09-30-2015 08:57 AM - edited 03-05-2019 02:25 AM
Hello , host pc connected at f0 vlan1 ping ok the router
Router#ping 192.168.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
and the router ping ok the internet and modem
Router#ping google.com
Translating "google.com"...domain server (255.255.255.255) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 204.111.84.245, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 560/572/604 ms
but i cant access the internet on my PC , any help?
here is my config
Building configuration...
Current configuration : 1745 bytes
!
! Last configuration change at 15:16:57 UTC Wed Sep 30 2015
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
!
no aaa new-model
!
!
!
!
!
!
!
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.1.2
!
ip dhcp pool sat
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.2
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C881-K9 sn FCZ184394JQ
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
description host pc
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
description ISP interface
ip address 192.168.1.2 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface Vlan1 overload
ip nat inside source list 101 interface Vlan1 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 0.0.0.0 0.0.0.0 FastEthernet4
!
!
access-list 101 permit ip 0.0.0.0 255.255.255.0 any
access-list 101 permit ip 0.0.0.0 255.0.0.0 any
!
control-plane
!
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
login
transport input all
!
scheduler allocate 20000 1000
!
end
my router is a cisco 881-k9 and receive internet by a modem whit static ip 192.168.1.1
any sugestion?
10-01-2015 02:21 AM
You NAT and ACLs look a little confused. Try:
! no ip nat inside source list 1 interface Vlan1 overload no ip nat inside source list 101 interface Vlan1 overload ip nat inside source list 101 interface fa4 overload ! no access-list 101 permit ip 0.0.0.0 255.255.255.0 any no access-list 101 permit ip 0.0.0.0 255.0.0.0 any access-list 101 permit ip 192.168.2.0 0.0.0.255 any !
cheers,
Seb.
10-01-2015 06:05 AM
Many thanks for your reply, it works now.
10-01-2015 06:13 AM
Please rate helpful posts ;)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide