Cisco 881: Need help with DHCP not assigning IP to VLAN 10 (beginner)

[Mawk]

Hello,

Let me start by telling I'm a complete beginner, but I've tried reading posts on this forum, YouTube, Googling etc. to find an solution, but I'm stuck.

I have an static IP from my ISP, it's a /30 subnet, so I only have one IP for my WAN and a GW. I think I have assigned it correctly to my WAN port (Fa4), and I have created a DHCP pool and assigned Fa0 to VLAN 10.

Problem is that I can't get an IP assigned to my laptop which is connected to Fa0, but if I do an ipconfig /renew, I can see an ARP for a few seconds, but my laptop still has an 169.x.x.x IP-address.

The other problem is that I can't ping outside to the Internet.

I'm sure I have made a rookie mistake, but I can't for the sake of me, see what. The IP 200.50.70.10/30 is just an example and not my real IP-address.

Router#sh run
Building configuration...

Current configuration : 1337 bytes
!
! Last configuration change at 18:53:28 UTC Wed Feb 6 2036
! NVRAM config last updated at 19:03:10 UTC Wed Feb 6 2036
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
memory-size iomem 10
!
!
ip source-route
!
!
ip dhcp excluded-address 10.10.10.1 10.10.10.10
!
ip dhcp pool VLAN10pool
   network 10.10.10.0 255.255.255.0
   default-router 10.10.10.1 
   dns-server 8.8.8.8 
!
!
ip cef
no ipv6 cef
!
!
license udi pid CISCO881-K9 sn FCZ1604911J
!
!
!
!
! 
!
!
!         
!
!
!
interface FastEthernet0
 description Name: Internal ID: VLAN10
 switchport access vlan 10
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
 description Name: WAN ID: 32711223
 ip address 200.50.70.10 255.255.255.252
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface Vlan1
 no ip address
!
interface Vlan10
 ip address 10.10.10.1 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 200.50.70.9
!
!
!
!
!
!
control-plane
!
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 login    
!
scheduler max-task-time 5000
end

Router#sh vlan-switch 

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Fa1, Fa2, Fa3
10   VLAN0010                         active    Fa0
20   VLAN0020                         active    
30   VLAN0030                         active    
1002 fddi-default                     act/unsup 
1003 token-ring-default               act/unsup 
1004 fddinet-default                  act/unsup 
1005 trnet-default                    act/unsup 

VLAN Type  SAID       MTU   Parent RingNo BridgeNo Stp  BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1    enet  100001     1500  -      -      -        -    -        1002   1003
10   enet  100010     1500  -      -      -        -    -        0      0   
20   enet  100020     1500  -      -      -        -    -        0      0   
30   enet  100030     1500  -      -      -        -    -        0      0   
1002 fddi  101002     1500  -      -      -        -    -        1      1003
1003 tr    101003     1500  1005   0      -        -    srb      1      1002
1004 fdnet 101004     1500  -      -      1        ibm  -        0      0   
1005 trnet 101005     1500  -      -      1        ibm  -        0      0   

Looking for all the help I can get.

Thanks.

[Leo Laohoo]

---

@Mawk wrote:

interface FastEthernet0
 description Name: Internal ID: VLAN10
 switchport access vlan 10

---

Portfast is not enabled.

[Mawk]

The port is UP and enabled, not sure why it didn't show in the running-config.

[balaji.bandi]

Where is your PC connected ? what Port ?

ignore my question you have conected laptop to Fa0, missed it..need cofffeeee

[Mawk]

Yes, Fa0 :)

[Mawk]

Router#sh int desc
Interface                      Status         Protocol Description
Fa0                            up             up       Name: Internal ID: VLAN10
Fa1                            down           down     
Fa2                            down           down     
Fa3                            down           down     
Fa4                            up           up     Name: WAN ID: 32711223
NV0                            up             up       
Vl1                            down           down     
Vl10                           up             up       
Router#sh ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.10.10.1              -   f0f7.55d0.7b72  ARPA   Vlan10
Internet  10.10.10.19             1   0021.cc41.b2bb  ARPA   Vlan10
Internet  200.50.70.10           -   f0f7.55d0.7b76  ARPA   FastEthernet4

But if I check on my laptop, I still have an 169.x.x.x address, and the ARP is gone in a few seconds.

[Mawk]

I'm not sure what I did, but I corrected the timezone and clock, and I have now received an correct IP-address on my laptop, not sure if this was the issue? I did nothing more than change the clock and adjust to the correct timezone.

lekeplass1-r1#sh ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.10.10.1              -   f0f7.55d0.7b72  ARPA   Vlan10
Internet  10.10.10.23             0   0021.cc41.b2bb  ARPA   Vlan10
Internet  200.50.70.9           0   Incomplete      ARPA   
Internet  200.50.70.10           -   f0f7.55d0.7b76  ARPA   FastEthernet4

I still can't ping outside, to the Internet though. I'm sure I'm just missing something simple.

[balaji.bandi]

From router console are you able to ping ISP Side IP address ? before we proceed further ?

post the ping output from router to 

ping 200.50.70.9

[Mawk]

No, I'm not able to ping the gateway (ISP).

Router#sh int desc
Interface                      Status         Protocol Description
Fa0                            up             up       Name: Internal ID: VLAN10
Fa1                            down           down     
Fa2                            down           down     
Fa3                            down           down     
Fa4                            up             up       Name: WAN ID: 32711223
NV0                            up             up       
Vl1                            down           down     
Vl10                           up             up       
Router#sh ip int bri
Any interface listed with OK? value "NO" does not have a valid configuration

Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0              unassigned      YES unset  up                    up      
FastEthernet1              unassigned      YES unset  down                  down    
FastEthernet2              unassigned      YES unset  down                  down    
FastEthernet3              unassigned      YES unset  down                  down    
FastEthernet4              200.50.70.10   YES manual up                    up      
NVI0                       unassigned      NO  unset  up                    up      
Vlan1                      unassigned      YES unset  down                  down    
Vlan10                     10.10.10.1      YES manual up                    up      
Router#sh arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.10.10.1              -   f0f7.55d0.7b72  ARPA   Vlan10
Internet  10.10.10.23             0   0021.cc41.b2bb  ARPA   Vlan10
Internet  200.50.70.9           0   Incomplete      ARPA   
Internet  200.50.70.10           -   f0f7.55d0.7b76  ARPA   FastEthernet4
Router#ping 200.50.70.9

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 200.50.70.9 timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

[Georg Pauwen · Accepted solution]

Hello,

I don't want to be redundant, and I think NAT has been mentioned before, but make sure the lines marked in bold are in your configuration:

Router#sh run
Building configuration...

Current configuration : 1337 bytes
!
! Last configuration change at 18:53:28 UTC Wed Feb 6 2036
! NVRAM config last updated at 19:03:10 UTC Wed Feb 6 2036
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
memory-size iomem 10
!
ip source-route
!
ip dhcp excluded-address 10.10.10.1 10.10.10.10
!
ip dhcp pool VLAN10pool
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server 8.8.8.8
!
ip cef
no ipv6 cef
!
license udi pid CISCO881-K9 sn FCZ1604911J
!
interface FastEthernet0
description Name: Internal ID: VLAN10
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description Name: WAN ID: 32711223
ip address 200.50.70.10 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
no ip address
!
interface Vlan10
ip address 10.10.10.1 255.255.255.0
ip nat inside
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface FastEthernet4 overload
!
ip route 0.0.0.0 0.0.0.0 200.50.70.9
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
control-plane
!
line con 0
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
end

[Seb Rupik]

Hi there,

Try adding the domain-name to the lease. I have seen some clients refuse a lease if it is not set:

!
ip dhcp pool VLAN10pool
   domain-name example.com
!

cheers,

Seb.

[Mawk]

Thanks, I've done this now, but I actually got an correct ARP from my laptop now and it assigned an IP to it after I changed the timezone and adjusted the clock. Not sure if this was the case or why it suddenly worked.

Still, I can't reach the Internet or ping Google DNS.

[balaji.bandi]

As suggest other my post ping to ISP IP address and confirm and once that is confirmed.

we need to add NAT rules for the same to work.

[Mawk]

Yeah, I can't ping, posted an reply.

I'm kind of overflooded with information at the moment, mind pointing me in the correct direction regarding the NAT rules?

[Georg Pauwen]

Hello,

make sure your configuration looks exactly like this:

Router#sh run
Building configuration...

Current configuration : 1337 bytes
!
! Last configuration change at 18:53:28 UTC Wed Feb 6 2036
! NVRAM config last updated at 19:03:10 UTC Wed Feb 6 2036
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging console
!
no aaa new-model
memory-size iomem 10
!
ip source-route
!
ip dhcp excluded-address 10.10.10.1 10.10.10.10
!
ip dhcp pool VLAN10pool
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server 8.8.8.8
!
ip cef
no ipv6 cef
!
license udi pid CISCO881-K9 sn FCZ1604911J
!
interface FastEthernet0
description Name: Internal ID: VLAN10
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description Name: WAN ID: 32711223
ip address 200.50.70.10 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
no ip address
!
interface Vlan10
ip address 10.10.10.1 255.255.255.0
ip nat inside
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface FastEthernet4 overload
!
ip route 0.0.0.0 0.0.0.0 200.50.70.9
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
control-plane
!
line con 0
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
end