NAT Issues

[rashad.exe]

HI 

i am trying to apply NAT on cisco CSR 1000V

when i apply the NAT i can to internet from any client in the local network but i can't browse the internet 

so any on can help about the problem 

Router#sho run
Router#sho running-config
Building configuration...

!
!
no aaa new-model
ip cef
!
!
!
!
multilink bundle-name authenticated
!
!
username admin privilege 15 password 0 nothing
archive
 log config
  hidekeys
!
!
!
!
!

interface FastEthernet0/0
 ip address 172.20.0.10 255.255.0.0 secondary
 ip address 172.17.0.2 255.255.0.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial0/0/0
 ip address 10.10.10.10 255.255.255.252
 ip nat outside
 ip virtual-reassembly
 no fair-queue
!
interface Serial0/0/1
 no ip address
 shutdown
 clock rate 2000000
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.10.10.9
!
!
ip http server
ip nat pool zozo x.x.x.x x.x.x.x netmask 255.255.255.224
ip nat inside source list 100 pool zozo overload
!
access-list 100 permit ip 172.17.0.0 0.0.255.255 any
access-list 100 permit ip 172.20.0.0 0.0.255.255 any
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
 login local
 transport input telnet
 transport output telnet
!
scheduler allocate 20000 1000
end

Router#

[Reza Sharifi]

Hi,

Are you doing NAT from private to private IP or the serial interface has a public IP?

interface Serial0/0/0
 ip address 10.10.10.10 255.255.255.252
 ip nat outside
 ip virtual-reassembly
 no fair-queue

HTH

[rashad.exe]

hi 

yes the serial interface public ip address 

(sorry i forget to change it in the post )

[Reza Sharifi]

Hi,

If you can connect to Internet but you can not browse, it could be a DNS issue. Can you try accessing a web site by IP.

so 2 tests:

1-from you LAN if you can ping 8.8.8.8 you have internet connectivity.

if above works go to step number 2

2-http://74.125.236.84

This is Google IP

HTH

[rashad.exe]

hi 

i try it but still no browsing access 

do you think i have problem because it CSR 1000V on VMware

by the way i user this router as VPN router and its working with out any problems 

thanks 

[Reza Sharifi]

So are you able to ping 8.8.8.8 from your LAN?

[rashad.exe]

yes i can ping from my local network to 8.8.8.8

[Reza Sharifi]

Ok, so you have Internet access.

to test, on your laptop add a DNS entry of 8.8.8.8 (this is Google DNS)  and than try to browse www.google.com

I have never used the CSR 1000v, but I don't think that is the problem because you already have Internet access.

HTH

[rashad.exe]

i try it in in the first step and still have the same problem 

[Reza Sharifi]

Can you delete "ip virtual-reassembly" from interface fa0/0 and s0/0/0 and test again?

HTH

[devils_advocate]

If you can ping an internet address but are not able to browse to a website then its likely a DNS issue.

What device is doing your DNS?

If you set your dns server to 8.8.8.8 does it work?

Thanks