Cisco 2911 Router can Ping Internet but not Clients

[mpalmer22]

Hi, I have a Cisco 2911 connected using 4G LTE for internet. I was jumping with joy as I successfully managed to achieve internet connection on the router, but then quickly realised that my clients aren't getting internet.

I figured this was an easy thing to sort out, thought it was the ACL, now two days later I'm tearing my hair out trying to figure out what else I'm missing.

The clients can ping the router but not the internet.

The router can ping both the clients and the internet

Below is my configuration

Edit: Have updated configuration according to the posts suggestions, as of current still the same issue, will make another edit when it is working.

Edit: All working now - Have updated the config to the working version

================================================

chat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"

controller Cellular 0/1
lte modem link-recovery rssi onset-threshold -110
lte modem link-recovery monitor timer 20
lte modem link-recovery wait-timer 10
lte modem link-recovery debounce-count 6

interface GigabitEthernet0/0
ip address 10.90.119.161 255.255.255.224
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no mop enabled

interface Cellular0/1/0
ip address negotiated
encapsulation slip
dialer in-band
dialer pool-member 1
dialer-group 1
async mode interactive
routing dynamic

interface Dialer1
ip address negotiated
ip nat outside
encapsulation slip
dialer pool 1
dialer idle-timeout 0
dialer string lte
dialer persistent
dialer-group 1

ip forward protocol nd

ip nat inside source list 1 interface Dialer1 overload
ip nat inside source list 10 interface GigabitEthernet0/0 overload
ip nat inside source list outbound_nat interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 dialer 1

ip access-list extended outbound_nat
permit ip 10.90.119.0 0.0.0.31 any

dialer-list 1 protocol ip permit

access-list 1 permit 10.90.119.160 0.0.0.31
access-list 10 permit 10.90.119.0 0.0.0.31

================================================

Cellular 0/1/0 - Profile
Profile 1 = ACTIVE
PDP Type = IPv4
PDP address = 10.107.93.18
APN = telstra.internet
IP Address: 10.107.93.18
Primary DNS Address: 10.5.68.232
Secondary DNS Address: 10.5.195.164

================================================

[johnd2310]

Hi,

You have not specified which nat interface is inside and which is outside.

interface GigabitEthernet0/0

 ip nat inside

interface Dialer1

  ip nat outside

Also can you remove these lines and test:

 ip nat inside source list 10 interface GigabitEthernet0/0 overload

ip nat inside source list outbound_nat interface GigabitEthernet0/0 overload

Thanks

John

[mpalmer22]

Hi John, I've just made those changes and tested. Clients still not able to ping the internet.

[johnd2310 · Accepted solution]

Hi,

What is the ip addess of the inside network?

The ip address of the inside interface and the nat access list do not match.

if your inside interface is correct, the access-list 1 should be

access-list 1 permit 10.90.119.160 0.0.0.31

Thanks

John

[mpalmer22]

Hi John, you sir are a genius.
I thought that the IP 10.90.119.0 would apply to the whole subnet. Who knew that changing it to 10.90.119.160 would fix this problem. I'll update the original config to reflect this change so it may help someone else out