cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
517
Views
0
Helpful
4
Replies

Adding a wic 4esw card to cisco 1721

randy kruen
Level 1
Level 1

Hi. I have a Cisco 1721 that is facing my provider on fe0, dhcp address. It is feeding 3 subnets downstream to another location via serial0. I am adding a wic 4esw card to it, I have configured the card to give dhcp addresses in the range of 192.168.1.x, and that is working. I am missing something though as I cannot yet connect to the internet through fe0 when connected to any fe1-4 ports. Can someone tell me what I have missed? config below, and thanks very much for your time!

Randy

ip cef
!
no ip dhcp use vrf connected
!
ip dhcp pool vlan1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 24.153.23.66 24.153.22.67
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
interface FastEthernet0 (faces my provider)
ip address dhcp
ip nat outside
ip virtual-reassembly
speed 100
full-duplex
!
interface FastEthernet1 (fe1 to 4 are the new ports on the wic 4esw card)
duplex full
speed 100
!
interface FastEthernet2
duplex full
speed 100
!
interface FastEthernet3
duplex full
speed 100
!
interface FastEthernet4
duplex full
speed 100
!
interface Serial0 (faces downstream to feeds 3 subnets)
ip address 192.168.2.2 255.255.255.0
ip nat inside
ip virtual-reassembly
service-module t1 clock source internal
service-module t1 timeslots 1-24
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
vlan-id dot1q 2
exit-vlan-config
!
ip forward-protocol nd
ip route 192.168.3.0 255.255.255.0 192.168.2.1
ip route 192.168.4.0 255.255.255.0 192.168.2.1
ip route 192.168.5.0 255.255.255.0 192.168.2.1
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0 overload
!
access-list 1 permit 192.168.0.0 0.0.255.255
!
control-plane

1 Accepted Solution

Accepted Solutions

Mark Malone
VIP Alumni
VIP Alumni

Hi try ip nat inside under the vlan 1 interface , there layer 2 ports that are assigned to the vlan now that you have assigned a switch module to the router , so there layer 3 interface which is the vlan 1 interface needs to have nat inside on it so they can all break out to the internet

View solution in original post

4 Replies 4

Mark Malone
VIP Alumni
VIP Alumni

Hi try ip nat inside under the vlan 1 interface , there layer 2 ports that are assigned to the vlan now that you have assigned a switch module to the router , so there layer 3 interface which is the vlan 1 interface needs to have nat inside on it so they can all break out to the internet

Thanks very much for your reply. I added that to my config, will have to drive about 30km though to physically verify. will do though and post results!

Randy

Hi Mark. Thanks again, I was on site today and tested the new config, works mint. Much appreciated!

Randy

No problem glad it worked