How to config c892FSP as internet gateway

[John Kellen]

Hello,

after hours of searching, reading and trying I'm still not able to get our new router working.

No doubt it's me, but what seemed a simple task is taking into a graveyard shift :/

Here is the situation:

we are on a campus network

My router wan interface has ip address 1.2.200.8/24 (first digits are fake)

My external gateway is 1.2.200.100

dns servers are 1.2.15.13 and 1.2.250.7

I would like to see the network 10.0.0.0/24 on the lan side of my router, so I configed 10.0.0.1/24 on vlan1

I also configured a dhcp server giving out ip address, excluding of 10.0.0.1-10.0.0.99

The dhcp works fine in clients behind the router, they receive an ip address, 10.0.0.1 as gateway and the above mentioned dns servers

After fiddling around with routes

0.0.0.0 0.0.0.0 1.2.200.100  => does not work for the clients

I disabled routes and set default-gateway as  0.0.0.0 0.0.0.0 1.2.200.100 => also not working for the clients

Whatever I do, I cannot get the clients to access the internet, they can ping 10.0.0.1, they can open the CP express webinterface.

I can however ping internet address from the CLI on the router without a problem.

Beeing really lost, can someone tell me how to get this configured please?

i really don't know what is wrong...

So if I erase nvram and start over, what would be the steps to get it working?

Thank you in advance

John

[jj27]

Did you setup NAT to hide the 10.0.0.0/24 behind a public IP address?

[John Kellen]

No I did not, was planning to do so once the connection could be made by the clients behind the router.

Is that wat was wrong?

[jawad-mukhtar]

HI,

You have to do NAT then your cleint will be able to access internet

*** Do Rate Helpful Posts***

[jj27 · Accepted solution]

Yes.  Let's assume your internal interface is F0/0 and your External is F0/1.

You would need the following configuration:

access-list 1 permit 10.0.0.0 0.0.0.255

ip nat inside source list 1 interface F0/1 overload

int f0/0

ip nat inside

int 0/1

ip nat outside

[John Kellen]

Hi guyz,

following instructions above, thanks for that

Since all gigabitports on the onside (8) are L2 ports I placed the nat inside on Vlan1 (which has ip address 10.0.0.1)

And it seems to work

Thanks guyz (I added credit)