Cisco 888G clients no internet connection

[rfm1010]

Currently stuck and not sure what is wrong with my config. Clients behind the cisco 888g are not able to browse website. DNS seems to be working on clients. Ping does not work either. Ping and traceroute are working from the router. Below is my config

ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool ccp-pool
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.8.8
lease 0 2
!
!
!
no ip domain lookup
ip domain name home.local
ip name-server 8.8.8.8
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
chat-script INTERNET "" "ATDT*99*1#" TIMEOUT 30 "CONNECT"
controller DSL 0
!
controller Cellular 0
!
!

interface Loopback1
no ip address
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Cellular0
no ip address
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer in-band
dialer pool-member 1
async mode interactive
ppp authentication chap callin
ppp chap hostname ISPWHO
ppp chap password 0 nolase
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation slip
dialer pool 1
dialer idle-timeout 0
dialer string WHATEVER
dialer persistent
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat inside source list 10 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1
!
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 23 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip list 10
no cdp run

[Seb Rupik]

Hi there,

What is the output from:

sh ip nat statistics

cheers,

Seb.

[rfm1010]

Hi Seb, show stats as per below

Total active translations: 47 (0 static, 47 dynamic; 47 extended)
Peak translations: 47, occurred 00:00:13 ago
Outside interfaces:
Cellular0, Dialer1
Inside interfaces:
Vlan1
Hits: 129 Misses: 0
CEF Translated packets: 23, CEF Punted packets: 110
Expired translations: 0
Dynamic mappings:
-- Inside Source
[Id: 1] access-list 10 interface Dialer1 refcount 47

Total doors: 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0

[Philip D'Ath]

Does the Dialer or Cellular interface manage to get an IP address (if so, which interface)?

Are you sure the SIM is activated and on a data plan?

[rfm1010]

Hi Philip,

Yes the Dialer managed to get an IP address. SIM is activated with a data plan. I can ping from the router itself. So it seems to be an issue with NAT which I could not figure out.

#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 460/625/760 ms

[rfm1010]

Hi Guys,

thanks for all your help.

Found the fixed for this issue by disabling  "ip cef". 

got the solution from

https://supportforums.cisco.com/t5/lan-switching-and-routing/problem-with-nat-on-cisco-897va-router/td-p/2932060

still not sure why it caused the issue tho.

[Philip D'Ath]

If that fixed it then it is probably a software bug in that release.