cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
204
Views
0
Helpful
2
Replies

No Internet access with all interfaces up

samcisco85
Level 1
Level 1

Hello, I encounter a problem with the configuration of my Cisco C887VA-K9. All interfaces are up, but I have no internet access.
I updated the firmware and use the HTML interface to generate configuration settings below. Can you help me find a solution?
Thank you

configuration:

Current configuration : 4090 bytes
!
! Last configuration change at 09:04:31 UTC Mon Sep 28 2015
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable secret 5 xxxxxxxxxxxx
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-2696967511
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2696967511
 revocation-check none
 rsakeypair TP-self-signed-2696967511
!
!
crypto pki certificate chain TP-self-signed-2696967511
 certificate self-signed 01
  xxxxxxxx 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32363936 39363735 3131301E 170D3135 30393238 30373333
  35325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36393639
  36373531 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100D0C5 0FE9FFD6 0182BE7E 2C0CBF7B C510FEA0 9B66125F 48E3DFEF E23B5C35
  DFF9D8C3 9DF3D64F 5F862490 A85A33C9 6918C799 C7F8DC20 313F0654 E9CC44AB
  3F8B59A0 C8F5BB7A C75418DC 5FF6597A F4CC846B 4218B2E1 47FF8482 3A565436
  06CE11CA 43CA8F8E 2EEC7D0C 70204D59 E25BD75B DA5CB851 09BF00AB 062A3C7D
  46C10203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
  551D2304 18301680 14E84BCD FC27791B B4E8100B 23CEFC59 F0131734 63301D06
  03551D0E 04160414 E84BCDFC 27791BB4 E8100B23 CEFC59F0 13173463 300D0609
  2A864886 F70D0101 05050003 818100BF F661A88E 5BE67459 5BA7C558 D1AD14E4
  6079D529 43B33760 AF6446F1 D8319553 080A947A 505DED42 6D16E487 0BEFD15C
  54450098 9D6BAD63 2216E309 ABF7757A AE88EF39 268C41CF 470852B8 E41B9475
  70F42B7B 1AC84AA9 AFBBFF39 44A618FF 117373D4 53E1A6DA D22FB3C6 E0F77DD4
  69D5DB01 66E60D36 9BEEE445 BA2CC7
        quit
!
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
!
license udi pid C887VA-K9 sn FCZ18xxxxx
!
!
username admin privilege 15 secret 5 $1$bpzn$2SYp.TRvFYxxxxxxx
!
!
controller VDSL 0
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
 description PrimaryWANDesc_WAN
 pvc 8/35
  pppoe-client dial-pool-number 1
 !
!
interface Ethernet0
 no ip address
!
interface FastEthernet0
 no ip address
!
interface FastEthernet1
 no ip address
!
interface FastEthernet2
 no ip address
!
interface FastEthernet3
 no ip address
!
interface Vlan1
 ip address 192.168.10.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
 ip tcp adjust-mss 1412
!
interface Dialer1
 ip address negotiated
 ip mtu 1452
 ip nat outside
 ip virtual-reassembly in
 encapsulation ppp
 ip tcp adjust-mss 1412
 dialer pool 1
 dialer-group 1
 ppp mtu adaptive
 ppp authentication chap pap callin
 ppp chap hostname login
 ppp chap password 7 password
 ppp pap sent-username login password 7 password
 ppp ipcp dns request
!
ip forward-protocol nd
no ip http server
ip http authentication local
ip http secure-server
!
!
ip nat inside source list nat-list interface Dialer1 overload
ip nat inside source static udp 192.168.10.2 4500 interface Dialer1 4500
ip nat inside source static tcp 192.168.10.2 822 interface Dialer1 822
ip nat inside source static udp 192.168.10.2 500 interface Dialer1 500
ip nat inside source static tcp 192.168.10.2 1750 interface Dialer1 1750
ip nat inside source static tcp 192.168.10.2 1751 interface Dialer1 1751
ip route 0.0.0.0 0.0.0.0 Dialer1
!
dialer-list 1 protocol ip permit
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
line con 0
 password 7 0624001455xxxxxxxx
 login
 no modem enable
line aux 0
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler allocate 20000 1000
!
end

2 Replies 2

Terence Payet
Level 1
Level 1

Hi,

Based on your NAT config. You're missing access-list nat-list which defines your private ip address or LAN segment.

Hello,

As Terence metioned, you need to add access-list nat-list. Add this command.

ip access-list standard nat-list
 permit 192.168.10.0 0.0.0.255

Masoud

Review Cisco Networking products for a $25 gift card