01-15-2013 09:21 AM - edited 03-04-2019 06:43 PM
We currently installed a 100Mbps fiber line with Ethernet hand-off. I purchased a Cisco 3925 ISR to be the gateway for this connection. I am not going to use it for any security purposes. I have an ASA5520 that will do that work. Right now I am currently just trying to get the router online.
I know the following
Laptop <--->GB 0/1((()))GB0/0<---->Ethern
01-15-2013 09:33 AM
Hi John
Is the default gateway on your laptop correctly configured (IP-address of gig0/1)?
01-15-2013 09:36 AM
Marcel,
It sure is...thanks!
John
01-15-2013 09:39 AM
Sorry for the stupid question ;-)
Maybe your local subnet (50.YYY.YY.YYY 255.255.255.0) is not routed on your ISPs router? Could you try to ping to the internet from the router with the src-ip of your gig 0/1 interface? If this fails you have to configure NAT from your internal to your external interface.
HTH
01-15-2013 09:46 AM
I just did a ping 4.2.2.2 source gigab 0/1 and it failed. Looks like you are onto something.
01-15-2013 09:47 AM
They are the ones who gave me the IP block for that side of the router.
01-15-2013 09:52 AM
Are you supposed to be using a routing protocol with them? They'll either need to route for the subnet they assigned you with static routing or you'll need to have a routing protocol configured with the ISP.
HTH,
John
*** Please rate all useful posts ***
01-15-2013 10:02 AM
I suggest you talk to your ISP. In the meanwhile you can try to setup NAT:
interface GigabitEthernet0/1
ip nat inside
!
interface gig0/0
ip nat outside
!
ip access-list NAT-SOURCE
deny ip 50.YYY.YY.YYY 0.0.0.255 50.YYY.YY.YYY 0.0.0.255
permit ip 50.YYY.YY.YYY 0.0.0.255 any
!
ip nat inside source list NAT-SOURCE interface gig0/0 overload
HTH
01-18-2013 11:40 AM
May not fix anything but, why have a staic route to your 50.yyy.yyy.yyy/24 network? Isn't it connected toy your G0/1?
01-18-2013 11:56 AM
Dear John
This is just due to the fact that no NAT service is configured on the router. Either you have to enable NAT on the router or the other case can be advertising your LAN subnet via your ISP to the internet which is least possible as in such case you would have to run protocol with your ISP. If the ISP has provided you the /24 subnet to use in your LAN then the ISP would have to route the subnet to your Point-to-point IP to make it work. In this case contact your ISP/
Marcel is right with the NAT configurations. Go with it and it shall probably solve the problem
BR
Muazzam
01-18-2013 12:42 PM
Adding NAT will just allow outbound internet connection but will kill the idea of having public IP range. Ask the ISP to add static route on their router for 50.YYY.YY.0 255.255.255.0 pointing to your router (50.XXX.XX.XXX 255.255.255.252).
On another note, why do you have "ip route 50.YYY.YY.0 255.255.255.0 GigabitEthernet0/1"? That network is local to the router.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide