04-15-2018 09:14 AM - edited 03-05-2019 10:16 AM
Hi All,
I have recently commissioned a Cisco 2821 router as a boundary router for my network - my PPPoE connection is connecting fine, and being assigned an IP - I have my NAT statements set up and I can ping from my internal test machine out to any website address I choose - however, when I try and load a webpage - unless it is google or facebook, the page times out.
Config is:
Building configuration... Current configuration : 1814 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname Router01 ! boot-start-marker boot-end-marker ! logging message-counter syslog ! no aaa new-model ! dot11 syslog ip source-route ! ! ip cef ! ! ip domain name local no ipv6 cef ! multilink bundle-name authenticated ! voice-card 0 ! username <redacted> archive log config hidekeys ! ip ssh time-out 60 ip ssh source-interface GigabitEthernet0/1 ip ssh version 2 ip ssh dh min size 4096 ! ! ! ! interface GigabitEthernet0/0 description Internet no ip address ip tcp adjust-mss 1452 duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 ! interface GigabitEthernet0/1 description Internal ip address 192.168.0.1 255.255.255.248 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Dialer1 ip address negotiated no ip unreachables ip mtu 1492 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 ppp chap hostname <redacted> ppp chap password <redacted> ppp pap sent-username <redacted> ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 Dialer1 no ip http server no ip http secure-server ! ! ip nat inside source list 1 interface Dialer1 overload ! access-list 1 permit 192.168.0.0 0.0.0.255 !
Not sure what is going on. Its worth noting that DNS requests are also working just fine.
Thanks
Matt
Solved! Go to Solution.
04-15-2018 11:44 AM
Hi,
Will you please move the configuration command "ip tcp adjust-mss 1452" under the "interface Dialer1".
Best regards,
Antonin
04-15-2018 10:20 AM
if you able to ping public IP's ,then you need to resolve www.facebook.com on CMD by having
nslookup www.facebook.com
nslookup www.facebook.com
Server: UnKnown
Address: 192.168.1.1
Non-authoritative answer:
Name: star-mini.c10r.facebook.com
Addresses: 2a03:2880:f108:83:face:b00c:0:25de
31.13.86.36
Aliases: www.facebook.com
if you able to resolve above then plz check browser setting.
04-15-2018 10:22 AM
As above ^^ - DNS requests resolve just fine
04-15-2018 11:44 AM
Hi,
Will you please move the configuration command "ip tcp adjust-mss 1452" under the "interface Dialer1".
Best regards,
Antonin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide