Cisco 3560 connection to internet

amidoufloriantoure1 · ‎05-31-2016

Hi all I have a problem to connect my cisco 3560 to the internet.

I can ping the internet from y route I can ping the switch from the router but the router cannot ping the internet

This my configurations

On the switch :

interface FastEthernet0/15
switchport trunk encapsulation dot1q
switchport trunk native vlan 10
switchport trunk allowed vlan 1,10,20,30,40,60,100
switchport mode trunk

On the router :

Current configuration : 1975 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router2600
!
enable password 7 05080F1C2243
!
ip subnet-zero
!
!
ip domain lookup source-interface FastEthernet0/1
ip name-server 8.8.4.4
ip name-server 8.8.8.8
!
!
!
voice call carrier capacity active
!
!
!
!
!
!
!
!
!
mta receive maximum-recipients 0
!
!
!
!
interface FastEthernet0/0
no ip address
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.1.1 255.255.255.0
!
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
!
interface FastEthernet0/0.20
encapsulation dot1Q 20
ip address 192.168.20.1 255.255.255.0
!
interface FastEthernet0/0.30
encapsulation dot1Q 30
ip address 192.168.30.1 255.255.255.0
!
interface FastEthernet0/0.40
encapsulation dot1Q 40
ip address 192.168.40.1 255.255.255.0
!
interface FastEthernet0/0.60
encapsulation dot1Q 60
ip address 192.168.60.1 255.255.255.0
!
interface FastEthernet0/0.80
encapsulation dot1Q 80
ip address 192.168.80.1 255.255.255.0
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip address 192.168.100.1 255.255.255.0
!
interface FastEthernet0/1
ip address 10.1.95.180 255.255.0.0
ip nat outside
duplex auto
speed auto
!
interface Ethernet1/0
no ip address
shutdown
half-duplex
!
ip nat inside source list NAT_TRAFFIC interface FastEthernet0/1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.254.254
no ip http server
!
!
ip access-list extended NAT_TRAFFIC
permit ip 192.168.0.0 0.0.0.255 any
permit tcp any any established
deny tcp any any
permit ip any any
!
access-list 101 permit udp any eq domain 0.0.4.4 8.8.8.8
access-list 101 permit udp any eq domain any
!
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
line con 0
password 7 104D000A0618
login
line aux 0
line vty 0 4
password 7 00071A150754
login
!
!
end

Richard Burts · ‎05-31-2016

I do not understand the situation. First you tell us that "I can ping the internet from y route" and then you tell us that "the router cannot ping the internet ". Can you provide clarification.

The config looks mostly reasonable. The NAT is unusual and would translate all traffic for 192.168.0.0 vlan 1, would not translate TCP for other vlans, and would translate UDP, ICMP for other vlans. So users in other vlans would not be able to surf the web. But if you are testing with ping then it should work. You have a default route with a next hop of 10.1.254.254. You have not provided information about whether that gateway is working or not and if the router can not access the Internet then the functionality of the gateway is certainly one thing to check.

HTH

Rick

HTH

Rick