:35 UTC Tue Jul 14 2015 by eguerra
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.0.254
!
ip dhcp pool ccp-pool
 import all
 network 192.168.0.0 255.255.255.0
 default-router 192.168.0.254
 lease 0 2
!
!
!
ip domain name yourdomain.com
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
cts logging verbose
!
crypto pki trustpoint TP-self-signed-459894941
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-459894941
 revocation-check none
 rsakeypair TP-self-signed-459894941
!
!
crypto pki certificate chain TP-self-signed-459894941
 certificate self-signed 01
  30820229 30820192 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 34353938 39343934 31301E17 0D313530 31303830 36313335
  355A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3435 39383934
  39343130 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
  A47EF386 086E47BB 4A8966B7 AE2A2FA2 5600FA7D C725EA9C 63FFFD87 D5B11D0E
  7D829B83 76B4DB21 C510D67C B443F4DC DC481FED F55C5CCF FAC8E16A 753651BA
  EF8B3B60 B7990828 4A82889D F2B0FBBD 585950A5 E75C9C73 9DB31857 DD7C8D81
  F76C1347 09B08DEE C982110B CF3E022D B723DF10 4E8EC087 EE161897 C1FAA21D
  02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F 0603551D
  23041830 1680148C 75F2B131 7D9DD134 E4B03A85 C0C958A4 80D3F530 1D060355
  1D0E0416 04148C75 F2B1317D 9DD134E4 B03A85C0 C958A480 D3F5300D 06092A86
  4886F70D 01010505 00038181 00588B5A 3B632A6F 1C52B2A0 06CA3C7F E6AD4E28
  23AC9158 C116E866 F8EAEC5B 351B0D69 9EED77D4 F9222928 270BEF4C B4EFD967
  41B3F31B EB65F724 8064FEFD 8F47B7A8 0BDE7A1E 4345B0FB D19B22C3 57E749BB
  D7D177DF CD6248B1 E785C9CF A17D184B 7974AB06 95926EF3 4FB21654 A264679B
  326E8037 37D67E70 AB10B125 A0
        quit
license udi pid CISCO1941/K9 sn FGL190223B4
!
!
username eguerra privilege 15 secret 5 
!
redundancy
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0
 description InsideLAN
 ip address 192.168.0.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface FastEthernet0/0/0
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface FastEthernet0/0/1
 description InternetAXS
 ip address x.y.z.54 255.255.255.240
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
ip forward-protocol nd
!
ip http server
ip http access-class 1
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 x.y.z.49
!
!
!
access-list 1 permit 192.168.0.0 0.0.0.255
!
control-plane
!
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for  one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you want to
use.
-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.
YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE  PUBLICLY-KNOWN
CREDENTIALS
Here are the Cisco IOS commands.
username <myuser>  privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want
to use.
IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE
TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.
For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
 login local
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
line vty 0 4
 access-class 1 in
 privilege level 15
 login local
 transport input telnet ssh
line vty 5 15
 access-class 1 in
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler allocate 20000 1000
!
end

 

1 Reply 1

johnd2310
Level 8
Level 8

Hi,

This statement is incorrect "ip nat inside source list 1 interface GigabitEthernet0/0 overload"  it should be

 "ip nat inside source list 1 interface FastEthernet0/0/1 overload"

 

Thanks

John

**Please rate posts you find helpful**