Solved: Cisco 1921 Router config Question

crixis · ‎05-19-2022

Cisco 1921 Lan side unable to ping or access internet

Hello, im very new to this game, i have a cisco 1921 router that is connected to a home router. Gi0/0 is setup as WAN and directly connected to home router and has internet access , can ping internet addresses and can see thru CDP a 3750 switch that is also connected to home router.

Gi0/1 is setup as local Lan, i have a cisco dumb switch connected and a laptop connected to that. My laptop receives an IP address of 192.168.1.1, the gateway is Gi0/1 which has an ip of 192.168.1.100.

Gi0/0 has an ip of 192.168.0.204 and its gateway is my home router that has an IP of 192.168.0.1

from my laptop i can ping both cisco 1921 Router interfaces, but i can't ping my home router and i cant ping beyond that.

I would appreaciate any help provided. My goal is to be able to have my two cisco switches, one layer 3 3750 and one layer 2 3650 behind the router and able to access internet. But im having trouble with this initial setup of only trying to get one device from the router lan to access internet.

Thanks in advance. Configuration is below.

ISR1921#show run
Building configuration...

Current configuration : 2351 bytes
!
! Last configuration change at 13:41:53 UTC Thu May 19 2022 by xxxxx
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISR1921
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
enable secret 5 $1$GpSW$dNBp.gExNG3lDlEHQR4V30
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.128
default-router 10.10.10.1
lease 0 2
!
ip dhcp pool LAN
network 192.168.1.0 255.255.255.0
default-router 192.168.1.100
dns-server 8.8.8.8
!
!
!
ip domain name mugsy.local
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
cts logging verbose
!
crypto pki trustpoint TP-self-signed-329630737
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-329630737
revocation-check none
rsakeypair TP-self-signed-329630737
!
!
crypto pki certificate chain TP-self-signed-329630737
license udi pid CISCO1921/K9 sn FJC2147L221
!
!
username james privilege 15 password 0 xxxxxxx
!
redundancy
!
!
!
!
!
ip ssh version 2
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.100 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
ip forward-protocol nd
!
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source list Local interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip route 192.168.1.0 255.255.255.0 192.168.0.1
!
ip access-list standard local
permit 192.168.1.0 0.0.0.255
!
!
!
!
control-plane
!
!
!
line con 0
password xxxxxxx
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class 23 in
exec-timeout 30 0
privilege level 15
password xxxxxxx
login local
transport input all
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input all
!
scheduler allocate 20000 1000
!
end

Seb Rupik · ‎05-19-2022

Hi there,

you have a typo in the NAT statement. Your ACL has a lowercase 'l' : local, but your NAT statement is referencing 'Local'.

Use the following:

!
no ip nat inside source list Local interface GigabitEthernet0/0 overload
!
ip nat inside source list local interface GigabitEthernet0/0 overload
!

Also remove one of your static routes:

!
no ip route 192.168.1.0 255.255.255.0 192.168.0.1
!

cheers,

Seb.

View solution in original post

Seb Rupik · ‎05-19-2022