03-18-2025 10:48 AM
I need all users of Network 1 to be able to access the Internet (connect to the Internet server). And I need to be able to connect to the corporate server from the "external network". I used the following commands to ensure this, but for some reason nothing worked. Please help.
SW0
Switch(config)#interface FastEthernet3/1
Switch(config-if)#switchport trunk allowed vlan 1,10,20
Switch(config-if)#switchport mode trunk
Switch(config)#int fa2/1
Switch(config-if)#switchport access vlan 10
Switch(config-if)#switchport mode access
Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security maximum 2
Switch(config-if)#switchport port-security mac-address sticky
Switch(config)#int fa1/1
Switch(config-if)#switchport access vlan 20
Switch(config-if)#switchport mode access
Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security maximum 1
Switch(config-if)#switchport port-security mac-address sticky
Switch(config)#int fa0/1
Switch(config-if)#switchport access vlan 20
Switch(config-if)#switchport mode access
Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security maximum 1
Switch(config-if)#switchport port-security mac-address sticky
Switch(config)#int fa3/1
Switch(config-if)#switchport mode trunk
Switch(config)#int fa4/1
Switch(config-if)#switchport mode trunk
Router0
Router(config)#interface FastEthernet1/0
Router(config-if)#ip address 192.24.40.1 255.255.255.252
Router(config-if)#ip nat outside
Router(config-if)#duplex auto
!
Router(config)#interface FastEthernet0/0
Router(config-if)#no ip address
Router(config-if)#duplex auto
Router(config)#int fa0/0.10
Router(config-subif)#encapsulation dot1Q 10
Router(config-subif)#ip nat inside
Router(config-subif)#ex
Router(config)#int fa0/0.20
Router(config-subif)#encapsulation dot1Q 20
Router(config-subif)#ip nat inside
Router(config)#ip access-list standard FOR-NAT
Router(config-std-nacl)#permit 192.168.18.0 0.0.0.255
Router(config-std-nacl)#permit 172.21.0.0 0.0.0.255
Router(config-std-nacl)#ex
Router(config)#ip nat inside source list FOR-NAT interface fa1/0 overload
Router(config)#ip nat inside source static tcp 192.168.18.6 80 199.24.40.1 80
Solved! Go to Solution.
03-19-2025 10:07 AM
Add new version. Who can help me and write commands, that help solve this problem?
03-19-2025 10:14 AM
03-18-2025 03:24 PM
@Flavio Miranda can u help me pleace?
03-18-2025 10:36 PM - edited 03-18-2025 10:37 PM
Hello @andrew005
On interface Fa0/0.10 and 0/0.20 you don't configure IP adresses...Gateway of vlan 10 and 20...
https://www.ciscopress.com/articles/article.asp?p=3089357&seqNum=5
03-19-2025 10:05 AM
The IP address is configured. But router0 and router1 cannot communicate with it properly and cannot initialize the connection between the PC and the Internet server.
03-19-2025 10:07 AM
03-19-2025 10:14 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide