01-22-2017 11:49 AM - edited 03-08-2019 09:01 AM
Hello Cisco community,
My task is to create dhcp server on cisco router 2811.
Need help configuring NAT...
Config is working well but i think the problem is at Nat.
Building configuration...
Current configuration : 1052 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot config flash:r2-confg
boot-end-marker
!
! card type command needed for slot/vwic-slot 0/0
logging message-counter syslog
enable secret 5 $1$3bEP$djjScYet2sVtEKDvlpbOd0
enable password cisco2
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
ip dhcp excluded-address 10.100.100.1
!
ip dhcp pool DHCP_SERVER
import all
network 10.100.100.0 255.255.255.0
dns-server 213.197.128.71
default-router 10.100.100.1
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
no cdp enable
no mop enabled
!
interface FastEthernet0/1
ip address 10.100.100.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no cdp enable
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
no ip http server
no ip http secure-server
!
!
ip nat inside source list 115 interface FastEthernet0/0 overload
!
access-list 115 permit ip 10.100.100.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
ccm-manager fax protocol cisco
!
mgcp fax t38 ecm
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco3
login
!
scheduler allocate 20000 1000
no process cpu extended
no process cpu autoprofile hog
end
Solved! Go to Solution.
01-22-2017 01:27 PM
Hello,
change your access list from:
access-list 115 permit ip 192.168.0.0 0.0.0.255 any
to
access-list 115 permit ip 10.100.100.0 0.0.0.255 any
01-22-2017 02:49 PM
Hello
Just would like to add to what gpawen posted
ip dhcp excluded address 10.100.100.1
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
ip dhcp pool DHCP_SERVER
import all
res
Paul
01-22-2017 01:27 PM
Hello,
change your access list from:
access-list 115 permit ip 192.168.0.0 0.0.0.255 any
to
access-list 115 permit ip 10.100.100.0 0.0.0.255 any
01-22-2017 02:47 PM
I agree that the access list used for NAT(PAT) needs to be corrected. But if this is the complete config then NAT/PAT is not the only problem. I do not see any route statements. If there is not at least a route statement for a default route (or for some routing protocol) then that is another reason why there is no Internet access. The route statement might look something like this
ip route 0.0.0.0 0.0.0.0 dhcp
HTH
Rick
01-22-2017 02:49 PM
Hello
Just would like to add to what gpawen posted
ip dhcp excluded address 10.100.100.1
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp
ip dhcp pool DHCP_SERVER
import all
res
Paul
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide