06-17-2016 04:33 PM - edited 03-08-2019 06:15 AM
Solved! Go to Solution.
06-17-2016 05:22 PM
Hi
you're missing natting and defaut route.
here a sample of the configuration
Interface f0/0
Ip nat outside
!
Interface f0/1
Ip nat inside
!
Ip access-list extended NAT
Deny ip 192.168.33.0 0.0.0.255 192.168.33.0 0.0.0.255
Permit ip 192.168.33.0 0.0.0.255 any
!
ip nat inside source list NAT interface f0/0 overload
!
Ip route 0.0.0.0 0.0.0.0 f0/0
PS: Please don't forget to rate and mark as correct answer if this solved your issue
06-18-2016 02:49 AM
Hello
int x/x <-- wan interface
ip nat outside
int x/x <--- lan interface
ip nat inside
Access-list 10 permit 192.168.33.0 0.0.0.255
ip nat inside source-list 10 interface fa0/0 overload
ip route 0.0.0.0 0.0.0.0. Dhcp
res
paul
06-17-2016 05:22 PM
Hi
you're missing natting and defaut route.
here a sample of the configuration
Interface f0/0
Ip nat outside
!
Interface f0/1
Ip nat inside
!
Ip access-list extended NAT
Deny ip 192.168.33.0 0.0.0.255 192.168.33.0 0.0.0.255
Permit ip 192.168.33.0 0.0.0.255 any
!
ip nat inside source list NAT interface f0/0 overload
!
Ip route 0.0.0.0 0.0.0.0 f0/0
PS: Please don't forget to rate and mark as correct answer if this solved your issue
06-17-2016 07:28 PM
Thank you for the reply, I made the changes you mentioned, it still does not route.
Below is the full boot, as well as the new config with your changes. I include the boot because I am concerned that the IOS version is not supported n the router.
System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2006 by cisco Systems, Inc.
Initializing memory for ECC
.
c2811 platform with 262144 Kbytes of main memory
Main memory is configured to 64 bit mode with ECC enabled
Readonly ROMMON initialized
program load complete, entry point: 0x8000f000, size: 0x3b02bcc
Self decompressing the image : #################################################################################################################################################################################################################################################################################################################################################################################### [OK]
Smart Init is enabled
smart init is sizing iomem
ID MEMORY_REQ TYPE
0003E7 0X00474800 C2811 Mainboard
0X00264050 Onboard VPN
0X000021B8 Onboard USB
0X002C29F0 public buffer pools
0X00211000 public particle pools
-----------------------------------------------
TOTAL: 0X00BAE3F8
If any of the above Memory Requirements are
"UNKNOWN", you may be using an unsupported
configuration or there is a software problem and
system operation may be compromised.
Rounded IOMEM up to: 12Mb.
Using 4 percent iomem. [12Mb/256Mb]
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 15.0(1)M10, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 26-Feb-13 13:25 by prod_rel_team
Image text-base: 0x400158F0, data-base: 0x44926020
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Installed image archive
Cisco 2811 (revision 49.46) with 249856K/12288K bytes of memory.
Processor board ID FTX1203A3ZT
2 FastEthernet interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
125440K bytes of ATA CompactFlash (Read/Write)
SETUP: new interface NVI0 placed in "shutdown" state
Press RETURN to get started!
*Jun 18 03:10:53.699: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Initialized
*Jun 18 03:10:53.707: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Enabled
*Jun 18 03:10:56.071: %LINEPROTO-5-UPDOWN: Line protocol on Interface VoIP-Null0, changed state to up
*Jun 18 03:10:56.071: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Jun 18 03:10:56.071: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up
*Jun 18 03:10:57.271: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
*Jun 18 03:10:57.271: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
*Jun 18 03:10:58.095: %SYS-6-CLOCKUPDATE: System clock has been updated from 03:10:58 UTC Sat Jun 18 2016 to 08:10:58 EST Sat Jun 18 2016, configured from console by console.
*Jun 18 03:10:59.239: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up
*Jun 18 03:10:59.279: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to up
*Jun 18 03:11:07.587: %SYS-5-CONFIG_I: Configured from memory by console
*Jun 18 03:11:09.587: %LINK-5-CHANGED: Interface NVI0, changed state to administratively down
*Jun 18 03:11:10.631: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to down
*Jun 18 03:11:11.071: %SYS-5-RESTART: System restarted --
Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 15.0(1)M10, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 26-Feb-13 13:25 by prod_rel_team
*Jun 18 03:11:11.079: %SNMP-5-COLDSTART: SNMP agent on host Dallas-R1 is undergoing a cold start
*Jun 18 03:11:11.275: %SYS-6-BOOTTIME: Time taken to reboot after reload = 253 seconds
*Jun 18 03:11:11.511: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Jun 18 03:11:11.511: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
*Jun 18 03:11:11.511: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Jun 18 03:11:11.511: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
Dallas-R1>
*Jun 18 03:11:18.095: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0/0 assigned DHCP address 192.168.3.205, mask 255.255.255.0, hostname Dallas-R1
!
! Last configuration change at 08:23:57 EST Sat Jun 18 2016
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Dallas-R1
!
boot-start-marker
boot-end-marker
!
enable secret 5
enable password
!
no aaa new-model
!
!
!
clock timezone EST 5
!
dot11 syslog
ip source-route
!
!
ip cef
ip dhcp excluded-address 192.168.33.1 192.168.33.100
!
ip dhcp pool Dallas-Default
network 192.168.33.0 255.255.255.0
dns-server 192.168.33.1 8.8.8.8
default-router 192.168.33.1
lease 7
!
!
ip name-server 8.8.8.8
ip name-server 75.75.75.75
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
license udi pid CISCO2811 sn FTX1203A3ZT
!
redundancy
!
!
!
policy-map type inspect Outside_to_Self
!
!
!
!
!
!
!
!
!
interface Loopback0
no ip address
!
!
interface FastEthernet0/0
description Wan
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
!
interface FastEthernet0/1
ip address 192.168.33.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex full
speed auto
no mop enabled
!
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list NAT interface FastEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
!
ip access-list extended NAT
deny ip 192.168.33.0 0.0.0.255 192.168.33.0 0.0.0.255
permit ip 192.168.33.0 0.0.0.255 any
!
!
!
!
!
snmp-server community Dallas-Lan RO
!
!
control-plane
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password
login
!
scheduler allocate 20000 1000
end
Also, I was not sure if the router was allowing ping and tracert through so I tried to telnet to www.google.com:80 as well as open a web page. both were no go.
06-17-2016 07:42 PM
Could you send the output of:
- sh ip int bri
- while you're running a ping from a host to internet, issue the below command on the router: sh ip nat trans
Do also: no ip source-route
06-17-2016 08:46 PM
Dallas-R1#sh ip int bri
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 192.168.3.205 YES DHCP up up
FastEthernet0/1 192.168.33.1 YES NVRAM up up
Loopback0 unassigned YES NVRAM up up
NVI0 unassigned YES unset administratively down down
Dallas-R1#
before no ip source-route
Dallas-R1#sh ip nat trans
Pro Inside global Inside local Outside local Outside global
tcp 192.168.3.205:1060 192.168.33.101:1060 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1061 192.168.33.101:1061 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1062 192.168.33.101:1062 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1063 192.168.33.101:1063 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1078 192.168.33.101:1078 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1079 192.168.33.101:1079 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1080 192.168.33.101:1080 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1093 192.168.33.101:1093 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1094 192.168.33.101:1094 192.168.3.1:1780 192.168.3.1:1780
Dallas-R1#
after
Dallas-R1#sh ip nat trans
Pro Inside global Inside local Outside local Outside global
tcp 192.168.3.205:1078 192.168.33.101:1078 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1079 192.168.33.101:1079 192.168.3.1:1780 192.168.3.1:1780
tcp 192.168.3.205:1080 192.168.33.101:1080 192.168.3.1:1780 192.168.3.1:1780
Dallas-R1#
06-17-2016 09:01 PM
You missed the sh ip route.
What's your design? Your wan interface had a private IP. Behind is your ISP?
Why you're natting on your site and not on the end device?
06-18-2016 06:07 AM
I have my whole lan setup here at this house. I didn't want to take everything down to play with this router. I pulled a cable to a back room off of one of my switches, and connected to 0/0, then I connected my laptop to 0/1 and started messing with it. When it starts working I planned to move it out to the other house in dallas as the main router there where it will be connected direct to a WAN interface.
The current LAN here has one PEO switch, one unmanaged switch and one Cisco 2750 switch all up-linked to a linksys router. I also run a ubiquity AP for wireless, one ubuntu server for DHCPP and to act as the controller for the Ubiquity gear. one FreeNAS appliance and one other no-name NAS
Dallas-R1#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
S* 0.0.0.0/0 is directly connected, FastEthernet0/0
192.168.3.0/24 is variably subnetted, 3 subnets, 2 masks
C 192.168.3.0/24 is directly connected, FastEthernet0/0
S 192.168.3.11/32 [254/0] via 192.168.3.1, FastEthernet0/0
L 192.168.3.205/32 is directly connected, FastEthernet0/0
192.168.33.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.33.0/24 is directly connected, FastEthernet0/1
L 192.168.33.1/32 is directly connected, FastEthernet0/1
Dallas-R1#
06-18-2016 06:34 AM
looks like changing ip route 0.0.0.0 0.0.0.0 f0/0 to
ip route 0.0.0.0 0.0.0.0 dhcp fixed it, everything came up immediately when I changed it.
06-18-2016 06:41 AM
I will save the config to startup, then move the router to the final location and see if the config still works.
Thanks everyone
06-18-2016 11:42 AM
Hello
Good to hear!
06-18-2016 12:12 PM
Ok nice.
Thanks
06-18-2016 02:49 AM
Hello
int x/x <-- wan interface
ip nat outside
int x/x <--- lan interface
ip nat inside
Access-list 10 permit 192.168.33.0 0.0.0.255
ip nat inside source-list 10 interface fa0/0 overload
ip route 0.0.0.0 0.0.0.0. Dhcp
res
paul
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide