Routing to the internet

[wilsonleonardy]

Hi, I'm new to Cisco router.

I've been asked to create a network for a hotel internet service.

I'm currently configuring Cisco 1941 (non-wireless), and I've been stuck for a while now.

So, I have 2 network

192.168.0.* (ethernet0/0) and 192.168.1.* (ethernet0/1)

i connect my modem to ethernet0/0 and the client switch to ethernet0/1

I manage to ping the modem from a client, and it's working great.

the problem is i couldn't get through the internet.

is there any configuration that i missed?

and also, is it possible to manage the bandwidth to the client?

Thanks.

[johnlloyd_13]

hi wilson,

you don't need NAT on the 1941 since the D-Link will do that for you.

could you assign your 1941 G0/0 port with IP 192.168.0.3/24 and use the port where the test laptop was plugged in?

[wilsonleonardy]

Alain,

This is an extract from my latest config and also the current ip route you requested. this is before i apply any of the changes you proposed.

!

no ip dhcp conflict logging

ip dhcp excluded-address 192.168.1.2 192.168.1.10

!

ip dhcp pool Guests

   network 192.168.1.0 255.255.255.0

   domain-name Guests

   netbios-name-server 192.168.0.1

   default-router 192.168.1.1

   dns-server 192.168.0.1

   lease 0 12

!

!

multilink bundle-name authenticated

!

crypto pki token default removal timeout 0

!

interface GigabitEthernet0/0

ip address 192.168.0.2 255.255.255.0

ip virtual-reassembly in

duplex auto

speed auto

no mop enabled

!

interface GigabitEthernet0/1

ip address 192.168.1.1 255.255.255.0

ip virtual-reassembly in

duplex auto

speed auto

no mop enabled

!

ip forward-protocol nd

!

no ip http server

no ip http secure-server

!

ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0

ip route 192.168.0.0 255.255.255.0 GigabitEthernet0/0

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S*    0.0.0.0/0 is directly connected, GigabitEthernet0/0

      192.168.0.0/24 is variably subnetted, 2 subnets, 2 masks

C        192.168.0.0/24 is directly connected, GigabitEthernet0/0

L        192.168.0.2/32 is directly connected, GigabitEthernet0/0

      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks

C        192.168.1.0/24 is directly connected, GigabitEthernet0/1

L        192.168.1.1/32 is directly connected, GigabitEthernet0/1

it comes up as empty whenever i type sh ip nat translation.

the modem/router SHOULD be natting any network attached to its lan subnet, because a test laptop (192.168.0.3) connected directly to the modem/router through lan is able to connect to the internet.

[cadet alain · Accepted solution]

Hi,

Concerning NAT hat's what I had told you before, these soho models should nat everything entering their inside interface even if the src ip is not in the same subnet as the interface.

The static default route you've got is not correct so delete it and do this:

ip route 0.0.0.0 0.0.0.0 192.168.0.1

Because when doing a static route for a multipoint interface you should specify the next-hop and not the outgoing interface

but that's what you did so your Cisco router is going to ARP for every destination he wants to reach and if the soho router is not doing proxy-arp( which he surely doesn't ) then it can't work.

Regards.

Alain

[wilsonleonardy]

Alain,

I'm officially stuck, I think I've tried every possible way but nothing seems to work.

The internal network works, i can connect to every ip address from anywhere, but the internet doesnt seem to get routed to the 1941.

following your advice i delteded the ip route 0.0.0 xxxx but it still doesnt work.

any other troubleshooting ?

[cadet alain]

Hi wilson ,

But did you configure the proper static default route pointing to next-hop like I suggested above?

You must have a default route on the Cisco router.

Configure this route ip route 0.0.0.0 0.0.0.0 192.168.0.1 where this address is the one from the soho router.

It should then work otherwise we will do debugs to find out where it is failing.

Regards.

Alain.

[wilsonleonardy]

Alain,

After configuring the static ip route you just suggested, im now able to ping to the intertnet using the g0/0 192.168.0.2 interface, but still unable to ping outside address through the g0/1 interface. It has to be somethign to do with the internal static routing again

[cadet alain]

Hi Wilson,

ok so now do the debug  I suggested above:

On a client in the  192.168.1.0 network do a ping -n 2  8.8.8.8

logging buffered 100000

access-list 198 permit icmp any any

int g0/0

no ip route-cache

int g0/1

no ip route-cache

exit

exit

debug ip pack detail 198

sh logging

Post output

Regards.

Alain

[wilsonleonardy]

Alain,

the moment i pressed debug IP pack, it shows a seemingly never ending loop of debug list.

im not too sure what i need to post here. would you be able to tell me more on what i should be posting here?

[cadet alain]

Hi,

yes i forgot to mention not to log to console:

no logging console 7

and when the ping is done:

undebug all

then

show logging   and post all output in a zipped file

Alain

[wilsonleonardy]

Alain,

Let me get this clear, so here are the steps i have to do:

1. using a client from 192.168.1.0 network do a ping -n 2  8.8.8.8 (so i do this via cmd right?)

2. logging buffered 100000

     access-list 198 permit icmp any any

      no logging console 7

     int g0/0

     no ip route-cache

     int g0/1

      no ip route-cache

     exit

     exit

     debug ip pack detail 198

     sh logging (All the step here are to be done via console right?)

Is this correct?

Regards,

Wilson

[wilsonleonardy]

Here is some of the log, not all because there are just too many of them.

[wilsonleonardy]

by the way are you sure to make the logging buffered equal 100000 ?

[cadet alain]

Hi Wilson,

as I'm too lazy to calculate how big the debugs will be I set it to a high value to get sure.

And yes these were the commands in cli and the ping on the pc was in a console indeed.

Gonna take a look at them and if I find something I'll let you know

Regards.

Alain

[cadet alain]

Hi Wilson,

you shouldn't have so many lines as I suggested ton only send 2 ping packets so that's strange.

Secondly I don't see any packets sourced from the PC only packets sourced by the soho router or the cisco router, again something strange.

And these messages are destination unreachable but as I don't see source IP from the PC I can't tell much more.

Post your sh ip route static and redo the 2 pings but this time sniff your pc interface with wireshark and post resulting pcap file

Regards.

Alain

[wilsonleonardy]

Alain,

So, Do i ping first? or do i debug first? because i think i did ping via cmd on the client before i do all the debugging.

Just my suggestion though, before we do a trial and error on the actual client i think we need to focus more on routing the internet connection to the g0/1 interface.

i tried ping 8.8.8.8 source g0/0 and it comes back with a 100% success rate, but 0% success if i ping it from g0/1.

as for your reques, ill post it soon.