04-27-2017 04:24 PM - edited 03-08-2019 10:22 AM
I have Brocade ICX 7450 layer 3 Switch connected to cisco Router 811, from local PC in the switch I can’t access the internet, from the PC I can successfully ping the public IP address at the Router ? Any help will be highly appreciated; the main provision on the Switch and Router are
04-27-2017 05:42 PM
Can you post the output of "sh run" from the Cisco router?
04-27-2017 05:51 PM
Here is the R & S output
Router configuration
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
switchport access vlan 100
router config
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
switchport access vlan 100
no ip address
interface FastEthernet4
ip address 51.211.165.75 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
interface Vlan1
no ip address
interface Vlan100
ip address 192.168.100.2 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat pool data 51.211.165.75 51.211.165.75 netmask 255.255.255.0
ip nat inside source list 1 pool data overload
ip route 0.0.0.0 0.0.0.0 FastEthernet4
ip route 192.168.10.0 255.255.255.0 Vlan100
ip route 192.168.10.0 255.255.255.0 192.168.100.1
access-list 1 permit any
Switch configuration
vlan 1 name DEFAULT-VLAN by port
vlan 10 name data by port
tagged ethe 1/1/1 to 1/1/47
router-interface ve 10
vlan 20 name voice by port
tagged ethe 1/1/1 to 1/1/47
router-interface ve 20
vlan 100 by port
untagged ethe 1/1/48
ip dhcp-server enable
ip dhcp-server pool data
dhcp-default-router 192.168.10.1
dns-server 84.235.6.55
lease 1 0 0
network 192.168.10.0 255.255.255.0
deploy
ip dhcp-server pool voice
dhcp-default-router 192.168.20.1
lease 1 0 0
network 192.168.20.0 255.255.255.0
deploy
ip route 0.0.0.0/0 192.168.100.2
ip route 192.168.10.0/24 ve 10
no port bootp
interface ethernet 1/1/48
route-only
ip address 192.168.100.1 255.255.255.0
inline power
04-27-2017 06:19 PM
Make these changes and test again
no access-list 1 permit any
access-list 1 permit 192.168.100.0 0.0.0.255
no ip nat pool data 51.211.165.75 51.211.165.75 netmask 255.255.255.0
no ip nat inside source list 1 pool data overload
ip nat inside source list 1 interface fastEthernet4 overload
and test again.
HTH
04-27-2017 06:36 PM
Thanks Raza, I will try it and let you know
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide