09-20-2017 01:53 PM - edited 03-08-2019 12:06 PM
Hi,
I have a question about a Cisco 892FSP router that I am trying to configure. The 892 has two WAN ports G8 and G9 along with seven LAN ports G0 to G7. It seems that the factory default configures the WAN ports L3 and the LAN ports to L2.
datalab#show interfaces Vlan 10
Vlan10 is up, line protocol is up
Hardware is EtherSVI, address is 70db.9887.bca8 (bia 70db.9887.bca8)
Description: datalab network
Internet address is 10.100.100.1/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:05, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
4071 packets input, 332960 bytes, 0 no buffer
Received 336 broadcasts (43 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
6289 packets output, 6980203 bytes, 0 underruns
0 output errors, 0 interface resets
122 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
datalab#show interfaces switchport
Name: Gi0
Switchport: Enabled
Administrative Mode: static access
Operational Mode: down
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 10 (test)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: none
Protected: false
Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none
datalab#show ip route
Gateway of last resort is 192.168.10.1 to network 0.0.0.0
S* 0.0.0.0/0 is directly connected is directly connected, GigabitEthernet8
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.100.100.0/24 is directly connected, Vlan10
L 10.100.100.1/32 is directly connected, Vlan10
192.168.10.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.10.0/24 is directly connected, GigabitEthernet8
L 192.168.10.10/32 is directly connected, GigabitEthernet8
datalab#show running (excerpt)
interface GigabitEthernet0
description datalab pc
switchport access vlan 10
no ip address
interface GigabitEthernet8
description PrimaryWANDesc_
ip address 192.168.10.10 255.255.255.0
duplex auto
speed auto
media-type rj45
!
interface Vlan1
no ip address
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1412
shutdown
!
interface Vlan10
description datalab network
ip address 10.100.100.1 255.255.255.0
no ip redirects
no ip proxy-arp
!
router rip
version 2
network 10.0.0.0
network 192.168.10.0
no auto-summary
!
ip forward-protocol nd
ip http server
no ip http secure-server
ip http path flash
!
ip nat inside source list nat-list interface GigabitEthernet8 overload
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
ip route 0.0.0.0 0.0.0.0 192.168.10.1
atalab#show vlan-switch
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi1, Gi2, Gi3, Gi4, Gi5, Gi6
Gi7
10 test active Gi0
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 1002 1003
10 enet 100010 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 1 1003
1003 tr 101003 1500 1005 0 - - srb 1 1002
1004 fdnet 101004 1500 - - 1 ibm - 0 0
1005 trnet 101005 1500 - - 1 ibm - 0 0
Solved! Go to Solution.
09-20-2017 02:17 PM
There may be multiple issues but the most obvious issue is about address translation. You do have a command to perform address translation, but there are several issues which prevent it from working.
ip nat inside source list nat-list interface GigabitEthernet8 overload
I do not see any access list named nat-list. I do not see any command on vlan 10 indentifying it as nat inside. I do not see any command on G8 identifying it as nat outside. Address these issues and let us know if the behavior changes.
I also note that your two static routes are redundant
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
ip route 0.0.0.0 0.0.0.0 192.168.10.1
The second one is better (assuming that the gateway is really at 192.168.10.1) and I suggest that you remove the first one.
HTH
Rick
09-20-2017 02:17 PM
There may be multiple issues but the most obvious issue is about address translation. You do have a command to perform address translation, but there are several issues which prevent it from working.
ip nat inside source list nat-list interface GigabitEthernet8 overload
I do not see any access list named nat-list. I do not see any command on vlan 10 indentifying it as nat inside. I do not see any command on G8 identifying it as nat outside. Address these issues and let us know if the behavior changes.
I also note that your two static routes are redundant
ip route 0.0.0.0 0.0.0.0 GigabitEthernet8
ip route 0.0.0.0 0.0.0.0 192.168.10.1
The second one is better (assuming that the gateway is really at 192.168.10.1) and I suggest that you remove the first one.
HTH
Rick
09-21-2017 08:19 AM
Thanks, that took care of the problem. I was lulled into thinking that the NAT took care of itself - why, I don't know. Steps taken:
1. Assigned nat inside and outside to the respective ports: Vlan10 and G0
2. Created ACL
3. Assigned ACL to Vlan10
Done
09-21-2017 08:26 AM
I am glad that my suggestions were helpful and that you now have it working. Thank you for marking this discussion as solved. This will help other readers in the forum to identify discussions which have helpful information.
HTH
Rick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide