no internet on my switchs

[pcfreak49]

I do not have internet on my 2960G with my vlan's does anyone know how to solve this?

[Richard Burts]

If I am understanding the post correctly the connection to the ISP is Gig0/8. As far as I can see Gig0/8 is an access port in vlan 1. I believe that the connection to the ISP either needs to be a routed port (if the 2960 supports this) or else needs to be in a separate VLAN.

There is also the question of address translation. Is the ISP prepared to do address translation from traffic originating from 192.168.1.0 and from 192.168.2.0?

HTH

Rick

[pcfreak49]

How do you mean I do not know the public ip address I have received from the Gig0 / 8 interface via the ISP

[Georg Pauwen]

Hello,

your GigabitEthernet0/8 interface needs to be a layer 3 interface for it in order to receive an IP address:

GigabitEthernet0 / 8
no switchport
Ip dhcp server use subscriber id client id
Ip dhcp client client id GigabitEthernet0 / 8
Ip verify source

[pcfreak49]

I did it but still no internet,

Building configuration...

Current configuration : 3924 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
!
username Tim privilege 15 secret 5 $1$dGZ6$BZjGHLSCvwlu0qIR4e8sZ/
username Cursist privilege 15 secret 5 $1$l3QA$H5zTno9wLmuK/9Wp/1tez.
username Docent privilege 15 secret 5 $1$eJKA$0RYwuol8O2wV8VOP.xTGu.
username Pcfreak privilege 15 secret 5 $1$WSLj$iQ9.ijfVdcc0v7FqmnLqd.
!
!
aaa new-model
!
!
!
!
!
aaa session-id common
system mtu routing 1500
!
ip dhcp pool vlan1
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.1
lease infinite
!
ip dhcp pool vlan2
import all
network 192.168.2.0 255.255.255.0
dns-server 8.8.8.8 4.2.2.2
default-router 192.168.2.1
netbios-name-server 192.168.2.1
domain-name telenet.be
lease infinite
!
!
ip domain-name SW1.cursist.local
ip name-server 195.130.130.4
ip name-server 195.130.131.4
ip dhcp-server 195.130.240.1
!
!
crypto pki trustpoint TP-self-signed-1917011072
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1917011072
revocation-check none
rsakeypair TP-self-signed-1917011072
!
!
crypto pki certificate chain TP-self-signed-1917011072
certificate self-signed 01
3082024D 308201B6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31393137 30313130 3732301E 170D3933 30333031 31383435
31335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 39313730
31313037 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C18D FB803C48 D32F3A66 52835254 8942CF0C 84330447 393A12C7 E8797C1A
5E7FF46E 3AD4A523 2FA71AA3 C5CAAD14 E3F1326E 03CABD5A 14E4FF61 B7EE2AA0
8F0222D4 715789D0 82EFD921 B44D3827 3D6553E5 AFA5F14B F50D91F4 41109F67
A2540E9F 01EBBE16 9DD5E451 882C06CB AE3C63D2 D9253340 4A68B80B B2C1CCBD
D7F50203 010001A3 75307330 0F060355 1D130101 FF040530 030101FF 30200603
551D1104 19301782 15535731 2E535731 2E637572 73697374 2E6C6F63 616C301F
0603551D 23041830 16801485 D10AF94A FB55C705 6B095F57 7A7C1296 8EC70830
1D060355 1D0E0416 041485D1 0AF94AFB 55C7056B 095F577A 7C12968E C708300D
06092A86 4886F70D 01010405 00038181 009EDF4D A0662154 D3376DEB F1300304
5E4A4234 DAD27B87 77B77936 7CCD573B 3DCB388C 2EB9AD6D E93AC0AA B83F30FE
22B89624 CC889112 DEA439EC 5C0A21D3 4533E69A 106A7F04 C1C72D1E 5D4D9CE1
98C14863 C8C07AFF 5B0C4D4F DE8C4884 8C0C5CF9 1EF35FA3 719576FE C25EFC28
FDC816BA 3286821D 8535194F 94D6B3E5 7D
quit
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
ip ssh version 2
!
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
switchport mode access
!
interface GigabitEthernet0/3
switchport mode access
!
interface GigabitEthernet0/4
switchport mode access
!
interface GigabitEthernet0/5
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet0/6
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet0/7
switchport access vlan 2
!
interface GigabitEthernet0/8
ip dhcp server use subscriber-id client-id
ip dhcp client client-id GigabitEthernet0/8
ip verify source
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
shutdown
!
interface Vlan2
ip address 192.168.2.1 255.255.255.0
ip access-group ACLG in
!
ip default-gateway 84.198.240.1
ip http server
ip http secure-server
!
ip access-list extended ALCG
permit ip 192.168.1.0 0.0.0.255 any
permit ip 192.168.2.0 0.0.0.255 any
ip sla enable reaction-alerts
!
line con 0
line vty 0 4
privilege level 15
password test
transport input all
transport output all
line vty 5 15
privilege level 15
password test
transport input all
transport output all
!
end

[Georg Pauwen]

Hello,

try the simplified settings below:

GigabitEthernet0 / 8
no switchport
ip address dhcp

Your provider is Telenet in Belgium ?

[Georg Pauwen]

And which modem type/brand do you have ?

[pcfreak49]

Yes that's right my provider is telenet, no i can not configure the ip addres on the GigabitEthernet0 / 8 interface, this is the type of the modem cable
24 * 8 DOC 3 EMTA (DOCSIS)

The version running on the 2960G is
ROM: Bootstrap program is C2960 boot loader
BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M) Version 12.2 (35r) SE2, RELEASE SOFTWAR E (fc1)

SW1 uptime is 19 hours, 38 minutes
System returned to ROM by power-on
System image file is "flash: /c2960-lanbasek9-mz.122-55.SE1"

[Georg Pauwen]

Hello,

can you try and connect a PC or laptop directly to the modem ? I just wonder if the modem dishes out IP addresses at all...

[pcfreak49]

Yes i did that and i get a dhcp from the cabel modem on port gigabit ethernet0 / 8

[Georg Pauwen]

On a side note, which template do you have installed ? What is the output of:

show sdm prefer

[Richard Burts]

It is clear that there are two issues that need to be resolved.

1) Currently there is no interface that has an IP address in the subnet used by the cable modem. We suggested making Gig0/8 into a routed port but the original poster says that did not wok. The other alternative is to create a new vlan, assign Gig0/8 to that vlan, and configured a vlan interface for the vlan which specifies that it learns its IP address using dhcp.

2) If the issue of an IP address in the subnet of the cable modem is resolved then the switch should be able to ping addresses in the Internet. But it still leaves the issue of Address Translation which is required for networks 192.168.1.0 and 192.168.2.0. I do not believe that the 2960 will do address translation. So the question becomes whether the ISP is prepared to do the address translation.

HTH

Rick 

[pcfreak49]

In no way do i get the internet on 2960g get the dhcp of that 2960g ip 192.168.2.1