04-18-2017 11:20 AM - edited 03-08-2019 10:14 AM
Hi. I have a Cisco 1721 that is facing my provider on fe0, dhcp address. It is feeding 3 subnets downstream to another location via serial0. I am adding a wic 4esw card to it, I have configured the card to give dhcp addresses in the range of 192.168.1.x, and that is working. I am missing something though as I cannot yet connect to the internet through fe0 when connected to any fe1-4 ports. Can someone tell me what I have missed? config below, and thanks very much for your time!
Randy
ip cef
!
no ip dhcp use vrf connected
!
ip dhcp pool vlan1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 24.153.23.66 24.153.22.67
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
interface FastEthernet0 (faces my provider)
ip address dhcp
ip nat outside
ip virtual-reassembly
speed 100
full-duplex
!
interface FastEthernet1 (fe1 to 4 are the new ports on the wic 4esw card)
duplex full
speed 100
!
interface FastEthernet2
duplex full
speed 100
!
interface FastEthernet3
duplex full
speed 100
!
interface FastEthernet4
duplex full
speed 100
!
interface Serial0 (faces downstream to feeds 3 subnets)
ip address 192.168.2.2 255.255.255.0
ip nat inside
ip virtual-reassembly
service-module t1 clock source internal
service-module t1 timeslots 1-24
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
vlan-id dot1q 2
exit-vlan-config
!
ip forward-protocol nd
ip route 192.168.3.0 255.255.255.0 192.168.2.1
ip route 192.168.4.0 255.255.255.0 192.168.2.1
ip route 192.168.5.0 255.255.255.0 192.168.2.1
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0 overload
!
access-list 1 permit 192.168.0.0 0.0.255.255
!
control-plane
Solved! Go to Solution.
04-18-2017 11:35 AM
Hi try ip nat inside under the vlan 1 interface , there layer 2 ports that are assigned to the vlan now that you have assigned a switch module to the router , so there layer 3 interface which is the vlan 1 interface needs to have nat inside on it so they can all break out to the internet
04-18-2017 11:35 AM
Hi try ip nat inside under the vlan 1 interface , there layer 2 ports that are assigned to the vlan now that you have assigned a switch module to the router , so there layer 3 interface which is the vlan 1 interface needs to have nat inside on it so they can all break out to the internet
04-18-2017 11:40 AM
Thanks very much for your reply. I added that to my config, will have to drive about 30km though to physically verify. will do though and post results!
Randy
04-20-2017 01:09 PM
Hi Mark. Thanks again, I was on site today and tested the new config, works mint. Much appreciated!
Randy
04-20-2017 01:27 PM
No problem glad it worked
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide