cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1106
Views
4
Helpful
5
Replies

Cant get internet from inside of network, works directly from router

Stelios76
Level 1
Level 1

Hi All, 

I am very new to the networking world I am wondering if I am making an easy mistake somewhere. I have a network consisting of a cisco 2921 router and 4 copper cisco switches. Into the router, I have a link to an ISP who have given me a public IP address to use on my routers internet facing interface. On the internal part of my network I have an internal link from router to one of the 4 switches, which the other three connect to via trunk links, I have used 192.168.10.0 as my network address with a /26

prefix

and have created a DHCP pool on the router's internal interface which correctly assigns IP addresses when connecting. However, no matter what, I simply cannot access the internet when plugging into one of the TAPs.

Apologies if I am doing something really basic wrong. I have applied PAT to the outside interface but when I connect to a TAP, the ethernet adapter finds the network but just says no internet. Here is the router config below with public ip addresses omitted - if i need to provide any more information which might make it easier I am more than happy to do, this is driving me mad so any assistance would be greatly appreciated. The most annoying aspect of this is when I connect straight to the ISP's router and manually assign my laptop with the same public ip address as I have assigned the router - it works wonderfully.

From a private address on the inside of the network I can ping ISP's router (next hop of my public ip) but cannot get internet. 

 

ip dhcp excluded-address 192.168.10.1
!
ip dhcp pool xx
network 192.168.10.0 255.255.255.192
default-router 192.168.10.1
domain-name XX
dns-server Correct IP's4
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
cts logging verbose
!
!
license udi pid CISCO2921/K9 sn FCZ2111B0ZB
!
!
!
redundancy
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description Cross site Link to x from x
ip address -ISP Assigned public ip -255.255.255.248
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
description Internal Network default gateway address
ip address 192.168.10.1 255.255.255.192
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1/0
no ip address
!
interface GigabitEthernet0/1/1
no ip address
!
interface GigabitEthernet0/1/2
no ip address
!
interface GigabitEthernet0/1/3
no ip address
!
interface GigabitEthernet0/1/4
no ip address
!
interface GigabitEthernet0/1/5
no ip address
!
interface GigabitEthernet0/1/6
no ip address
!
interface GigabitEthernet0/1/7
no ip address
!
interface Vlan1
no ip address
!
interface Async0/3/0
no ip address
encapsulation slip
!
interface Async0/3/1
no ip address
encapsulation slip
!
interface Async0/3/2
no ip address
encapsulation slip
!
interface Async0/3/3
no ip address
encapsulation slip
!
interface Async0/3/4
no ip address
encapsulation slip
!
interface Async0/3/5
no ip address
encapsulation slip
!
interface Async0/3/6
no ip address
encapsulation slip
!
interface Async0/3/7
no ip address
encapsulation slip
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 2 interface GigabitEthernet0/0 overload
!
!
!
access-list 2 permit 192.168.10.0 0.0.0.255

 

1 Accepted Solution

Accepted Solutions

M02@rt37
VIP
VIP

Hello @Stelios76,

On your Router you need

default route

to the ISP IP address.

(config-t)#ip route 0.0.0.0 0.0.0.0 <ISP-IP-ADD>

 

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

View solution in original post

5 Replies 5

M02@rt37
VIP
VIP

Hello @Stelios76,

On your Router you need

default route

to the ISP IP address.

(config-t)#ip route 0.0.0.0 0.0.0.0 <ISP-IP-ADD>

 

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

Hi there M02, Thank you kindly for your response, I will give this a crack tomorrow when I am back at the kit and let you know if it was successful. thanks for taking your time

You're very welcome @Stelios76 

Thanks for your feedback.

 

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

Thank you it worked!!

Great news!

You're very welcome @Stelios76.

 

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.