04-22-2015 09:09 AM - edited 03-07-2019 11:40 PM
Main Hardware :
one router 2800
one switch 3500
My LAN 172.168..... is connected to f0/0 and internet is coming to f0/1 through dhcp from other network 10.0....
A#show ip interface brief
Interface IP-Address OK? Method Status Prot
ocol
FastEthernet0/0 172.168.0.2 YES NVRAM up up
FastEthernet0/1 10.0.3.182 YES DHCP up up
Serial1/0 unassigned YES NVRAM administratively down down
Serial1/1 unassigned YES NVRAM administratively down down
Serial1/2 unassigned YES NVRAM administratively down down
Serial1/3 unassigned YES NVRAM administratively down down
NVI0 172.168.0.2 YES unset up up
#show run
ip dhcp excluded-address 178.168.0.2
!
ip dhcp pool cisco.com
network 172.168.0.0 255.255.255.0
default-router 172.168.0.2
ip domain name ccna.com
interface FastEthernet0/0
ip address 172.168.0.2 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
ip default-gateway 10.0.3.182
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 100 interface FastEthernet0/1 overload
!
access-list 100 permit ip 172.168.0.0 0.0.255.255 10.0.0.0 0.0.0.255
#show ip route
Gateway of last resort is 10.0.0.254 to network 0.0.0.0
172.168.0.0/24 is subnetted, 1 subnets
C 172.168.0.0 is directly connected, FastEthernet0/0
C 10.0.0.0/8 is directly connected, FastEthernet0/1
S* 0.0.0.0/0 [254/0] via 10.0.0.254
Few ping results
1. ping to google from router
A#ping 4.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/19/24 ms
from pc to internet no ping. from pc to 172.168.0.2 (f0/0)ping works. In PC, dhcp providing ip and gateway but no internet coming. I think LAN part is ok including DHCP.
Problem : no internet coming in my LAN (please also see diagram)
04-23-2015 04:06 AM
Hey,
Two observations:
First the NAT ACL needs to checked:
access-list 100 permit ip 172.168.0.0 0.0.255.255 10.0.0.0 0.0.0.255
Please edit the ACL as access-list 100 permit ip 172.168.0.0 0.0.255.255 any
Also please check the output of 'show ip nat translations' from the router.
Second is the DHCP pool is not providing the DNS server IP to the client PC.Please include a DNS server IP in the DHCP pool or configure the DNS server address statically in the client PCs.
Krishna
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide