listo quedo asi, pero no hace lo que necesito, desde la wan se puede ver mis hosts (ping exitoso desde un pc conectado al puerto wan con ip 192.168.1.11) pero mis host no pueden ver nada mas alla de la ip de la wan (ping hasta 192.168.1.2 exitoso) pero ping al host conectado en la wan (192.168.1.11) no responde..
router01#sh run
Building configuration...
Current configuration : 5484 bytes
!
! Last configuration change at 04:56:27 UTC Sat Feb 16 2019 by JCarlos
! NVRAM config last updated at 04:56:31 UTC Sat Feb 16 2019 by JCarlos
! NVRAM config last updated at 04:56:31 UTC Sat Feb 16 2019 by JCarlos
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router01
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
enable secret 4 FQOIbemZ5IMwJf2yWikSNiEIn7uk4bTMz29mDBtCM3A
enable password xxxxxxx
!
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-3998734045
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3998734045
revocation-check none
rsakeypair TP-self-signed-3998734045
!
!
crypto pki certificate chain TP-self-signed-3998734045
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33393938 37333430 3435301E 170D3139 30323134 32313039
32325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 39393837
33343034 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BD67 45588AF9 DA17FFA3 BDD91CFF AACCC0B1 B47C2B8E B1ED8B92 437351FA
3C8348E6 08DFF8E5 D2D6817A 2295F28C C42F9ABA 89B5EF6E 0F23BA5D 4932CED4
158C792E 369D9BAD EACB31F8 03A2AD71 9C4A68B9 C810B24B A9CC3D8B 641209CC
2A6728AA 155C1898 4E492333 19CAE7BE D7E2D10C 73BFCCB7 A281B7BC 63AD8088
D6F30203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14574E78 D07C6672 41DA873A B614DD69 78D49BB6 BF301D06
03551D0E 04160414 574E78D0 7C667241 DA873AB6 14DD6978 D49BB6BF 300D0609
2A864886 F70D0101 05050003 818100AE 511DC3CF 83C13C09 D431C4E7 BE672DF3
EADC9FCE 1D64774A BDB5CE8E 8452E6DB 81613408 597D491E FDF2CC40 93A72B6E
95078539 8DC64F91 0E1445BC 87ACB8AB 74F15A9B 50FF87E9 002915BF 96BBDA9C
555F8658 F3CF45C3 50825542 C265E549 34101530 A451CD60 BBF68D4E 7EB42CBE
5C4583F0 D31262DC F01E986E 72580B
quit
ip source-route
!
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.20
!
ip dhcp pool lafinquita-pool
import all
network 192.168.2.0 255.255.255.0
dns-server 200.107.10.105 200.107.10.104
default-router 192.168.2.1
lease 0 2
!
!
ip cef
no ip domain lookup
ip domain name yourdomain.com
ip name-server 200.107.10.105
ip name-server 200.107.10.104
no ipv6 cef
!
!
license udi pid CISCO881-K9 sn FTX163783ML
!
!
vtp mode transparent
username JC488a privilege 15 secret 4 2kZuG1X/cnpzcC5NffFvTH/PLBC8z12rSfEdt9CAC2Y
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
ip address 192.168.1.2 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip http server
ip http access-class 24
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip nat inside source list 1 interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 FastEthernet4
!
access-list 24 permit 192.168.0.0
no cdp run
!
!
!
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you
want to use.
-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.
YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE
PUBLICLY-KNOWN CREDENTIALS
Here are the Cisco IOS commands.
username <myuser> privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want
to use.
IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL
NOT BE ABLE TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.
For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
login local
line aux 0
line vty 0 4
access-class 24 in
privilege level 15
login local
transport input telnet ssh
!
end
router01#
