02-01-2012 11:56 AM - edited 03-04-2019 03:06 PM
Hello,
in order to re-take the CCNA exams (I have passed it 5 years ago), I have found and received a Cisco 881 Enet Sec router to have training and make a little lab.
I have 4 LAN port (with VLANs) and 1 WAN (Fast Ethernet4)
I have succeed in configuring the VLANs, the DHCP, ... but the routing part don't work. I have checked my lessons and my notes but I don't succeed in creating the routing between the VLANs and the WAN. (I have make a lot of tests with access-list, RIP, nat, ... this afternnon but I don't find)
@ip of my computer on the otherside of the router : 192.168.31.1/24
@ip of the WAN port : 192.168.31.2/24
@ip of VLAN1 : 10.10.10.1/7 (I can obtain an address when connected directly to the port but can't acceed to the PC in 31.1)
@ip of VLAN20 : 192.168.0.1/24 (with an AP, I can obtain an IP address and ping the 192.168.31.2 but I can't join the PC in 31.1)
I'm wondering if that's not come from the router ... However I think it comes form my mistakes :-D
Could you tell me if there's anything wrong in the config below ?
running-config : without the security and password part (I think that's not useful)
Building configuration...
Current configuration : 5492 bytes
! Last configuration change at 16:38:49 UTC Wed Feb 1 2012 by cisco
! NVRAM config last updated at 16:14:58 UTC Wed Feb 1 2012
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname yourname
!
boot-start-marker
boot-end-marker
logging buffered 51200 warnings
no aaa new-model
!
memory-size iomem 10
!
crypto part - skipped
ip source-route
!
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.0.1
!
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
!
ip dhcp pool VLAN20
network 192.168.0.0 255.255.255.0
dns-server 192.168.31.12 212.147.10.180
default-router 192.168.0.1
!
ip cef
ip domain name yourdomain.com
ip name-server 192.168.31.12
ip name-server 212.147.10.180
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO881-SEC-K9 sn FCZ1553C161
!!
username admin privilege 15 secret 5 $1$CjDg$cD31.PJhVxNPNiXfxe6v70
!
!
interface FastEthernet0
switchport mode trunk
!!
interface FastEthernet1
interface FastEthernet2
interface FastEthernet3
!
interface FastEthernet4
description $ES_WAN$
ip address 192.168.31.2 255.255.255.0
duplex auto
speed auto
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.248
ip tcp adjust-mss 1452
!
!
interface Vlan20
ip address 192.168.0.1 255.255.255.0
!!
ip default-gateway 192.168.31.1
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip route 0.0.0.0 0.0.0.0 192.168.31.1
ip route 192.168.0.0 255.255.255.0 192.168.31.1
!
access-list 23 permit 10.10.10.0 0.0.0.7
no cdp run
Thanks a lot for your help.
Martin
Solved! Go to Solution.
02-02-2012 09:14 AM
Martin
I am glad that you have solved the problem and that everything is OK now. Thank you for posting back to the forum and telling us that it is solved and how you solved it. Perhaps now you would mark the problem as solved?
HTH
Rick
02-01-2012 05:38 PM
hi martin,
could you check if you have the "ip routing" command enabled? also make sure you have L2 VLANs configured and SVI is up/up.
please post your full config (remove sensitive info), show vlan-switch and show ip interface brief output.
02-01-2012 08:00 PM
Martin
I very much agree with John that additional information would be very helpful and the outputs that he requests would be a good starting place.
In addition I have some things that I hope that you can provide clarification because I am confused about them:
- you define interface VLAN 20. But I so not see where the layer 2 VLAN 20 is defined. Where is VLAN 20?
- you configure Fastether0 as a trunk but do not tell us what it is connected to. What is connected to interface Fastether0?
- you mention an AP but do not tell us anything about it. Where is the AP? What is the AP connected to?
HTH
Rick
02-02-2012 07:57 AM
Hello,
thank's for your response.
I have found the problem finally on another pages from the forum : I have activate the nat
interface Vlan20
ip address 192.168.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
interface FastEthernet4
ip address 192.168.31.2 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
and I have activate the acces list and the static ip route :
ip nat inside source list 10 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 192.168.31.1
access-list 10 permit 10.10.10.0 0.0.0.7
access-list 10 permit 192.168.0.0 0.0.0.255
Everything's OK now.
thanks a lot
02-02-2012 09:14 AM
Martin
I am glad that you have solved the problem and that everything is OK now. Thank you for posting back to the forum and telling us that it is solved and how you solved it. Perhaps now you would mark the problem as solved?
HTH
Rick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide