Cisco 800 Series - No Ethernet on VLAN's

alativitys · ‎01-16-2024

Greetings.

I recently got my hands on a Cisco 800, quite old but reliable device, but there are a number of problems during configuration.

I have successfully configured internet on FE4 (WAN), ping to 8.8.8.8.8 is fine, internet through another LAN behind NAT and using gateway 10.1.1.1.1.

Started to raise L2 ports, started with FE0 LAN, created VLAN10 and DHPC pool for it, it caused some difficulties, but eventually everything worked and devices were able to get IP over DHPC in the range 80.50.10.0/24.

But... there is no internet on this network, after studying a number of guides and documentation I could not find my mistake, so I am asking for help from more experienced colleagues.

Thank you all in advance, attached config and IP ping results.

altnet#ping 8.8.8.8 source vlan 10

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 80.50.10.1
.....
Success rate is 0 percent (0/5)
altnet#
altnet#ping 8.8.8.8 sou
altnet#ping 8.8.8.8 source fas
altnet#ping 8.8.8.8 source fastEthernet 4

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.1.3.57
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 56/56/56 ms
altnet#

Config:

altnet#show config
Using 1847 out of 262136 bytes
!
! Last configuration change at 03:44:44 UTC Wed Jan 17 2024
!
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname altnet
!
boot-start-marker
boot-end-marker
!
enable secret 5 SECRET
enable password SECRET
!
no aaa new-model
memory-size iomem 10
ip source-route
no ip routing
!
!
ip dhcp excluded-address 192.168.10.2
ip dhcp excluded-address 192.168.10.3
ip dhcp excluded-address 192.168.10.4
ip dhcp excluded-address 192.168.10.5
ip dhcp excluded-address 192.168.10.6
ip dhcp excluded-address 192.168.10.7
ip dhcp excluded-address 192.168.10.8
ip dhcp excluded-address 192.168.10.9
ip dhcp excluded-address 192.168.10.10
ip dhcp excluded-address 80.50.10.2 80.50.10.10
!
ip dhcp pool LAN_FE0
network 80.50.10.0 255.255.255.0
default-router 80.50.10.1
dns-server 1.1.1.1 8.8.8.8
!
!
no ip cef
ip name-server 1.1.1.1
ip name-server 8.8.8.8
no ipv6 cef
!
!
!
!
license udi pid CISCO881-K9 sn FCZ1521C2H2
!
!
!
!
!
!
!
!
interface FastEthernet0
switchport access vlan 10
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address 10.1.3.57 255.0.0.0
ip nat outside
ip virtual-reassembly
no ip route-cache
duplex half
speed auto
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan10
ip address 80.50.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip default-gateway 10.1.1.1
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface FastEthernet0 overload
ip route 0.0.0.0 0.0.0.0 10.1.1.1
ip route 80.50.10.0 255.255.255.0 10.1.1.1
!
!
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password SECRET
login
transport input all
!
end

altnet#

Georg Pauwen · ‎01-17-2024

Hello,

make the changes marked in bold:

altnet#show config
Using 1847 out of 262136 bytes
!
! Last configuration change at 03:44:44 UTC Wed Jan 17 2024
!
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname altnet
!
boot-start-marker
boot-end-marker
!
enable secret 5 SECRET
enable password SECRET
!
no aaa new-model
memory-size iomem 10
ip source-route
--> ip routing
!
ip dhcp excluded-address 192.168.10.2
ip dhcp excluded-address 192.168.10.3
ip dhcp excluded-address 192.168.10.4
ip dhcp excluded-address 192.168.10.5
ip dhcp excluded-address 192.168.10.6
ip dhcp excluded-address 192.168.10.7
ip dhcp excluded-address 192.168.10.8
ip dhcp excluded-address 192.168.10.9
ip dhcp excluded-address 192.168.10.10
ip dhcp excluded-address 80.50.10.2 80.50.10.10
!
ip dhcp pool LAN_FE0
network 80.50.10.0 255.255.255.0
default-router 80.50.10.1
dns-server 1.1.1.1 8.8.8.8
!
no ip cef
ip name-server 1.1.1.1
ip name-server 8.8.8.8
no ipv6 cef
!
license udi pid CISCO881-K9 sn FCZ1521C2H2
!
interface FastEthernet0
switchport access vlan 10
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address 10.1.3.57 255.0.0.0
ip nat outside
ip virtual-reassembly
no ip route-cache
duplex half
speed auto
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan10
ip address 80.50.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
--> no ip default-gateway 10.1.1.1
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface FastEthernet0 overload
ip route 0.0.0.0 0.0.0.0 10.1.1.1
--> no ip route 80.50.10.0 255.255.255.0 10.1.1.1
!
--> access-list 1 permit 80.50.10.0 0.0.0.255
control-plane
!
line con 0
no modem enable
line aux 0
line vty 0 4
password SECRET
login
transport input all
!
end

alativitys · ‎01-17-2024

I made these changes and NAT debugging started working, attached:

altnet#conf t
Enter configuration commands, one per line. End with CNTL/Z.
altnet(config)#ip routing
altnet(config)#no ip default-gateway 10.1.1.1
altnet(config)#no ip route 80.50.10.0 255.255.255.0 10.1.1.1
altnet(config)#access-list 1 permit 80.50.10.0 0.0.0.255
altnet(config)#end
altnet#
*Jan 17 08:55:33.371: %SYS-5-CONFIG_I: Configured from console by console
altnet#write memory
Building configuration...
[OK]
altnet#ping 1.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 36/38/40 ms
altnet#ping 1.1.1.1 so
altnet#ping 1.1.1.1 source vlan 10

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
Packet sent with a source address of 80.50.10.1
.....
Success rate is 0 percent (0/5)
altnet#
*Jan 17 08:56:25.415: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:25.419: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:25.639: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:26.143: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:26.639: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:27.639: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:29.643: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:29.643: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:30.407: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:33.643: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:33.643: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:35.867: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:37.655: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:37.655: NAT: translation failed (A), dropping packet s=80.50.10.11 d=192.168.104.34
*Jan 17 08:56:38.659: NAT: translation failed (A), dropping packet s=80.50.10.11 d=192.168.104.34
*Jan 17 08:56:38.663: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:39.663: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:40.675: NAT: translation failed (A), dropping packet s=80.50.10.11 d=192.168.104.34
*Jan 17 08:56:41.679: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:41.679: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:44.687: NAT: translation failed (A), dropping packet s=80.50.10.11 d=192.168.104.34
*Jan 17 08:56:45.679: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:45.679: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:47.667: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:48.679: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:50.687: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:56:52.695: NAT: translation failed (A), dropping packet s=80.50.10.11 d=192.168.104.34
*Jan 17 08:56:54.699: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
altnet#
altnet#
*Jan 17 08:56:57.675: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:56:58.679: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:57:00.687: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:57:02.147: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:57:02.703: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:57:04.699: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:57:12.707: NAT: translation failed (A), dropping packet s=80.50.10.11 d=8.8.8.8
*Jan 17 08:57:25.191: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:57:25.951: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:57:26.859: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:57:26.947: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:57:28.283: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:57:30.879: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1
*Jan 17 08:57:41.107: NAT: translation failed (A), dropping packet s=80.50.10.11 d=1.1.1.1

Giuseppe Larosa · ‎01-19-2024

Hello @alativitys ,

your FAS0 is a L2 interface and NAT is clearly L3.

so I would suggest the following:

conf t

no ip nat inside source list 1 interface FastEthernet0 overload

ip nat inside source list 1 interface Fast4 overload

Hope to help

Giuseppe

alativitys · ‎01-18-2024

I'm still waiting for help with this issue