09-15-2023 11:09 PM
I'm very new to Cisco and am trying to learn how to use it to finish a course that I'm running out of time for. I'm studying online and cannot contact any of my teachers or help, so I've come here begging for some assistance.
I've been asked to configure an access list on a router with the following details:
'BranchR(config)#ip access-list standard BRANCH_OFFICE_LAN_To_INTERNET'
BranchR(config-std-nacl)#permit 192.168.100.0 0.0.0.255
BranchR(config-std-nacl)#exit
Define inside and outside interfaces
BranchR(config)#int g0/0/0
BranchR(config-if)#ip nat outside
BranchR(config)#int g0/0/1
BranchR(config-if)#ip nat inside
Enable NAT/PAT
BranchR(config)#ip nat inside source list BRANCH_OFFICE_LAN_To_INTERNET interface g0/0/0 overload
Upon completion, I'm to access a computer on the network and ping 8.8.8.8 but this doesn't work.
I have attempted to do this multiple times over the last several hours changing little things here and there and I can't seem to get anything to co-operate. It's as though changes I've made in the CLI on the router aren't being saved.
If anyone could offer some assistance I'd be forever in your debt. I've added some images below.
09-16-2023 12:15 AM - edited 09-16-2023 12:16 AM
Hello @mrbistian,
Please provide Switch and Router Branch R full configuration.
Do #show run and add the full outputs here.
As concerned Switch, ports where PC and endpoints are connected have to be in switchport mode access vlan X. X id of vlan. The port connected towards Router BranchR have to be in Trunk mode.
On Router BranchR, port towards the Switch have to be in "sub interface" state, named Router On A Stick: https://www.grandmetric.com/knowledge-base/design_and_configure/router-on-a-stick-approach-cisco-configuration/
09-16-2023 11:46 PM
Couple of Tests :
1. From Internet Router are you able to ping 8.8.8.8
2. You have 2 Subnets as per your screenshot shows different Gig 0/0/1 configured 192.168.89.1 IP address and you NAT only 192.168.100.x subnet
so add i192.168.89.0/24 subnet to ACL ip access-list standard BRANCH_OFFICE_LAN_To_INTERNET'
3. your post mentioned you added NAT as below :
ip nat inside source list BRANCH_OFFICE_LAN_To_INTERNET interface g0/0/0 overload
But the screenshot show difference - so verify that.
4. what is the PC IP address you trying to ping (does the PC able to ping its own gateway first ?)
5. you can check on router for NAT Translation.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide