cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
547
Views
0
Helpful
3
Replies

Cisco 2821 - Unable to access certain websites

leacho73
Level 1
Level 1

Hi All,

 

I have recently commissioned a Cisco 2821 router as a boundary router for my network - my PPPoE connection is connecting fine, and being assigned an IP - I have my NAT statements set up and I can ping from my internal test machine out to any website address I choose - however, when I try and load a webpage - unless it is google or facebook, the page times out.

 

Config is:

 

Building configuration...

Current configuration : 1814 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router01
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!         
ip domain name local
no ipv6 cef
!
multilink bundle-name authenticated
!
voice-card 0
!
username <redacted>
archive
 log config
  hidekeys
! 
ip ssh time-out 60
ip ssh source-interface GigabitEthernet0/1
ip ssh version 2
ip ssh dh min size 4096
!
!
!
!
interface GigabitEthernet0/0
 description Internet
 no ip address
 ip tcp adjust-mss 1452
 duplex auto
 speed auto
 pppoe enable group global
 pppoe-client dial-pool-number 1
!
interface GigabitEthernet0/1
 description Internal
 ip address 192.168.0.1 255.255.255.248
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface Dialer1
 ip address negotiated
 no ip unreachables
 ip mtu 1492
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 ppp chap hostname <redacted>
 ppp chap password <redacted>
 ppp pap sent-username <redacted>

ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface Dialer1 overload
!
access-list 1 permit 192.168.0.0 0.0.0.255
!

Not sure what is going on. Its worth noting that DNS requests are also working just fine.

 

Thanks

Matt

1 Accepted Solution

Accepted Solutions

amikat
Level 7
Level 7

Hi,

Will you please move the configuration command "ip tcp adjust-mss 1452" under the "interface Dialer1".

Best regards,

Antonin

 

View solution in original post

3 Replies 3

waqas.salam
Level 1
Level 1

if you able to ping public IP's ,then you need to resolve www.facebook.com on CMD by having

nslookup www.facebook.com

 

nslookup www.facebook.com
Server: UnKnown
Address: 192.168.1.1

Non-authoritative answer:
Name: star-mini.c10r.facebook.com
Addresses: 2a03:2880:f108:83:face:b00c:0:25de
31.13.86.36
Aliases: www.facebook.com

 

if you able to resolve above then plz check browser setting.

As above ^^ - DNS requests resolve just fine

amikat
Level 7
Level 7

Hi,

Will you please move the configuration command "ip tcp adjust-mss 1452" under the "interface Dialer1".

Best regards,

Antonin

 

Review Cisco Networking for a $25 gift card