03-28-2011 11:33 AM - edited 03-06-2019 04:18 PM
Hi Everyone,
I've been having an issue with PC's I have in Vlan 101 unable to access the internet, the GigabitEthernet0/0 is the outside interface and I'm trying to use the Vlan 101 Int as the inside interface. The router is able to ping ip address and domain names but no PC connected to the router are able to ping anything outside of the router or the internet. I'm not sure if I'm doing something wrong with the NAT'ing or if I need to use a different approach since router and switch are both on the same device. Let me know what you guys think Thank You
!
! Last configuration change at 10:57:26 EDT Mon Mar 28 2011 by admin
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname FLTPAUCMX01
!
boot-start-marker
boot system flash:c2900-universalk9-mz.SPA.151-2.T3.bin
boot-end-marker
!
!
card type t1 0 0
logging buffered 51200 warnings
!
no aaa new-model
!
clock timezone est -5 0
clock summer-time EDT recurring
network-clock-participate wic 0
network-clock-select 1 T1 0/0/0
!
no ipv6 cef
no ip source-route
no ip gratuitous-arps
ip cef
!
!
!
ip dhcp excluded-address 192.168.20.25 192.168.20.30
ip dhcp excluded-address 192.168.25.25 192.168.25.30
!
ip dhcp pool Data_Scope
network 192.168.25.0 255.255.255.224
dns-server 12.127.16.68 12.127.17.72
default-router 192.168.25.30
!
ip dhcp pool Voice_Scope
network 192.168.20.0 255.255.255.224
default-router 192.168.20.30
option 150 ip 192.168.20.30
!
!
!
multilink bundle-name authenticated
!
!
!
!
isdn switch-type primary-5ess
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-47581623
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-47581623
revocation-check none
rsakeypair TP-self-signed-47581623
!
!
crypto pki certificate chain TP-self-signed-47581623
certificate self-signed 01
30820251 308201BA A0030201 02020101 300D0609 2A864886 F70D0101 04050030
2F312D30 2B060355 04031324 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34373538 31363233 301E170D 31313033 31363133 31363030
5A170D32 30303130 31303030 3030305A 302F312D 302B0603 55040313 24494F53
2D53656C 662D5369 676E6564 2D436572 74696669 63617465 2D343735 38313632
3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100CC5E
462BECB0 2C7617C9 FFC72B30 13BE03D5 6C5E64DD 9153F66A DDBF3016 632351BF
D3C755C5 0BBAB0F8 5CD98A63 A5AF76E7 3810507E 165B8248 6108E45E BBE68704
576E4B0D A21BA164 5770B573 BE78A7F0 2C105035 9BF7F3F8 19BAB5DE 21E6BE0A
DE05A140 17EB3BBF 8ABDBEDA D880DEB1 FD853BCD F71D7135 4B458BDB B8C70203
010001A3 7D307B30 0F060355 1D130101 FF040530 030101FF 30280603 551D1104
21301F82 1D464C54 50415543 4D583031 2E706172 61676F6E 64656E74 616C2E63
6F6D301F 0603551D 23041830 168014F1 7DB724C3 29BAAB21 40200BB1 9104240E
61B7F730 1D060355 1D0E0416 0414F17D B724C329 BAAB2140 200BB191 04240E61
B7F7300D 06092A86 4886F70D 01010405 00038181 0071A7C2 3989C98F B37A2A7A
5E5684BD C822AAD5 8929DE0C 4ABE741C CE3B4BC4 49C637E8 E6448471 32508CD7
8C293C82 33C8CF75 B704FB65 23B6EE3F 712A3741 E65B819C 9993BE33 99115C4D
3E33F287 F3B31F63 2BB7F9C3 172C6854 266E05A7 934062F3 226F2D9C D9050F95
0CE3E403 62422E53 ECB0BA0C F21E0843 E09B6F8E F3
quit
voice-card 0
dspfarm
dsp services dspfarm
!
!
!
voice service voip
clid network-provided
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711ulaw
h323
!
voice class codec 9999
codec preference 1 g711ulaw
codec preference 2 g729br8
!
voice class codec 9990
codec preference 1 g729r8
!
!
voice register global
mode cme
!
!
!
voice translation-rule 1
rule 1 /^678\(.*\)/ /8678\1/
rule 2 /\(..........\)/ /81\1/
!
!
voice translation-profile filter_678
translate calling 1
!
!
license udi pid CISCO2911/K9 sn FTX1508AKY8
hw-module ism 0
!
hw-module pvdm 0/0
!
hw-module pvdm 0/1
!
!
!
username admin privilege 15 secret 5 $1$QPsZ$ul5evEKjDnbry33S1pEGi0
!
redundancy
!
!
!
!
controller T1 0/0/0
cablelength long 0db
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.100.100.1 255.255.255.0
!
interface GigabitEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface ISM0/0
ip unnumbered Loopback0
service-module ip address 10.100.100.2 255.255.255.0
!Application: CUE Running on ISM
service-module ip default-gateway 10.100.100.1
!
interface ISM0/1
description Internal switch interface connected to Internal Service Module
no ip address
shutdown
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/3/0
switchport access vlan 101
switchport voice vlan 201
duplex full
speed 100
!
interface GigabitEthernet0/3/1
switchport access vlan 101
switchport voice vlan 201
duplex full
speed 100
!
interface GigabitEthernet0/3/2
switchport access vlan 101
switchport voice vlan 201
duplex full
speed 100
!
interface GigabitEthernet0/3/3
switchport access vlan 101
switchport voice vlan 201
duplex full
speed 100
!
interface GigabitEthernet0/3/4
switchport access vlan 101
switchport voice vlan 201
duplex full
speed 100
!
interface GigabitEthernet0/3/5
switchport access vlan 101
switchport voice vlan 201
duplex full
speed 100
!
interface GigabitEthernet0/3/6
switchport access vlan 101
switchport voice vlan 201
duplex full
speed 100
!
interface GigabitEthernet0/3/7
switchport access vlan 101
switchport voice vlan 201
duplex full
speed 100
!
interface Vlan1
no ip address
!
interface Vlan101
ip address 192.168.25.30 255.255.255.224
ip nat inside
ip virtual-reassembly in
!
interface Vlan201
ip address 192.168.20.30 255.255.255.224
!
no ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 300 life 86400 requests 10000
ip http path flash:/GUI
!
ip route 10.100.100.2 255.255.255.255 ISM0/0
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 dhcp
!
access-list 23 permit 10.100.100.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.7
access-list 23 permit 192.168.20.0 0.0.0.31
access-list 23 permit 192.168.25.0 0.0.0.31
!
!
!
!
!
tftp-server flash:/Ringtones/Ringlist.xml alias Ringlist.xml
tftp-server flash:/Desktops/320x212x12/CampusNight.png
tftp-server flash:/Desktops/320x212x12/CiscoFountain.png
tftp-server flash:/Desktops/320x212x12/MorroRock.png
tftp-server flash:/Desktops/320x212x12/NantucketFlowers.png
tftp-server flash:/Desktops/320x212x12/TN-CampusNight.png
tftp-server flash:/Desktops/320x212x12/TN-CiscoFountain.png
tftp-server flash:/Desktops/320x212x12/TN-Fountain.png
tftp-server flash:/Desktops/320x212x12/TN-MorroRock.png
tftp-server flash:/Desktops/320x212x12/TN-NantucketFlowers.png
tftp-server flash:/Desktops/320x212x12/CiscoLogo.png
tftp-server flash:/Desktops/320x212x12/TN-CiscoLogo.png
tftp-server flash:/Desktops/320x212x12/LIST.XML
tftp-server flash:/Ringtones/Analog1.raw alias Analog1.raw
tftp-server flash:/Ringtones/Analog2.raw alias Analog2.raw
tftp-server flash:/Ringtones/AreYouThere.raw alias AreYouThere.raw
tftp-server flash:/Ringtones/AreYouThereF.raw alias AreYouThereF.raw
tftp-server flash:/Ringtones/Bass.raw alias Bass.raw
tftp-server flash:/Ringtones/CallBack.raw alias CallBack.raw
tftp-server flash:/Ringtones/Chime.raw alias Chime.raw
tftp-server flash:/Ringtones/Classic1.raw alias Classic1.raw
tftp-server flash:/Ringtones/Classic2.raw alias Classic2.raw
tftp-server flash:/Ringtones/ClockShop.raw alias ClockShop.raw
tftp-server flash:/Ringtones/DistinctiveRingList.xml alias DistinctiveRingList.xml
tftp-server flash:/Ringtones/Drums1.raw alias Drums1.raw
tftp-server flash:/Ringtones/Drums2.raw alias Drums2.raw
tftp-server flash:/Ringtones/FilmScore.raw alias FilmScore.raw
tftp-server flash:/Ringtones/HarpSynth.raw alias HarpSynth.raw
tftp-server flash:/Ringtones/Jamaica.raw alias Jamaica.raw
tftp-server flash:/Ringtones/KotoEffect.raw alias KotoEffect.raw
tftp-server flash:/Ringtones/MusicBox.raw alias MusicBox.raw
tftp-server flash:/Ringtones/Piano1.raw alias Piano1.raw
tftp-server flash:/Ringtones/Piano2.raw alias Piano2.raw
tftp-server flash:/Ringtones/Pop.raw alias Pop.raw
tftp-server flash:/Ringtones/Pulse1.raw alias Pulse1.raw
tftp-server flash:/Ringtones/Ring1.raw alias Ring1.raw
tftp-server flash:/Ringtones/Ring2.raw alias Ring2.raw
tftp-server flash:/Ringtones/Ring3.raw alias Ring3.raw
tftp-server flash:/Ringtones/Ring4.raw alias Ring4.raw
tftp-server flash:/Ringtones/Ring5.raw alias Ring5.raw
tftp-server flash:/Ringtones/Ring6.raw alias Ring6.raw
tftp-server flash:/Ringtones/Ring7.raw alias Ring7.raw
tftp-server flash:/Ringtones/Sax1.raw alias Sax1.raw
tftp-server flash:/Ringtones/Sax2.raw alias Sax2.raw
tftp-server flash:/Ringtones/Vibe.raw alias Vibe.raw
tftp-server flash:SCCP42.8-5-3S.loads alias SCCP42.8-5-3S
!
control-plane
!
!
ccm-manager music-on-hold
!
!
!
dspfarm profile 10 transcode
associate application SCCP
shutdown
!
dial-peer voice 1 pots
preference 1
incoming called-number .
direct-inward-dial
forward-digits all
!
dial-peer voice 12 pots
preference 1
destination-pattern 911
progress_ind setup enable 3
progress_ind alert enable 8
progress_ind progress enable 8
forward-digits 3
!
dial-peer voice 13 pots
preference 1
destination-pattern 81[2-9]..[2-9]......
progress_ind setup enable 3
progress_ind alert enable 8
progress_ind progress enable 8
forward-digits 11
!
dial-peer voice 14 pots
preference 1
destination-pattern 8[2-9]..[2-9]......
progress_ind setup enable 3
progress_ind alert enable 8
progress_ind progress enable 8
forward-digits 10
!
dial-peer voice 15 pots
preference 1
destination-pattern 9011T
progress_ind setup enable 3
progress_ind alert enable 8
progress_ind progress enable 8
prefix 011
!
dial-peer voice 11 pots
preference 2
destination-pattern 8[4,6,9]11
progress_ind setup enable 3
progress_ind alert enable 8
progress_ind progress enable 8
forward-digits 3
!
dial-peer voice 2 voip
destination-pattern 2...
session protocol sipv2
session target ipv4:10.100.100.2
dtmf-relay sip-notify
codec g711ulaw
no vad
!
!
gateway
timer receive-rtp 1200
!
!
!
gatekeeper
shutdown
!
!
telephony-service
sdspfarm units 5
sdspfarm transcode sessions 4
no auto-reg-ephone
max-ephones 25
max-dn 25
ip source-address 192.168.20.30 port 2000
service dss
timeouts busy 20
timeouts ringing 20
system message Call Manager Express
url directories http://192.168.20.30/localdirectory
url authentication http://192.168.20.30/CCMCIP/authenticate.asp cme cme
cnf-file location flash:
cnf-file perphone
load 7921 flash:CP7921G-1.3.3
load 7925 flash:CP7925G-1.3.3
load 7931 flash:SCCP31.8-5-3S
load 7941 flash:SCCP41.8-5-3S
load 7942 flash:SCCP42.8-5-3S
load 7945 flash:SCCP45.8-5-3S
load 7961 flash:SCCP41.8-5-3S
load 7962 flash:SCCP42.8-5-3S
load 7965 flash:SCCP45.8-5-3S
load 7970 flash:SCCP70.8-5-3S
load 7971 flash:SCCP70.8-5-3S
load 7975 flash:SCCP75.8-5-3S
time-zone 12
dialplan-pattern 1 678402.... extension-length 4
voicemail 2000
max-conferences 8 gain -6
moh flash:music-on-hold.au
web admin system name admin secret 5 $1$BTwg$owcBCOfj/z23qiafXUFUn0
dn-webedit
time-webedit
transfer-system full-consult
secondary-dialtone 8
create cnf-files version-stamp Jan 01 2002 00:00:00
!
!
vm-integration
!
!
ephone-template 1
!
!
ephone-dn 1 dual-line
number 5904
label John Luis - 5904
description John Luis
name John Luis - 5904
call-forward busy 2000
call-forward noan 2000 timeout 20
huntstop channel
no huntstop
!
!
ephone-dn 2 dual-line
number 5906
label Susan West - 5906
description Susan West
name Susan West - 5906
call-forward busy 2000
call-forward noan 2000 timeout 20
huntstop channel
no huntstop
!
!
ephone-dn 3 dual-line
number 5908
label Cassandra Mullings - 5908
description Cassandra Mullings
name Cassandra Mullings - 5908
call-forward busy 2000
call-forward noan 2000 timeout 20
huntstop channel
no huntstop
!
!
ephone 1
device-security-mode none
mac-address 68BD.ABA5.4DBD
type 7942
button 1:1
!
!
!
ephone 2
device-security-mode none
mac-address 68BD.ABA5.4EB8
type 7942
button 1:2
!
!
!
ephone 3
device-security-mode none
mac-address 68BD.ABA5.5279
type 7942
button 1:3
!
!
ephone-hunt 1 sequential
pilot 5000
list 5904, 5906, 5908
timeout 10, 10, 10
description *********
!
!
!
line con 0
login local
line aux 0
privilege level 15
login local
transport input telnet
line 131
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
privilege level 15
login local
transport input telnet
line vty 5 15
privilege level 15
login local
transport input telnet
!
scheduler allocate 20000 1000
end
Solved! Go to Solution.
03-28-2011 11:42 AM
Warren
Add this to your config -
access-list 101 permit ip 192.168.25.0 0.0.0.31 any
ip nat inside source list 101 interface gi0/0 overload
Jon
03-28-2011 11:42 AM
Warren
Add this to your config -
access-list 101 permit ip 192.168.25.0 0.0.0.31 any
ip nat inside source list 101 interface gi0/0 overload
Jon
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide