again can not connect to internet

[arif48301]

hi

Sorry to all,I changed my router and i can not again connect to internet.I have done the configuration as i did before but this time i am missing some thing there is again no internet access.

please have a look at the following configuration and see whats the problem.

Router>
Router>
Router>en
Password:
Router#sh run
Building configuration...

Current configuration : 1291 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password test
!
no aaa new-model
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1 10.10.10.10
!
ip dhcp pool test
import all
network 10.10.10.0 255.255.255.0
dns-server 80.0.163.30
default-router 10.10.10.1
!
!
multilink bundle-name authenticated
!
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password test
login
!
scheduler allocate 20000 1000
!
end

Router#

i would apperciate help.

thanks

[arif48301]

Type escape sequence to abort.
Tracing the route to google-public-dns-a.google.com (8.8.8.8)

1 192.168.0.1 4 msec 4 msec 4 msec
2 * * *
3 popl-core-2a-xe-810-0.network.virginmedia.net (62.255.65.193) 28 msec 32 msec 16 msec
4 * * *
5 * * *
6 eislou2-ic-1-ae3-0.network.virginmedia.net (62.254.85.145) 24 msec 24 msec 24 msec
7 213.104.85.90 36 msec
m350-mp2.cvx3-a.ltn.dial.ntli.net (213.104.85.94) 20 msec
213.104.85.90 24 msec
8 108.170.246.225 20 msec
108.170.246.193 24 msec
108.170.246.225 20 msec
9 216.239.58.93 120 msec
216.239.57.75 24 msec
72.14.234.153 20 msec
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

I believe its it's got to do something with super hub 3.0 ,doesn't seem to effect the rest of network.

 Thanks 

[Georg Pauwen]

Weird, as the last hop in the traceroute belongs to Google's address space (72.14.0.0/16)...

[arif48301]

Oh I was not aware of that ,thanks for information.

it was nice to speak with some learned person.

 Thanks and take care 

regards

arif

[Georg Pauwen]

Hello,

your ISP modem is NATing, as is your Cisco router. Double NAT is usually not a good idea. What type/brand is your ISP modem ?

[Predrag Jovic]

Double NATting is typically not problem if there is no encrypted VPN traffic. I live with double NATting in my home every day. Since router is getting private IP address from ISP's device, most likely case is that modem is actually a router.

[Georg Pauwen]

I guess you are right, depending on what you actually do with your network. Double NAT can cause problems for UPnP, manual port forwarding, remote desktop, and accessing stuff like security camera feeds. If none of that is needed, double NAT works fine.

That said, and that's just a thought: why use the Cisco at all ? What is connected to FastEthernet0/1 ? I guess some switch or hub ? Since you don't have any static NAT configured on your router, you could just plug the ISP modem LAN port (the one connected to FastEthernet0/0) directly into your switch or hub, and connected devices would automatically become DHCP clients of the ISP modem...

[arif48301]

I have spoken with Virgin media and they confirmed that I can not ping  8.8.8.8 using there super hub 3.0 ,some sort of port block.

i have to to put it in modem mode only and then use my own  router.

I will try that and will post results.

I thank everyone for this support.

regards

[Reza Sharifi]

There seems to be something wrong with your config.  What is 192.168.0.33?

This IP should be public and part of the IP address of the outside interface and not private

udp 192.168.0.33:49690 10.10.10.11:49690 80.0.163.30:53 80.0.163.30:53

Can you post full config (sh run)?

HTH

[Predrag Jovic]

Which one do you want to use?

ip nat outside or ip nat enable

Currently you configured both.

With ip nat outside NAT statement should be

ip nat inside source list 1 interface FastEthernet0/0 overload

with ip nat enable NAT statement should be

ip nat source list 1 interface FastEthernet0/0 overload

[arif48301]

I have taken ip nat enable and left only ip nat outside and inside .Its still not working ,I have posted full running config along with the results ping to 8.8.8.8 (that does not work) but ping to FQDN like bbc.co.uk works.

Please have a look,I await for further help.

thanks