Solved: Issues Connection Internet to Cisco 2960 Switch

WVerga · ‎10-24-2020

Have been studying for my CCNA and got some equipment to help me out (I actually have 2 of each but am only using 1 as I am networking my room as I study)

I can ping the Computer from the router but there is no internet activity

Using my wifi off my Fios Router till I get this working

Connections:

Fios Internet Router <-----> (G0/1) Cisco Router (G0/0) <-----> (G0/1) Cisco Switch <-----> TV/Printer/PS4/PC/Cable Box

Please help

Configs are below for both

replaced passwords with *'s for safety

WVerga · ‎10-27-2020

Fixed it

Set Router port (G0/1) connected to Fios Router to : IP Address DHCP

Then tweaked the static IP of the PC and Presto

View solution in original post

balaji.bandi · ‎10-24-2020

Since you mentioned you learning CCNA, i will guide a couple of Links which give you an idea of how you can solve your situation, this helps you to learn better - if i can provide a straight config, you can paste and it works. but it leaves you behind learning.

If you looking to NAT on Router follow below Link :

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/260-cisco-router-nat-overload.html

Connecting Router to Switch, and your end device need to be access VLAN and get DHCP from Router.

Follow the below link :

https://networklessons.com/cisco/ccna-routing-switching-icnd1-100-105/how-to-configure-router-on-a-stick

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

paul driver · ‎10-24-2020

+5 @balaji.bandi

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

Georg Pauwen · ‎10-24-2020

Hello,

make the changes marked in bold:

Router

Current configuration : 1887 bytes
!
! Last configuration change at 11:28:18 UTC Sat Oct 24 2020
!
version 15.8
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname MBR
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$KQFc$9NhpS3VWkrTon37NAlIFv0
!
no aaa new-model
!
--> ip dhcp excluded-address 192.168.2.1
--> ip dhcp excluded-address 192.168.3.1
!
--> ip dhcp pool VLAN_2
--> network 192.168.2.0 255.255.255.0
--> default-router 192.168.2.1
--> dns-server 8.8.8.8 8.8.4.4
!
--> ip dhcp pool VLAN_3
--> network 192.168.3.0 255.255.255.0
--> default-router 192.168.3.1
--> dns-server 8.8.8.8 8.8.4.4
!
domain-name cisco.com
!
no ip domain lookup
ip domain name Armory.com
ip name-server 192.168.11.12
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
license udi pid CISCO1941/K9 sn FTX17388639
license boot module c1900 technology-package securityk9
!
redundancy
!
interface Embedded-Service-Engine0/0
ip address 172.27.140.2 255.255.255.0
!
--> interface GigabitEthernet0/0
--> description Link to Switch
--> ip address 192.168.1.1 255.255.255.0
--> ip nat inside
ip virtual-reassembly in
duplex half
speed 100
!
--> interface GigabitEthernet0/0.2
--> encapsulation dot1Q 2
--> ip address 192.168.2.1 255.255.255.0
--> ip nat inside
!
--> interface GigabitEthernet0/0.3
--> encapsulation dot1Q 3
--> ip address 192.168.3.1 255.255.255.0
--> ip nat inside
!
interface GigabitEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
--> ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1 dhcp
!
--> ip nat inside source list 1 interface GigabitEthernet0/1 overload
!
--> access-list 1 permit 192.168.0.0 0.0.255.255
!
control-plane
!
alias exec con conf t
alias exec sib show ip int brief
alias exec srb show run | b
alias exec sri show run int
banner motd ^C For Administrator Access Only ^C
!
line con 0
logging synchronous
history size 50
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password *****
login
transport input telnet
!
scheduler allocate 20000 1000
!
end

Switch

MB-SW>en
Password:
MB-SW#sh run
Building configuration...

Current configuration : 4122 bytes
!
! Last configuration change at 07:12:38 UTC Mon Mar 1 1993
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname MB-SW
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$NCdQ$wI8uMrl70QlzrEoCrIfuN.
!
no aaa new-model
system mtu routing 1500
!
crypto pki trustpoint TP-self-signed-1671224832
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1671224832
revocation-check none
rsakeypair TP-self-signed-1671224832
!
crypto pki certificate chain TP-self-signed-1671224832
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31363731 32323438 3332301E 170D3933 30333031 30303031
30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 36373132
32343833 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
81009D9E E0F905D2 4FD34A35 CB0F273C 3E685687 CB05C86D E64613A1 7871CB86
0CD3CEE6 8583F2C8 59A8BD0F C44D6961 A08B53EB 39B63B5F 79FD32A0 CFA43961
28AD8667 15617573 218FC9AC 740D2FE4 23F79CC1 25D341F8 EC937EC6 01425C44
51D04C88 11ABBB85 4A8BC56B 6BDB59C0 A560550A 6D860C5A 9C2453C9 6D1FF0FE
F8E50203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14C0EDA5 58E17DDB 57E56741 042FA216 19A87CD9 43301D06
03551D0E 04160414 C0EDA558 E17DDB57 E5674104 2FA21619 A87CD943 300D0609
2A864886 F70D0101 05050003 81810007 6D1FA86F AF7DDAF1 EBD924BB 6C4270B3
B1C04B87 F1B939BD 92AB85E5 A4753461 70563A14 D5025D29 403E9171 4C46B7BD
463193FF 510BD574 B4244816 B938197C 519D34A6 F8C084BF 4F1B3534 F4741C25
F94770CC FE144AFD 07E88EBD B89F3DF2 A55C7104 D209FADB 1BF095E6 4FF4F0AC
A480C9B3 0E7826E6 3B9840A3 AC581B
quit
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport access vlan 3
ip dhcp client client-id FastEthernet0/1
!
interface FastEthernet0/2
switchport access vlan 3
!
interface FastEthernet0/3
switchport access vlan 3
!
interface FastEthernet0/4
switchport access vlan 3
!
interface FastEthernet0/5
switchport access vlan 3
!
interface FastEthernet0/6
switchport access vlan 2
shutdown
!
interface FastEthernet0/7
switchport access vlan 2
shutdown
!
interface FastEthernet0/8
switchport access vlan 2
shutdown
!
interface FastEthernet0/9
switchport access vlan 2
shutdown
!
interface FastEthernet0/10
switchport access vlan 2
shutdown
!
interface FastEthernet0/11
switchport access vlan 2
shutdown
!
interface FastEthernet0/12
switchport access vlan 2
shutdown
!
interface FastEthernet0/13
switchport access vlan 2
shutdown
!
interface FastEthernet0/14
switchport access vlan 2
shutdown
!
interface FastEthernet0/15
switchport access vlan 2
shutdown
!
interface FastEthernet0/16
switchport access vlan 2
shutdown
!
interface FastEthernet0/17
switchport access vlan 2
shutdown
!
interface FastEthernet0/18
switchport access vlan 2
shutdown
!
interface FastEthernet0/19
switchport access vlan 2
shutdown
!
interface FastEthernet0/20
switchport access vlan 2
shutdown
!
interface FastEthernet0/21
switchport access vlan 2
shutdown
!
interface FastEthernet0/22
switchport access vlan 2
shutdown
!
interface FastEthernet0/23
switchport access vlan 2
shutdown
!
interface FastEthernet0/24
switchport access vlan 2
shutdown
!
--> interface GigabitEthernet0/1
--> description Uplink to Router
--> switchport mode trunk
!
interface GigabitEthernet0/2
!
--> interface Vlan1
--> ip address 192.168.1.2 255.255.255.0
!
--> ip default-gateway 192.168.1.1
!
ip http server
ip http secure-server
!
vstack
!
line con 0
line vty 0 4
password *****
login
line vty 5 15
password *****
login
!
end

WVerga · ‎10-24-2020

I made the changes, still no internet

Now I get duplicate address 192.168.1.1 on G0/1 on router

* fixed this specific issue (Fios Router was 192.168.1.1)

And what settings do I put for my pc ip?

Manual or DHCP?

Georg Pauwen · ‎10-25-2020

Hello,

Vlan 1 is for management, so change the Router config as below:

interface GigabitEthernet0/0
description Link to Switch
--> ip address 192.168.4.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex half
speed 100

and the Switch config to:

--> interface Vlan1
--> ip address 192.168.4.2 255.255.255.0
!
--> ip default-gateway 192.168.4.1

The router functions as DHCP server, so all clients need to be set to DHCP. The ports need to look like this:

interface FastEthernet0/7
switchport access vlan 2
--> no shut
--> spanning-tree portfast

WVerga · ‎10-25-2020

Here is my "sh vlan" & "sh ip int br" off the switch

Georg Pauwen · ‎10-25-2020

Hello,

the output looks right. Do the DHCP enabled devices connected to the switch get an IP address ?

And can you ping 8.8.8.8 from the router ?

WVerga · ‎10-25-2020

I can't ping anything from the router,

all devices have an ip address,

none of them where able to get a gateway address

my pc ipconfig

Georg Pauwen · ‎10-26-2020

Hello,

post the current configs of both the router and the switch again.

WVerga · ‎10-26-2020

Georg Pauwen · ‎10-26-2020

Hello,

the configs look good. What is the output of:

sh cdp neighbor

from both devices ?

WVerga · ‎10-26-2020

Georg Pauwen · ‎10-26-2020

Hello,

the physical connections are ok. Try to ping 192.168.4.1 from the Switch. Also, assign a static IP address to the PC and check the connectivity again.

WVerga · ‎10-26-2020

Ping from Switch:

MB-SW>en
Password:
Password:
MB-SW#ping ip
Target IP address: 192.168.4.1
Repeat count [5]: 5
Datagram size [100]: 100
Timeout in seconds [2]: 60
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.4.1, timeout is 60 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/203/1007 ms

I also pinged from both the PC and the Router

I pinged:

192.168.4.1
8.8.8.8

I was able to get a response from the first one, but still no online access