Local PC cannot ping passed Router interface.

[Jonathan Nali]

Hi everyone.

I have a problem I cannot understand.

On a Cisco 891 I have made Port FE8 the WAN port with ip add - 192.168.124.10.

I have created VLAN 10 - ip add 10.10.3.3 for the LAN ports FE 0 - FE5(Access mode)
The problem is, a PC on the LAN 10.10.3.0/24 can only ping up to the FE8 interface, it cannot ping passed that like my gateway on 192.168.124.9. However, the Router itself can ping passed itself.

Please help me see.

Any assistance will be highly appreciated.

================================================================

ip source-route
!
!
ip dhcp relay information option
ip dhcp relay information trust-all
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 10.10.3.253
ip dhcp excluded-address 10.10.3.252
ip dhcp excluded-address 10.10.3.1 10.10.3.50
!
ip dhcp pool KITWE-POOL
network 10.10.3.0 255.255.255.0
default-router 10.10.3.3
dns-server 10.10.1.4
!
!
ip cef
no ip domain lookup
ip domain name yourdomain.com
ip name-server 8.8.8.8
no ipv6 cef
!
!
multilink bundle-name authenticated
!
!
!
!

interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
!
interface FastEthernet0
switchport access vlan 10
!
!
interface FastEthernet1
switchport access vlan 10
!
!
interface FastEthernet2
switchport access vlan 10
!
!
interface FastEthernet3
switchport access vlan 10
!
!
interface FastEthernet4
switchport access vlan 10
!
!
interface FastEthernet5
switchport access vlan 10
!
!
interface FastEthernet6
!
!
interface FastEthernet7
!
!
interface FastEthernet8
ip dhcp relay information option-insert
ip address 192.168.124.10 255.255.255.252
ip virtual-reassembly
duplex auto
speed auto
!
!
interface GigabitEthernet0
description Internet
no ip address
ip virtual-reassembly
shutdown
duplex auto
speed auto
!
!
interface Vlan1
no ip address
shutdown
!
!
interface Vlan10
ip address 10.10.3.3 255.255.255.0
ip helper-address 10.10.3.3
ip nat inside
ip virtual-reassembly
!
!
interface Async1
no ip address
encapsulation slip
!
!
ip forward-protocol nd
ip forward-protocol udp talk
no ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip nat outside source static 10.10.1.0 10.10.3.3
ip nat outside source static 192.168.124.2 192.168.124.10
ip route 0.0.0.0 0.0.0.0 192.168.124.1 2
ip route 10.10.1.0 255.255.255.0 192.168.124.2
ip route 192.168.124.8 255.255.255.252 192.168.124.9
!
access-list 111 deny ip 10.10.3.0 0.0.0.255 10.10.1.0 0.0.0.255
access-list 111 permit ip 10.10.3.0 0.0.0.255 any
no cdp run

=========================================================

!

[balaji.bandi · Accepted solution]

Couple of questions, You looking to NAT using this device, or you have uplink device who does the NAT ?

If you looking to do this device as NAT, then you need outside nat on outside interface and you need to have NAT entry to NAT your internal address as below :

interface FastEthernet8

ip nat outside

ip nat inside source list 111 interface FastEthernet8 overload

if your uplink router doing NAT,, then you need Route back from uplink router to this device for your localsubnet

(on the uplink router)

ip route 10.10.3.0 0.0.0.255 192.168.124.10

This was suggested based on the assumption only, you need to provide more information, how you have connected to uplink router or ISP ?

[Jonathan Nali]

Hello @balaji.bandi 

Thank you for your quick response.

The Uplink is connected to the ISP. I want to do the IP NAT on this router. 

Let me try what you have suggested and get back to you.

[Jonathan Nali]

Hi @balaji.bandi ,

Scratch that. 

I HAS worked. In addition to the ip nat outside, I also did the ip nat inside. Which should have been the obviously thing. My bad

Thank you so much.

Kind regards,

Nali

[balaji.bandi]

EDIT

Since you mentioned all working, i have removed further suggestions, thanks all working as expected.

[Jonathan Nali]

Hi @balaji.bandi ,

Your suggestions may help me find out why I cannot reach the 10.10.1.0/24 network