New router and switch setup in home. Cant access internet. Please help...

[Adi Badi]

I finally setup my first router and switch in my house and cant get it to work. Cant get to the Internet. I know im overlooking something. Can you guys please look over my configs? (fa0/0 on router temporary shutdown on purpose)     

--------- UPDATED CONFIG FILES A FEW POSTS DOWN!

   Thanks.

[Luke Oxley]

[@adibadi2@yahoo.com],

Thank you for your post. First things first, I love your MOTD banner "Login and die! Have a nice day." - very funny.

I've had a look over the configurations and have three questions.

1. What is connected to Fa0/0 on the router?

2. Can you ping 192.168.1.1 from a host connected to the switch? In the appropriate VLAN, of course.

3. Can you ping 8.8.8.8 from the router? Source this ping from Fa0/0.

Kind regards,

Luke

---

Please rate helpful posts and mark correct answers.

[Adi Badi]

hey! Thanks for your reply,  I have a RCN cable modem on Fa0/0. I dont have any hosts on 192.168.1.1. But I tried from a host on 192.168.10.0 (vlan 10) and I can ping 192.168.10.1.  And, yes, I can ping 8.8.8.8 from the router.  Im not sure how to source it from fa0/0.

[Adi Badi]

Here are the updated configs after I made some modifications.. 

******************Look at these instead of ones above !!! 

[Adi Badi]

Bozo(config)#do sh ip int brief
Interface IP-Address OK? Method Status Protocol
Vlan1 192.168.1.201 YES NVRAM administratively down down
Vlan10 192.168.10.2 YES NVRAM administratively down down
Vlan20 192.168.20.2 YES NVRAM up up
Vlan99 192.168.99.2 YES NVRAM administratively down down
FastEthernet0/1 unassigned YES unset up up
FastEthernet0/2 unassigned YES unset down down
FastEthernet0/3 unassigned YES unset up up
FastEthernet0/4 unassigned YES unset down down
FastEthernet0/5 unassigned YES unset down down
FastEthernet0/6 unassigned YES unset down down
FastEthernet0/7 unassigned YES unset up up

Bozo(config)#logging on
Bozo(config)#int Vlan10
Bozo(config-if)#no shut
Bozo(config-if)#ex
*Mar 1 01:04:37: %LINK-3-UPDOWN: Interface Vlan10, changed state to up
Bozo(config-if)#exit
Bozo(config)#
*Mar 1 01:04:37: %LINK-5-CHANGED: Interface Vlan20, changed state to administratively down
*Mar 1 01:04:38: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up
*Mar 1 01:04:38: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan20, changed state to down
Bozo(config)#

I noticed that on the switch, some Interface Vlans are down. When I turn them on, the other ones go down. Why is that?

[ahmedshoaib]

Hi;

It's a normal behavior of Layer 2 Switch, where you can't no shutdown multiple SVI at same time.

You remove the native vlan command and access vlan 99 from switch interface F0/1.

Thanks & Best regards;

[Adi Badi]

I have a C2950-I6Q4L2-M switch. And a C2801 router. I was told that the switch can handle only one svi with ip address at a time. I think thats my problem. I have it all configured wrong.  I was told to remove all ip addresses from switch and do everything on the router. 

Maybe I should give some background:  In my house I have multiple pcs that I want on a vlan and all wireless on another vlan. I also need internet access to all devices. Thats it. Whats the easiest I can accomplish this? 

I think im complicating this.

[Luke Oxley]

[@adibadi2@yahoo.com],

Great, thanks for confirming. You aren't complicating things, your clients can talk to your switch and your switch can talk to your router, so the issue at the moment is with the router. We can look in to the specifics of other bits later, lets just get VLAN10 on the internet. I think this may be a NAT'ing issue on your router. I have a few pointers just to get us a little further forward, please can you action the following steps?

Step 1) For testing purposes, remove the outside inspection and access control list, this will help us rule out any false positives in the results.

no ip inspect autosec_inspect out
no ip access-group blockin in

Step 2) Delete access control list 1 and recreate as per the following commands. Don't add the "deny ip any any" rule at the bottom, this is there by default and does not need to be manually added in.

no access-list 1
access-list 1 permit 192.168.0.0 0.0.255.255

Step 3) Now we need to test. Please can you action the following commands on your router. Once you have actioned these commands, hold a continuous ping from a host on VLAN10 to 8.8.8.8. Please let me know if the pings respond, if not please send me the debugging output from the CLI of the router.

clear ip nat *

debug ip nat

term mon

Remember to give the hosts on the network a DNS server, I can't see this in your DHCP pool. I look forward to hearing back from you.

Regards,

Luke

---

Please rate helpful posts and mark correct answers.

[Adi Badi]

Thanks for your help.  I got it to work by using VLAN1 and giving that the ip address and using it as the native vlan. It then made the change on the router. I dont know how other people dont use vlan1 as native and get away with it. Thats what I was shooting for.

[ahmedshoaib]

Hi;

Be remember whenever you configure Router on stick or inter-vlan routing via Router don't put the IP Address on Physical interface. IP Address should be configure on sub-interface. 

You need to modify following items in your Router Config:

1. Remove IP Address on interface FastEthernet0/1

interface FastEthernet0/1
 no ip address

2. Apply nat inside statement on required sub-interface.

interface FastEthernet0/1.10
 ip nat inside

interface FastEthernet0/1.20
 ip nat inside

Thanks & Best regards;

[Adi Badi]

thanks, but I took off the ip on 0/1 and added ip nat inside on sub interfaces but still no internet and cant ping 8.8.8.8 from pc.

[ahmedshoaib]

Hi;

Please also modify the switch configuration FastEthernet0/1:

interface FastEthernet0/1
 no switchport access vlan 99
 no switchport trunk native vlan 99

switchport either be access or trunk, we cannot configure both as same time. And normally native vlan we are configuring on Switches not for Router.

Thanks & Best regards;

[m.rana.ku]

Hi Adi,

I am sharing a great content which will demonstrate step by step process of Connecting Cisco 2851 Router and Cisco 3560 Switch to ISP Home router and Configuring Cisco Router using Putty and finally Accessing Internet from Laptop and Desktop PC through this network.

PuTTY command line for Router Configuration:

Where hostname of the Router is "Router"

Entering to Privileged mode: #enable

Check IP Interface:#show ip interface brief

Entering to Global Configuration mode: Router#configure terminal

Entering GE0/0 Interface: Router(config)#interface gigabitEthernet 0/0

Making Interface up: Router(config-if)#no shutdown

Assigning IP address from DHCP: # ip address dhcp

Ping to Google DNS server: Router#ping 8.8.8.8

Entering GE0/1 Interface: Router(config)#interface gigabitEthernet 0/1

Assigning IP address : Router(config-if)#ip address 192.168.2.1 255.255.255.0

Making Interface up: Router(config-if)#no shutdown

Creating DHCP pool:

First go to global configuration mode then

Router(config)#ip dhcp pool mainuser

Router(dhcp-config)#network 192.168.2.0 /24

Router(dhcp-config)#default-router 192.168.2.1

Router(dhcp-config)#dns-server 8.8.8.8

Router(dhcp-config)#exit

Static Routing for default Gateway

Router(config)#ip route 0.0.0.0 0.0.0.0 192.168.1.1

Configuring NAT Outside:

Router(config)#interface gigabitEthernet 0/0

Router(config-if)#ip nat outside

Router(config-if)#exit

Configuring NAT inside:

Router(config)#interface gigabitEthernet 0/1

Router(config-if)#ip nat inside

Router(config-if)#exit

Creating Access list:

Router(config)#ip access-list standard 1

Router(config-std-nacl)#permit any

Router(config-std-nacl)#exit

Overloading IP NAT inside source to the interface gigabitEthernet 0/0:

Router(config)#ip nat inside source list 1 interface gigabitEthernet 0/0 overload

Router(config-if)#exit

https://www.youtube.com/channel/UCmZZ2BNGXQH1HPS3uIVnr7A?sub_confirmation=1

[m.rana.ku]

I am sharing a great content which will demonstrate step by step process of Connecting Cisco 2851 Router and Cisco 3560 Switch to ISP Home router and Configuring Cisco Router using Putty and finally Accessing Internet from Laptop and Desktop PC through this network. 

https://youtu.be/rRgdlhSbczU