unable to ping internet sites Via Wireless Router

mahesh18 · ‎12-22-2016

Hi Everyone,

Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0              unassigned      YES unset up                    down
FastEthernet1              unassigned      YES unset up                    down
FastEthernet2              unassigned      YES unset up                    down
FastEthernet3              unassigned      YES unset up                    down
FastEthernet4              68.145.141.25   YES DHCP   up                    up
NVI0                       unassigned      YES unset administratively down down
Vlan1                      10.20.30.1      YES NVRAM up                    up
Wlan-GigabitEthernet0      unassigned      YES unset up                    up
wlan-ap0                   2.2.2.2         YES NVRAM up                    up

I can ping all the sites from Router but not from PC connected to Wifi Router.

ping 4.2.2.2 source 10.20.30.2

% Invalid source address- IP address not on any of our up interfaces

ping 4.2.2.2 source 10.20.30.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 10.20.30.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 60/60/64 ms

I have attached the Cisco 881w config.

Regards

MAhesh

Reza Sharifi · ‎12-22-2016

Hi Mahesh,

Looking at your output and config, you are sourcing the ping from10.20.30.2 but your router does not have an interface with that IP. The ping works correctly when you source it from 10.20.30.1 and that is because the router has on interface with this IP.

What is the subnet for wireless?

I see below in your config. What is that for?

interface wlan-ap0
 ip address 2.2.2.2 255.255.255.255

HTH

mahesh18 · ‎12-22-2016

Hi Reza,

I try from source IP 10.20.30.101 same thing.

Subnet for wifi is 10.20.30.0/24

it has dhcp pool on router.

Regards

Mahesh

Reza Sharifi · ‎12-22-2016

Hi Mahesh,

If you are pinging from the router, you can only source it from 10.20.30.1, because that is the only IP from that segment on the router. 10.20.30.101 is not on the router. From you config

interface Vlan1
 ip address 10.20.30.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in

HTH

mahesh18 · ‎12-22-2016

This one is router with built in AP.

Reza Sharifi · ‎12-22-2016

Ok, but there is no interface with the other IPs you are sourcing from.

Reza

mahesh18 · ‎12-22-2016

I was reading on internet that we can assign any IP to

interface wlan-ap0 ip address 2.2.2.2 255.255.255.255

But seems it needs IP in the subnet range 10.20.30.x

As this is the IP for AP management.

I will try to change the AP IP to 10.20.30.3/24 and then test it.

Regards

MAhesh

Reza Sharifi · ‎12-22-2016

That probably will not work because you would be assigning the same subnet to 2 different interfaces and routers will not let you do that. How about a new subnet for wireless interface like 10.20.40.0/24

HTH

mahesh18 · ‎12-22-2016

tested with earlier 10.20.30.5 same thing.

If I use subnet 10.20.40.0/24 but dhcp pool in router is for 10.20.30.0?

Reza Sharifi · ‎12-22-2016

You would need to create a second scope for 10.20.40.0 to server wireless.

You also need to add

ip nat inside

and also add the subnet to the access list for NAT

permit ip 10.20.40.0 0.0.0.255 any log

ip dhcp excluded-address 10.20.40.1 10.20.30.99
!
ip dhcp pool myDHCPpoo2
 import all
 network 10.20.40.0 255.255.255.0
 default-router 10.20.40.1 
 dns-server 64.59.135.133 
 lease 10

HTH

mahesh18 · ‎12-23-2016

Hi Reza,

I put the new config with management and user wifi vlan

still same thing.

HEre is config

Building configuration...

Current configuration : 4180 bytes
!
! Last configuration change at 07:59:30 MST Fri Dec 23 2016
! NVRAM config last updated at 19:04:01 MST Thu Dec 22 2016 by mintoo18
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 881w
!
boot-start-marker
boot-end-marker
!
!

!
no aaa new-model
clock timezone MST -7 0
clock summer-time MST recurring
service-module wlan-ap 0 bootimage autonomous
!
crypto pki trustpoint TP-self-signed-2340310586
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2340310586
revocation-check none
rsakeypair TP-self-signed-2340310586
!
!
crypto pki certificate chain TP-self-signed-2340310586
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32333430 33313035 3836301E 170D3136 31323232 31333331
32365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 33343033
31303538 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A6F0 15961909 8244145B 3F37E210 5BF87693 22E0B59D 883A89EF EA453E76
2442DAC7 1309607E B4626CC7 74D882EB B608D0F1 D84C3B01 A47344CD C0B680EB
4F0761C3 6868DAB2 5F6B25A0 91395557 970DD494 AD7B0858 FABF0D4D 05A515B7
DD515865 599CAEE7 653ABF16 6CC38495 D67C3BA6 80FB2094 229EF090 F5C7F26D
0BB50203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 145C1C79 627C8A03 B886ADF7 46551ECC 534B3A50 D6301D06
03551D0E 04160414 5C1C7962 7C8A03B8 86ADF746 551ECC53 4B3A50D6 300D0609
2A864886 F70D0101 05050003 8181000B 683143BE B48D80AC 8BFEC6D4 B00297FE
3299922D BF66A2F3 C3F1FC23 2858B941 3769B966 3F622D7A 6C72DF98 AE9CCC1C
971894D9 A8E77C3B 24C6678D 201DFACA FED67694 CC15DA7F ABE8ABE1 F1786524
9E53A40D 58CAC6BE D564C6A0 3938EEFF F804A0D4 3FA70880 E58A43F0 B7FF003C
9630F0F5 F8056442 173D2C19 393D55
quit
!
!
!
!
!
!
!
!

!
ip dhcp excluded-address 10.1.10.254
!
ip dhcp pool vlan10-wifi
network 10.1.10.0 255.255.255.0
default-router 10.1.10.254
dns-server 64.59.135.133
lease 10
!
!
!
ip domain name mahesh.com
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
license udi pid C881W-A-K9 sn FTX1724839K
!
!
!
no spanning-tree vlan 1

!
!
!
!
!
ip ssh time-out 60
ip ssh version 2
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
ip address dhcp
ip access-group NAT_ACL out
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
switchport mode trunk
no ip address
!
interface wlan-ap0
ip address 2.2.2.2 255.255.255.255
!
interface Vlan1
ip address 10.1.1.254 255.255.255.0
ip virtual-reassembly in
!
interface Vlan10
ip address 10.1.10.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
no ip http server
ip http secure-server
!
!
ip nat inside source list NAT_ACL interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 68.145.140.1
ip route 0.0.0.0 0.0.0.0 dhcp
!
ip access-list extended NAT_ACL
permit ip 10.1.10.0 0.0.0.255 any log
!
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
!
line con 0
privilege level 15
login local
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
stopbits 1
line vty 0 4
privilege level 15
login local
transport input ssh
transport output telnet ssh
line vty 5 15
privilege level 15
login local
transport input ssh
transport output telnet ssh
!
scheduler allocate 20000 1000
ntp server 128.100.56.135
!
!
end

Where 10.1.10.2 was my PC IP

I was unable at add the wireshark capture

but it shows source 10.1.10.254 to destination 10.1.10.2 destination unreachable

communication administratively filtered

Reza Sharifi · ‎12-23-2016

Hi Mahesh,

Are you following this guide to configure the wireless?

Are you able to logon to ap0 interface?

Have you tried using a static IP?

http://www.cisco.com/c/en/us/td/docs/routers/access/800/software/configuration/guide/SCG800Guide/SCG800_Guide_BookMap_chapter_01001.html#wp1061918

HTH

mahesh18 · ‎12-23-2016

Hi Reza,

I followed this url now

https://networklessons.com/cisco/cisco-1941w-wireless-configuration-example/

I do not think static IP will make any difference.

Yes I can log onto AP interface.

Regards

MAhesh

Reza Sharifi · ‎12-23-2016

Ok, that is good link too.

Is vlan 10 operational?

"sh int vlan 10"

or

sh ip int brie vlan10

Also, on the AP side, have you configured the correct interfaces?

Thanks,

Reza

mahesh18 · ‎12-23-2016

Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0              unassigned      YES unset up                    down
FastEthernet1              unassigned      YES unset up                    down
FastEthernet2              unassigned      YES unset up                    down
FastEthernet3              unassigned      YES unset up                    down
FastEthernet4              68.145.141.25   YES DHCP   up                    up
NVI0                       unassigned      YES unset administratively down down
Vlan1                      10.1.1.254      YES manual up                    up
Vlan10                     10.1.10.254     YES manual up                    up
Wlan-GigabitEthernet0      unassigned      YES unset up                    up
wlan-ap0                   2.2.2.2         YES manual up                    up