08-28-2023 01:09 AM
Hi,
I am unable to ping domain names like google.com. I can however ping 142.251.46.174.
Here is my config.
version 15.7
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no aaa new-model
!
ip dhcp excluded-address 10.1.1.1 10.1.1.100
!
ip dhcp pool HOME
import all
network 10.1.1.0 255.255.255.0
default-router 10.1.1.1
dns-server 1.1.1.1 1.0.0.1
!
no ip domain lookup
ip domain name home.local
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
voice-card 0
!
license udi pid CISCO2901/K9 sn FGL153725V9
license boot module c2900 technology-package datak9
hw-module ism 0
!
hw-module pvdm 0/0
!
redundancy
!
interface Loopback100
description hairpin
ip address 169.254.255.254 255.255.255.255
ip nat inside
ip virtual-reassembly in
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description -Ethernet WAN-
ip address 14.211.43.146 255.255.255.252
no ip redirects
ip nat outside
ip nat enable
ip virtual-reassembly in
duplex auto
speed auto
!
interface ISM0/0
no ip address
shutdown
service-module fail-open
!
interface GigabitEthernet0/1
ip address 10.1.1.1 255.255.255.0
no ip redirects
ip nat outside
ip nat enable
ip virtual-reassembly in
shutdown
duplex auto
speed auto
!
interface ISM0/1
no ip address
!
interface Vlan1
no ip address
!
!
ip default-gateway 14.211.43.145
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip dns server
ip nat source list NAT interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 14.211.43.145
ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr
ip ssh client algorithm encryption aes128-ctr aes192-ctr aes256-ctr
!
ip access-list extended NAT
deny ip 10.1.1.0 0.0.0.255 10.1.1.0 0.0.0.255
ip access-list extended NatPin
permit ip 10.1.1.0 0.0.0.255 host 10.1.1.100
!
ipv6 ioam timestamp
!
route-map NAT_PBR permit 10
set interface Loopback100
!
control-plane
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
gatekeeper
shutdown
!
vstack
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line 67
no activation-character
no exec
transport preferred none
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
login
transport input none
!
scheduler allocate 20000 1000
ntp server 34.208.249.133
!
end
08-28-2023 01:31 AM
- You can not ping domain names only 'dedicated resolvable hosts' ,
M.
08-28-2023 03:38 AM - edited 08-28-2023 03:39 AM
Hello
Try the following amendments and test again:
no int loopback0
no route-map NAT_PBR permit 10
no ip access-list extended NatPin
no ip access-list extended NAT
no ip default-gateway 14.211.43.145
ip dhcp pool HOME
no dns-server 1.1.1.1 1.0.0.1
dns-server 10.1.1.1
interface GigabitEthernet0/0
no ip nat enable
interface GigabitEthernet0/1
ip address 10.1.1.1 255.255.255.0
no ip nat enable
ip nat inside
no shutdown
ip access-list extended NAT
permit ip 10.1.1.0 0.0.0.255 any
08-28-2023 06:22 AM
no ip domain lookup ip domain name home.local ip cef no ipv6 cef
your switch cannot perform DNS lookups because this is disabled and no name-servers are configured
ip dhcp pool HOME import all network 10.1.1.0 255.255.255.0 default-router 10.1.1.1 dns-server 1.1.1.1 1.0.0.1
your DHCP clients are querying 1.1.1.1 or 1.0.0.1 as DNS server
are you sure a DNS server is running on 1.1.1.1 or 1.0.0.1 ?
try 8.8.8.8 as DNS server
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide