cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
781
Views
0
Helpful
1
Replies

PC on Vlan unable to access internet

Warren Chang
Level 1
Level 1

Hi Everyone,

                   I've been having an issue with PC's I have in Vlan 101 unable to access the internet, the GigabitEthernet0/0 is the outside interface and I'm trying to use the Vlan 101 Int as the inside interface. The router is able to ping ip address and domain names but no PC connected to the router are able to ping anything outside of the router or the internet. I'm not sure if I'm doing something wrong with the NAT'ing or if I need to use a different approach since router and switch are both on the same device. Let me know what you guys think Thank You

!

! Last configuration change at 10:57:26 EDT Mon Mar 28 2011 by admin

!

version 15.1

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname FLTPAUCMX01

!

boot-start-marker

boot system flash:c2900-universalk9-mz.SPA.151-2.T3.bin

boot-end-marker

!

!

card type t1 0 0

logging buffered 51200 warnings

!

no aaa new-model

!

clock timezone est -5 0

clock summer-time EDT recurring

network-clock-participate wic 0

network-clock-select 1 T1 0/0/0

!

no ipv6 cef

no ip source-route

no ip gratuitous-arps

ip cef

!

!

!

ip dhcp excluded-address 192.168.20.25 192.168.20.30

ip dhcp excluded-address 192.168.25.25 192.168.25.30

!

ip dhcp pool Data_Scope

   network 192.168.25.0 255.255.255.224

   dns-server 12.127.16.68 12.127.17.72

   default-router 192.168.25.30

!

ip dhcp pool Voice_Scope

   network 192.168.20.0 255.255.255.224

   default-router 192.168.20.30

   option 150 ip 192.168.20.30

!

!

!

multilink bundle-name authenticated

!

!

!

!

isdn switch-type primary-5ess

!

crypto pki token default removal timeout 0

!

crypto pki trustpoint TP-self-signed-47581623

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-47581623

revocation-check none

rsakeypair TP-self-signed-47581623

!

!

crypto pki certificate chain TP-self-signed-47581623

certificate self-signed 01

  30820251 308201BA A0030201 02020101 300D0609 2A864886 F70D0101 04050030

  2F312D30 2B060355 04031324 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 34373538 31363233 301E170D 31313033 31363133 31363030

  5A170D32 30303130 31303030 3030305A 302F312D 302B0603 55040313 24494F53

  2D53656C 662D5369 676E6564 2D436572 74696669 63617465 2D343735 38313632

  3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100CC5E

  462BECB0 2C7617C9 FFC72B30 13BE03D5 6C5E64DD 9153F66A DDBF3016 632351BF

  D3C755C5 0BBAB0F8 5CD98A63 A5AF76E7 3810507E 165B8248 6108E45E BBE68704

  576E4B0D A21BA164 5770B573 BE78A7F0 2C105035 9BF7F3F8 19BAB5DE 21E6BE0A

  DE05A140 17EB3BBF 8ABDBEDA D880DEB1 FD853BCD F71D7135 4B458BDB B8C70203

  010001A3 7D307B30 0F060355 1D130101 FF040530 030101FF 30280603 551D1104

  21301F82 1D464C54 50415543 4D583031 2E706172 61676F6E 64656E74 616C2E63

  6F6D301F 0603551D 23041830 168014F1 7DB724C3 29BAAB21 40200BB1 9104240E

  61B7F730 1D060355 1D0E0416 0414F17D B724C329 BAAB2140 200BB191 04240E61

  B7F7300D 06092A86 4886F70D 01010405 00038181 0071A7C2 3989C98F B37A2A7A

  5E5684BD C822AAD5 8929DE0C 4ABE741C CE3B4BC4 49C637E8 E6448471 32508CD7

  8C293C82 33C8CF75 B704FB65 23B6EE3F 712A3741 E65B819C 9993BE33 99115C4D

  3E33F287 F3B31F63 2BB7F9C3 172C6854 266E05A7 934062F3 226F2D9C D9050F95

  0CE3E403 62422E53 ECB0BA0C F21E0843 E09B6F8E F3

  quit

voice-card 0

dspfarm

dsp services dspfarm

!

!

!

voice service voip

clid network-provided

allow-connections h323 to h323

allow-connections h323 to sip

allow-connections sip to h323

fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711ulaw

h323

!

voice class codec 9999

codec preference 1 g711ulaw

codec preference 2 g729br8

!

voice class codec 9990

codec preference 1 g729r8

!

!

voice register global

mode cme

!

!

!

voice translation-rule 1

rule 1 /^678\(.*\)/ /8678\1/

rule 2 /\(..........\)/ /81\1/

!

!

voice translation-profile filter_678

translate calling 1

!

!

license udi pid CISCO2911/K9 sn FTX1508AKY8

hw-module ism 0

!

hw-module pvdm 0/0

!

hw-module pvdm 0/1

!

!

!

username admin privilege 15 secret 5 $1$QPsZ$ul5evEKjDnbry33S1pEGi0

!

redundancy

!

!

!

!

controller T1 0/0/0

cablelength long 0db

!

!

!

!

!

!

!

!

interface Loopback0

ip address 10.100.100.1 255.255.255.0

!

interface GigabitEthernet0/0

ip address dhcp

ip nat outside

ip virtual-reassembly in

duplex auto

speed auto

!

interface ISM0/0

ip unnumbered Loopback0

service-module ip address 10.100.100.2 255.255.255.0

!Application: CUE Running on ISM

service-module ip default-gateway 10.100.100.1

!

interface ISM0/1

description Internal switch interface connected to Internal Service Module

no ip address

shutdown

!

interface GigabitEthernet0/1

no ip address

duplex auto

speed auto

!

interface GigabitEthernet0/2

no ip address

shutdown

duplex auto

speed auto

!

interface GigabitEthernet0/3/0

switchport access vlan 101

switchport voice vlan 201

duplex full

speed 100

!

interface GigabitEthernet0/3/1

switchport access vlan 101

switchport voice vlan 201

duplex full

speed 100

!

interface GigabitEthernet0/3/2

switchport access vlan 101

switchport voice vlan 201

duplex full

speed 100

!

interface GigabitEthernet0/3/3

switchport access vlan 101

switchport voice vlan 201

duplex full

speed 100

!

interface GigabitEthernet0/3/4

switchport access vlan 101

switchport voice vlan 201

duplex full

speed 100

!

interface GigabitEthernet0/3/5

switchport access vlan 101

switchport voice vlan 201

duplex full

speed 100

!

interface GigabitEthernet0/3/6

switchport access vlan 101

switchport voice vlan 201

duplex full

speed 100

!

interface GigabitEthernet0/3/7

switchport access vlan 101

switchport voice vlan 201

duplex full

speed 100

!

interface Vlan1

no ip address

!

interface Vlan101

ip address 192.168.25.30 255.255.255.224

ip nat inside

ip virtual-reassembly in

!

interface Vlan201

ip address 192.168.20.30 255.255.255.224

!

no ip forward-protocol nd

!

ip http server

ip http access-class 23

ip http authentication local

no ip http secure-server

ip http timeout-policy idle 300 life 86400 requests 10000

ip http path flash:/GUI

!

ip route 10.100.100.2 255.255.255.255 ISM0/0

ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 dhcp

!

access-list 23 permit 10.100.100.0 0.0.0.255

access-list 23 permit 10.10.10.0 0.0.0.7

access-list 23 permit 192.168.20.0 0.0.0.31

access-list 23 permit 192.168.25.0 0.0.0.31

!

!

!

!

!

tftp-server flash:/Ringtones/Ringlist.xml alias Ringlist.xml

tftp-server flash:/Desktops/320x212x12/CampusNight.png

tftp-server flash:/Desktops/320x212x12/CiscoFountain.png

tftp-server flash:/Desktops/320x212x12/MorroRock.png

tftp-server flash:/Desktops/320x212x12/NantucketFlowers.png

tftp-server flash:/Desktops/320x212x12/TN-CampusNight.png

tftp-server flash:/Desktops/320x212x12/TN-CiscoFountain.png

tftp-server flash:/Desktops/320x212x12/TN-Fountain.png

tftp-server flash:/Desktops/320x212x12/TN-MorroRock.png

tftp-server flash:/Desktops/320x212x12/TN-NantucketFlowers.png

tftp-server flash:/Desktops/320x212x12/CiscoLogo.png

tftp-server flash:/Desktops/320x212x12/TN-CiscoLogo.png

tftp-server flash:/Desktops/320x212x12/LIST.XML

tftp-server flash:/Ringtones/Analog1.raw alias Analog1.raw

tftp-server flash:/Ringtones/Analog2.raw alias Analog2.raw

tftp-server flash:/Ringtones/AreYouThere.raw alias AreYouThere.raw

tftp-server flash:/Ringtones/AreYouThereF.raw alias AreYouThereF.raw

tftp-server flash:/Ringtones/Bass.raw alias Bass.raw

tftp-server flash:/Ringtones/CallBack.raw alias CallBack.raw

tftp-server flash:/Ringtones/Chime.raw alias Chime.raw

tftp-server flash:/Ringtones/Classic1.raw alias Classic1.raw

tftp-server flash:/Ringtones/Classic2.raw alias Classic2.raw

tftp-server flash:/Ringtones/ClockShop.raw alias ClockShop.raw

tftp-server flash:/Ringtones/DistinctiveRingList.xml alias DistinctiveRingList.xml

tftp-server flash:/Ringtones/Drums1.raw alias Drums1.raw

tftp-server flash:/Ringtones/Drums2.raw alias Drums2.raw

tftp-server flash:/Ringtones/FilmScore.raw alias FilmScore.raw

tftp-server flash:/Ringtones/HarpSynth.raw alias HarpSynth.raw

tftp-server flash:/Ringtones/Jamaica.raw alias Jamaica.raw

tftp-server flash:/Ringtones/KotoEffect.raw alias KotoEffect.raw

tftp-server flash:/Ringtones/MusicBox.raw alias MusicBox.raw

tftp-server flash:/Ringtones/Piano1.raw alias Piano1.raw

tftp-server flash:/Ringtones/Piano2.raw alias Piano2.raw

tftp-server flash:/Ringtones/Pop.raw alias Pop.raw

tftp-server flash:/Ringtones/Pulse1.raw alias Pulse1.raw

tftp-server flash:/Ringtones/Ring1.raw alias Ring1.raw

tftp-server flash:/Ringtones/Ring2.raw alias Ring2.raw

tftp-server flash:/Ringtones/Ring3.raw alias Ring3.raw

tftp-server flash:/Ringtones/Ring4.raw alias Ring4.raw

tftp-server flash:/Ringtones/Ring5.raw alias Ring5.raw

tftp-server flash:/Ringtones/Ring6.raw alias Ring6.raw

tftp-server flash:/Ringtones/Ring7.raw alias Ring7.raw

tftp-server flash:/Ringtones/Sax1.raw alias Sax1.raw

tftp-server flash:/Ringtones/Sax2.raw alias Sax2.raw

tftp-server flash:/Ringtones/Vibe.raw alias Vibe.raw

tftp-server flash:SCCP42.8-5-3S.loads alias SCCP42.8-5-3S

!

control-plane

!

!

ccm-manager music-on-hold

!

!

!

dspfarm profile 10 transcode

associate application SCCP

shutdown

!

dial-peer voice 1 pots

preference 1

incoming called-number .

direct-inward-dial

forward-digits all

!

dial-peer voice 12 pots

preference 1

destination-pattern 911

progress_ind setup enable 3

progress_ind alert enable 8

progress_ind progress enable 8

forward-digits 3

!

dial-peer voice 13 pots

preference 1

destination-pattern 81[2-9]..[2-9]......

progress_ind setup enable 3

progress_ind alert enable 8

progress_ind progress enable 8

forward-digits 11

!

dial-peer voice 14 pots

preference 1

destination-pattern 8[2-9]..[2-9]......

progress_ind setup enable 3

progress_ind alert enable 8

progress_ind progress enable 8

forward-digits 10

!

dial-peer voice 15 pots

preference 1

destination-pattern 9011T

progress_ind setup enable 3

progress_ind alert enable 8

progress_ind progress enable 8

prefix 011

!

dial-peer voice 11 pots

preference 2

destination-pattern 8[4,6,9]11

progress_ind setup enable 3

progress_ind alert enable 8

progress_ind progress enable 8

forward-digits 3

!

dial-peer voice 2 voip

destination-pattern 2...

session protocol sipv2

session target ipv4:10.100.100.2

dtmf-relay sip-notify

codec g711ulaw

no vad

!

!

gateway

timer receive-rtp 1200

!

!

!

gatekeeper

shutdown

!

!

telephony-service

sdspfarm units 5

sdspfarm transcode sessions 4

no auto-reg-ephone

max-ephones 25

max-dn 25

ip source-address 192.168.20.30 port 2000

service dss

timeouts busy 20

timeouts ringing 20

system message Call Manager Express

url directories http://192.168.20.30/localdirectory

url authentication http://192.168.20.30/CCMCIP/authenticate.asp cme cme

cnf-file location flash:

cnf-file perphone

load 7921 flash:CP7921G-1.3.3

load 7925 flash:CP7925G-1.3.3

load 7931 flash:SCCP31.8-5-3S

load 7941 flash:SCCP41.8-5-3S

load 7942 flash:SCCP42.8-5-3S

load 7945 flash:SCCP45.8-5-3S

load 7961 flash:SCCP41.8-5-3S

load 7962 flash:SCCP42.8-5-3S

load 7965 flash:SCCP45.8-5-3S

load 7970 flash:SCCP70.8-5-3S

load 7971 flash:SCCP70.8-5-3S

load 7975 flash:SCCP75.8-5-3S

time-zone 12

dialplan-pattern 1 678402.... extension-length 4

voicemail 2000

max-conferences 8 gain -6

moh flash:music-on-hold.au

web admin system name admin secret 5 $1$BTwg$owcBCOfj/z23qiafXUFUn0

dn-webedit

time-webedit

transfer-system full-consult

secondary-dialtone 8

create cnf-files version-stamp Jan 01 2002 00:00:00

!

!

vm-integration

!

!

ephone-template  1

!

!

ephone-dn  1  dual-line

number 5904

label John Luis  - 5904

description John Luis

name John Luis - 5904

call-forward busy 2000

call-forward noan 2000 timeout 20

huntstop channel

no huntstop

!

!

ephone-dn  2  dual-line

number 5906

label Susan West - 5906

description Susan West

name Susan West - 5906

call-forward busy 2000

call-forward noan 2000 timeout 20

huntstop channel

no huntstop

!

!

ephone-dn  3  dual-line

number 5908

label Cassandra Mullings - 5908

description Cassandra Mullings

name Cassandra Mullings - 5908

call-forward busy 2000

call-forward noan 2000 timeout 20

huntstop channel

no huntstop

!

!

ephone  1

device-security-mode none

mac-address 68BD.ABA5.4DBD

type 7942

button  1:1

!

!

!

ephone  2

device-security-mode none

mac-address 68BD.ABA5.4EB8

type 7942

button  1:2

!

!

!

ephone  3

device-security-mode none

mac-address 68BD.ABA5.5279

type 7942

button  1:3

!

!

ephone-hunt 1 sequential

pilot 5000

list 5904, 5906, 5908

timeout 10, 10, 10

description *********

!

!

!

line con 0

login local

line aux 0

privilege level 15

login local

transport input telnet

line 131

no activation-character

no exec

transport preferred none

transport input all

transport output pad telnet rlogin lapb-ta mop udptn v120 ssh

stopbits 1

line vty 0 4

privilege level 15

login local

transport input telnet

line vty 5 15

privilege level 15

login local

transport input telnet

!

scheduler allocate 20000 1000

end

1 Accepted Solution

Accepted Solutions

Jon Marshall
Hall of Fame
Hall of Fame

Warren

Add this to your config -

access-list 101 permit ip 192.168.25.0 0.0.0.31 any

ip nat inside source list 101 interface gi0/0 overload

Jon

View solution in original post

1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

Warren

Add this to your config -

access-list 101 permit ip 192.168.25.0 0.0.0.31 any

ip nat inside source list 101 interface gi0/0 overload

Jon