cisco 881 cant access internet

[cardmaker]

Hello, from console i cant ping google.com or ping 4.2.2.1 form my router.

here is my config

Current configuration : 1976 bytes
!
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 $1$MIpR$pornU7ZCXJR68ina5z7sV1
!
no aaa new-model
!
!
!
!
!

ip dhcp excluded-address 10.0.0.100 10.0.0.150
ip dhcp excluded-address 10.0.0.20
ip dhcp excluded-address 10.0.0.1
!
ip dhcp pool net
 network 10.0.0.0 255.0.0.0
 default-router 10.0.0.1
 dns-server 10.53.XX.XXX
!
ip dhcp pool rede
 import all
 default-router 10.0.0.1
 dns-server 212.1XX.XX.XX
!
!
!
ip cef
no ipv6 cef
!

multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C881-K9 sn XXXXXXXXXXXX
!
!
username dom password 0 cisco
!
!
!
!
!
!
!

interface FastEthernet0
 switchport access vlan 2
 no ip address
!
interface FastEthernet1
 switchport access vlan 2
 no ip address
!
interface FastEthernet2
 switchport access vlan 2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface FastEthernet4
 ip address dhcp
 ip nat outside
 ip nat enable
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface Vlan1
 no ip address
!
interface Vlan2
 description Connection to SW1
 ip address 10.0.0.20 255.0.0.0
 ip nat inside
 ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface FastEthernet4 overload
ip nat inside source list 101 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 FastEthernet4
!
!
access-list 101 permit ip 10.0.0.0 0.255.255.255 any
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
line con 0
 no modem enable

line aux 0
line vty 0 4
 password cisco
 login
 transport input all
line vty 5 15
 password cisco
 login
 transport input all
!
scheduler allocate 20000 1000
!
end

my ISP is cable modem and ip dhcp, any sugestions?

[paul driver]

Hello

Can you try the following:
 

no ip nat inside source list 1 interface FastEthernet4 overload
no ip route 0.0.0.0 0.0.0.0 FastEthernet4

interface FastEthernet4
no ip nat enable

no ip dhcp pool rede

ip route 0.0.0.0 0.0.0.0 DHCP
 

ip dhcp pool net
 network 10.0.0.0 255.0.0.0
 default-router 10.0.0.1
 import all

sh ip dhcp import

res

paul

[cardmaker]

whit yours comands it worked for some time and then no ping again,

here again my config

cisco#sh run
cisco#sh running-config
Building configuration...

Current configuration : 1818 bytes
!
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 $1$MIpR$pornU7ZCXJR68ina5z7sV1
!
no aaa new-model
!
!
!
!
!
!

!
ip dhcp excluded-address 10.0.0.100 10.0.0.150
ip dhcp excluded-address 10.0.0.20
ip dhcp excluded-address 10.0.0.1
!
ip dhcp pool net
 import all
 network 10.0.0.0 255.0.0.0
 default-router 10.0.0.1
 dns-server 10.53.xx.xxx
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C881-K9 sn xxxxxxx
!
!
username dom password 0 cisco
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
 switchport access vlan 2
 no ip address
!
interface FastEthernet1
 switchport access vlan 2
 no ip address
!
interface FastEthernet2
 switchport access vlan 2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface FastEthernet4
 ip address dhcp
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface Vlan1
 no ip address
!
interface Vlan2
 description Connection to SW1
 ip address 10.0.0.20 255.0.0.0
 ip nat inside
 ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
!
ip nat inside source list 101 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
access-list 101 permit ip 10.0.0.0 0.255.255.255 any
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 password cisco
 login
 transport input all
line vty 5 15
 password cisco
 login
 transport input all
!
scheduler allocate 20000 1000
!
end

the ping 4.2.2.1 result is

cisco#ping 4.2.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 736/768/792 ms
 

and ping google
cisco#ping google.com
Translating "google.com"...domain server (10.53.0.235) (10.53.0.236)
% Unrecognized host or address, or protocol not running.
 

[paul driver]

Hello

ip dhcp pool net
 default-router 10.0.0.20
 No dne-server 10.53.xx.xxx

sh IP dhcp input

res

paul
 

[cardmaker]

this time only worked one time afther your comands and reloaded router. here the result

cisco#ping google.com
Translating "google.com"...domain server (10.53.0.235) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.58.210.142, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 624/680/736 ms
cisco#

here the new config

Building configuration...

Current configuration : 1794 bytes
!
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 $1$MIpR$pornU7ZCXJR68ina5z7sV1
!
no aaa new-model
!
!
!
!
!
!

!
ip dhcp excluded-address 10.0.0.100 10.0.0.150
ip dhcp excluded-address 10.0.0.20
ip dhcp excluded-address 10.0.0.1
!
ip dhcp pool net
 import all
 network 10.0.0.0 255.0.0.0
 default-router 10.0.0.20
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C881-K9 sn xxxxxx
!
!
username dom password 0 cisco
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
 switchport access vlan 2
 no ip address
!
interface FastEthernet1
 switchport access vlan 2
 no ip address
!
interface FastEthernet2
 switchport access vlan 2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface FastEthernet4
 ip address dhcp
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface Vlan1
 no ip address
!
interface Vlan2
 description Connection to SW1
 ip address 10.0.0.20 255.0.0.0
 ip nat inside
 ip virtual-reassembly in
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
!
ip nat inside source list 101 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
access-list 101 permit ip 10.0.0.0 0.255.255.255 any
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 password cisco
 login
 transport input all
line vty 5 15
 password cisco
 login
 transport input all
!
scheduler allocate 20000 1000
!
end

[paul driver]

Hello

Are you still having connectivity problems?

res

Paul

[cardmaker]

hello, yes i still having connectivity problems.

[paul driver]

Hello

Do you have internet access now?
Where is the connection failing - on the router or from a client pc?


res

Paul


 

[cardmaker]

i just have internet access in a few moments afther execute yours commands.

then pass some minutes i dont have anymore acess to the internet.

the connection is failing in the router.

[paul driver]

Hello

In your OP you stated
"From console i cant ping google.com or ping 4.2.2.1 form my router."

Can you ping anything on the internet - or have no access whatsoever?

res

Paul

[cardmaker]

cisco#ping 4.2.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.1, timeout is 2 seconds:
!!
*Apr 20 17:27:12.551: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to up!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 620/716/800 ms
cisco#ping google.com
Translating "google.com"...domain server (10.53.0.235) (10.53.0.236)
% Unrecognized host or address, or protocol not running.

the ping 4.2.2.1 is ok but nothing for the rest.
 

[paul driver]

Hello

Do hostname  resolution isnt working ( dns)

can you post

Sh ip dhcp import

res

Paul

 

[paul driver]

Hello

So hostname  resolution isnt working ( dns)

can you post

Sh ip dhcp import

res

Paul

 

[cardmaker]

here you the answer:

cisco#sh ip dhcp import

Address Pool Name: net
Domain Name Server(s): 10.53.0.235 10.53.0.236

[paul driver]

Hello

Looks like you dns is inappropriate -

can you try adding dns to your dhcp pool.

ip dhcp pool net
dns-server 8.8.8.8 8.8.4.4

and test again

res

Paul