09-28-2016 07:07 PM - edited 03-05-2019 07:09 AM
I configured router to internet and was able to ping several DNS address ex: 8.8.8.8 with success.
on router g0/1 configured IP address 10.0.0.0 255.255.255.0
on switch g1/1 configured IP address 10.0.0.2 255.255.255.0
Switch setup with IP route to 0.0.0.0 0.0.0.0 10.0.0.0
on switch I also have the dhcp server setup with a different VLAN ID (rebooted all the devices modem, router and switch)
connected the workstation....got the ip address from but no internet access what could I be doing wrong here.
your help will be greatly appreciated
I have attached my switch configuration.
Solved! Go to Solution.
09-29-2016 08:02 PM
Hi
I can't say if IP addresses are ok or not because you've masked them.
However you have an issue with your nat:
ip nat inside source list 1 interface GigabitEthernet0/0 overload
!
access-list 101 permit ip 10.x.x.x. 0.0.0.255 any
!
First of all, you're using 2 networks 10.x.x.x/24 for vlan 1 and 100. 2nd issue is you're calling the wrong acl on your nat statement
your config should looks like:
ip nat inside source list 101 interface GigabitEthernet0/0 overload
!
access-list 101 permit ip 10.x.x.x. 0.0.0.255 any ==> Vlan 1 subnet
!access-list 101 permit ip 10.x.x.x. 0.0.0.255 any ==> Vlan 100 subnet
!
Thanks
PS: Please don't forget to rate and mark as correct answer if this answered your question
09-28-2016 07:29 PM
Hi
from your pc, are you able to reach your router?
what's your router config? Did you configured nat?
thanks
PS: Please don't forget to rate and mark as correct answer if this answered your question
09-29-2016 06:22 PM
09-29-2016 08:02 PM
Hi
I can't say if IP addresses are ok or not because you've masked them.
However you have an issue with your nat:
ip nat inside source list 1 interface GigabitEthernet0/0 overload
!
access-list 101 permit ip 10.x.x.x. 0.0.0.255 any
!
First of all, you're using 2 networks 10.x.x.x/24 for vlan 1 and 100. 2nd issue is you're calling the wrong acl on your nat statement
your config should looks like:
ip nat inside source list 101 interface GigabitEthernet0/0 overload
!
access-list 101 permit ip 10.x.x.x. 0.0.0.255 any ==> Vlan 1 subnet
!access-list 101 permit ip 10.x.x.x. 0.0.0.255 any ==> Vlan 100 subnet
!
Thanks
PS: Please don't forget to rate and mark as correct answer if this answered your question
09-30-2016 12:53 PM
I upload the switch and router configuration without masking the IP address for internal except for Public IP address.
I change the access-list with the above command and still not able to get any internet access from the switch. however I do able to get the dhcp ip with 10.1.1.100 with the client.
09-30-2016 04:46 PM
SupportLan you are awesome, internet now works. at first I forgot to fix the ip nat source list from 1 to 101.
Thank you all for the help.
09-30-2016 07:06 PM
You're welcome
05-19-2018 01:20 PM
05-19-2018 01:42 PM
Hello,
there is one tiny thing in your configuration that kills your NAT, which is the 'log' keyword in your NAT access list. Remove that and try again:
So this statement:
permit ip 192.168.10.0 0.0.0.255 any log
needs to be changed to:
permit ip 192.168.10.0 0.0.0.255 any
05-19-2018 04:49 PM
I have done this changes but no luck ,kindly do the needful
09-28-2016 09:48 PM
Its look Natting issue o router. Could you please check if NAT/PAT present on router for LAN (PC subnet) ?
09-28-2016 11:42 PM
Hi,
May i know where the router is connected to. Do you have access to that device.
Also we need to the router interface ip address which is connecting to internet.
09-29-2016 04:51 AM
Hi,
There is lots of confusion in your switch configuration and question.
1. Is your Router is connected to switch on switch port Gig1/1
(This is L3 Switch and you assigned IP address on this port)
2. You mentioned "on router g0/1 configured IP address 10.0.0.0 255.255.255.0", If this same IP address is assigned to the router then you have wrong IP address configured on the router because it is Network ID.
Please share switch and Router configuration again with Public IP and Password hide (Only)
Advice: If my question 1 is right then It is suggestion to check LAN side routing on router. Because after the router you are using L3 device.
Regards,
Deepak Kumar
www.deepuverma.in
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide