i have proplem with vlan cannot access internet

ahmedelzain1987 · ‎11-01-2012

scnario

i have router 1841 have 2 interface

f0/0 connected modem f0/0 ip add 192.168.2.2

modem 192.168.2.1

f0/1 connected to switch 2960 l2

and in switch vlan 5 ip add 172.16.1.0

i make routing between vlan by subinterface in router and in switch trunk

but vlan 5 cannot access internet

kcnajaf · ‎11-01-2012

Hi Ahmed,

Could you share the running config of the router and switch please?

Regards

Najaf

ahmedelzain1987 · ‎11-01-2012

!

archive

log config

hidekeys

!

! nterface FastEthernet0/0

description connect to modem

ip address 192.168.2.2 255.255.255.0

ip nat outside

ip virtual-reassembly

duplex auto

speed auto

!

interface FastEthernet0/1

description connect to 2960

no ip address

ip nat inside

ip virtual-reassembly

duplex auto

speed auto

!

interface FastEthernet0/1.1

encapsulation dot1Q 5

ip address 172.16.1.1 255.255.255.0

!

interface FastEthernet0/1.2

encapsulation dot1Q 1 native

ip address 10.0.0.2 255.255.255.0

ip route 0.0.0.0 0.0.0.0 192.168.2.1

ip route 172.16.1.0 255.255.255.0 10.10.10.2

ip route 192.168.0.0 255.255.0.0 10.10.10.2

!

ip http server

no ip http secure-server

ip nat inside source list 1 interface FastEthernet0/0 overload

ip nat inside source list 2 interface FastEthernet0/0 overload

ip nat inside source list 3 interface FastEthernet0/0 overload

!

access-list 1 permit 192.168.0.0 0.0.255.255

access-list 2 permit 172.16.0.0 0.0.255.255

access-list 3 permit 1.1.0.0 0.0.255.255

! control-plane

!

------------------------------------------------

switch only interface trunk and vlan

thanx

Richard Burts · ‎11-01-2012

I would suggest that instead of creating 3 separate access lists for address translation that you create one access list with 3 entries for address translation.

You tell us that vlan 5 can not access the internet but do not tell us whether vlan 1 can access the internet. It would be helpful to know this.

HTH

Rick

HTH

Rick