cant access my company sites

[amralrazzaz]

dear all hope doing great 

Have great day !

I have an issue with dns that not resolving some sites (our organizations sites such as outlook web access, service desk, SharePoint website …etc. ) but any other sites is working normally

these sites usually accessing every day with no issues since long time but before 2 days suddenly we faced an issue with responding these sites

I don’t know if the issue from isp or from my side am just checking with u ?

Note: Im using google dns server 8.8.8.8 8.8.4.4 as per the configuration that I shared on below , I have tried same dns with different ISP company and its works fine (all sites can be accessing normally)

i have problem with responding on these sites even i cant login to skype for business or visit  servcie desk site of my company 

i dont know it i can do something with my dns and dhcp server on router ? like reset or reconfigure again ???

p dhcp relay information trust-all

ip dhcp excluded-address 192.168.2.207

!

ip dhcp pool voice

 import all

 network 192.168.2.0 255.255.255.0

 default-router 192.168.2.207

 option 150 ip 192.168.2.207

 dns-server 8.8.8.8 8.8.4.4

!

!

!

ip dhcp global-options

 dns-server 163.121.128.134 163.121.128.135

!

no ip domain lookup

ip domain name EGCAI01.nms.local

ip name-server 8.8.8.8

ip name-server 8.8.4.4

ip cef

no ipv6 cef

multilink bundle-name authenticated

ip dns view default

 no dns forwarding

 dns forwarder 8.8.8.8

ip dns server

ip nat inside source list 1 interface GigabitEthernet0/1 overload

ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1

access-list 1 permit 192.168.2.0 0.0.0.255

[amralrazzaz]

done sir 

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) Dual Band Wireless-AC 7260
Physical Address. . . . . . . . . : AC-7B-A1-86-E9-2B
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::39a3:9501:3ffb:ae62%25(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.32(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Thursday, November 28, 2019 2:01:07 AM
Lease Expires . . . . . . . . . . : Friday, November 29, 2019 2:01:06 AM
Default Gateway . . . . . . . . . : 192.168.2.207
DHCP Server . . . . . . . . . . . : 192.168.2.207
DHCPv6 IAID . . . . . . . . . . . : 313293729
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-24-D3-5A-79-EC-F4-BB-3F-0A-4D
DNS Servers . . . . . . . . . . . : 163.121.128.134
163.121.128.135

[paul driver]

Hello

Now you have a default valid setup -

can you reach the internet from a client?

[amralrazzaz]

actually after remove the dns

i cant get dns as below :

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) Dual Band Wireless-AC 7260
Physical Address. . . . . . . . . : AC-7B-A1-86-E9-2B
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::39a3:9501:3ffb:ae62%25(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.32(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Thursday, November 28, 2019 2:11:03 AM
Lease Expires . . . . . . . . . . : Friday, November 29, 2019 2:11:02 AM
Default Gateway . . . . . . . . . : 192.168.2.207
DHCP Server . . . . . . . . . . . : 192.168.2.207
DHCPv6 IAID . . . . . . . . . . . : 313293729
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-24-D3-5A-79-EC-F4-BB-3F-0A-4D
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1

[amralrazzaz]

let share also for ur info the result when i directly connected to isp router and it work perfectly

thernet adapter Ethernet:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) Ethernet Connection I218-LM
Physical Address. . . . . . . . . : EC-F4-BB-3F-0A-4D
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::7580:4d71:427b:4cf2%21(Preferred)
IPv4 Address. . . . . . . . . . . : 41.33.42.171(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.248
Default Gateway . . . . . . . . . :

DHCPv6 IAID . . . . . . . . . . . : 283964603
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-24-D3-5A-79-EC-F4-BB-3F-0A-4D
DNS Servers . . . . . . . . . . . : 163.121.128.134
163.121.128.135
NetBIOS over Tcpip. . . . . . . . : Enabled

[paul driver]

step 5
ip dhcp pool voice-LAN

dns-server 163.121.128.134 163.121.128.135

reset the cleint again ( ipconfig etc) as before and test again

[amralrazzaz]

here u r :

note: the internet is working as before but the sites that i have tried to access still very slow or not working

i have tried from isp router directly to my laptop and it works great with no issue 

when i get back to my router 2911 its not ,, just internet but the company sites back to not working , i dont know actually when its working from isp router and from office router not ?

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) Dual Band Wireless-AC 7260
Physical Address. . . . . . . . . : AC-7B-A1-86-E9-2B
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::39a3:9501:3ffb:ae62%25(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.32(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Thursday, November 28, 2019 2:20:06 AM
Lease Expires . . . . . . . . . . : Friday, November 29, 2019 2:20:06 AM
Default Gateway . . . . . . . . . : 192.168.2.207
DHCP Server . . . . . . . . . . . : 192.168.2.207
DHCPv6 IAID . . . . . . . . . . . : 313293729
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-24-D3-5A-79-EC-F4-BB-3F-0A-4D
DNS Servers . . . . . . . . . . . : 163.121.128.134
163.121.128.135
NetBIOS over Tcpip. . . . . . . . : Enabled

[paul driver]

hello

Not a problem -  can you  post the revised configuration of the 2911 router

However you plug directly into the the ISP router and you obtain an ip address 41.33.42.x but when you plug you 2911 router into the same port you obtain an ip address of 192.168.1.x

Why is that - Is there something we are missing here????

[amralrazzaz]

i attached 2 out put config file one for 2911 that we already configured now and the other one tedata is for isp which is not accessible  (this is no issue i connect laptop direclt to it it works ) with 2911 router internet work but the company sites non and dont know why i get mad 

dont know if we need to disable something or what ??? thanks for ur great help ... im in critical situation really

[amralrazzaz]

what if i turnoff and on again the 2 switches that i have and the router 2911 ?? im just asking ?

btw i have 2 SWITCH 24 PORTS CATALYST 2960 - X SERIES

it will help or not ?

[paul driver]

Hello

As i have stated - when you plug a pc into the same port as the 2911 router you obtain an ip address of 41.33.42.x but the router get an ip of 192.168.x.x.

Why is that - Is there something we are missing here???

[amralrazzaz]

yes because before we dont have the configuration of router we just know that the isp interface have assigned two ip addresses as below (direclty connected to my router g0/1 also) so we use 192.168.1.0 and make ripv2 to get connectivity with isp router  and it works great with no issue at all , i have already post for u the design and the isp config file + my router 2911 config file , so should we can do any thing to get me out from this critical position :) 

every thing was working great but suddenly before 3 days companies sites non or packet down  but other sites such as facebook,youtube ans so on working normally 

interface GigabitEthernet0/1
ip address 192.168.1.253 255.255.255.0 secondary
ip address 41.33.42.169 255.255.255.248
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto

[amralrazzaz]

can i post the network diagram to have full pic

[paul driver · Accepted solution]

Hello

Okay i have a better picture -

I think we need to give the 2911 an static ip address in the  41.33.42.X /29 subnet - so lets try this-

inter gig0/1

ip address 41.33.42.171 255.255.255.248

no p route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 dhcp
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 41.33.42.169

[amralrazzaz]

Man i have to confess that you are genius super man 

im really appreciate what u did ?

u save me really :)  it work finally .. ill keep remembering what u did and will put u in my fav please :)

ill keep in touch with u after testing for sometime :) 

do i need to do any thing else ?

[paul driver]

Hello

Okay so you have connection finally?
That ip addres you have statically defined, You may need to reserve on that on the ISP router if possible as its out of i dhcp scope on that ISP router, But i am glad it is now working for, So just please mark the post are resolved if your happy so it may assist others  with simular issues?