Internet access on vlans

[Ipefixe]

Hi,

I have a Cisco 1812 router and three Cisco 2960 switchs. I have a router FAI who have the address 192.168.1.1

In Vlan 10, i can ping 192.168.1.4 (router) but i can't ping 192.168.1.1 (internet router). I want access to internet in the vlan 10.

Thank you for your help !

The config of the router :

"

ip dhcp pool 10
network 10.0.10.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.1
domain-name gefflaut
!
interface FastEthernet0
ip address 192.168.1.4 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet1
ip address 10.0.0.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet1.10
encapsulation dot1Q 10
ip address 10.0.10.1 255.255.255.0

interface Vlan1
no ip address
!
interface Vlan10
no ip address
!
ip default-gateway 192.168.1.1
ip route 0.0.0.0 0.0.0.0 192.168.1.1

"

The config of one switch :

"

interface Vlan1
ip address 10.0.0.30 255.255.255.0
!
interface Vlan10
no ip address
!
ip default-gateway 192.168.1.1

"

[Seb Rupik]

HI there,

Most likely the internet router (192.168.1.1) doesn't have a route for 10.0.10.0/24 , it will need the following:

!
ip route 10.0.10.0 255.255.255.0 192.168.1.4
!

Also the gateway option in your DHCP pool should be for the VLAN10 sub-interface:

!
ip dhcp pool 10
  no default-router 192.168.1.1
  default-router 10.0.10.1
!

cheers,

Seb.

[Ipefixe]

I did that but i can't ping 192.168.1.1 and google via a computer on vlan 10...

[Giuseppe Larosa]

Hello Ziboulaga,

these are two different issues:

for internet access from internal Vlan 10 the internet router has to perform NAT also for  the subnet of Vlan 10.

If internet router is not under your control you need to perform NAT on your C1812  presenting all the internal users with a translated address equal to 192.168.1.4 on the C1812 router.

If you have access to the internet router in addition to routing information you may need to check if an ACL is applied inbound on the LAN interface this may be blocking ICMP requests from Vlan 10 to the internet router.

Hope to help

Giuseppe