cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
747
Views
0
Helpful
5
Replies

Cannot Access website on internal website

 

I was told to correct this issue i would need to make an entry on the router as follows

# ip tcp adjust-mss 1360

 

Any assistance would be appreciated

 

* see my router config below

-----------------------

 

router#sho run
Building configuration...


Current configuration : 1310 bytes
!
! Last configuration change at 16:46:41 UTC Wed Feb 24 2021
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
dot11 syslog
ip source-route
!
!
ip cef
!
ip dhcp pool Mainpool
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
!
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO2821 sn FTX1041A35R
!
redundancy
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
description Outside Network
ip address dhcp
ip tcp adjust-mss 1360
duplex auto
speed auto
!
interface GigabitEthernet0/1
description Inside Network
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 999
duplex auto
speed auto
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
access-list 1 permit any
!
!
!
!
!
!
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
transport input all
!
scheduler allocate 20000 1000
end

router#

5 Replies 5

after making ip tcp adjust-mss 1360 

i still cannot access internal websites

 

You are not able to access internal website from external ?

you do not have any port-forward or static NAT entry here to serve the request,

 

what is the website IP address here ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

I am a newbie and was trying to figure out why i cannot access to the internet

 

I am a little confused as to the exact setting for updating the Route setting

i entered:

 

:# ip route 0.0.0.0 0.0.0.0 192.168.1.1

but this was fruitless

 

Any assistance here would be welcomed

The Router config file is above.

 

I am not that fluent as to how to achieve this using the Route command.

 

Thank you.

 

 

 

 

 

 

 

balaji.bandi
Hall of Fame
Hall of Fame

Who has advised this MTU ( Service provider) - before we tweak MTU, let's try the below config - BOLD was the change suggested.

 

Test and advise.

 

Current configuration : 1310 bytes
!
! Last configuration change at 16:46:41 UTC Wed Feb 24 2021
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
dot11 syslog
ip source-route
!
!
ip cef
!

!

 ip dhcp excluded-address 192.168.2.1

!


ip dhcp pool Mainpool
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
!
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO2821 sn FTX1041A35R
!
redundancy
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
description Outside Network
ip address dhcp
no ip tcp adjust-mss 1360
duplex auto
speed auto
!
interface GigabitEthernet0/1
description Inside Network
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
no ip tcp adjust-mss 999
duplex auto
speed auto
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
no ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 dhcp
!
no access-list 1 permit any
access-list 1 permit 192.168.2.0 0.0.0.255
!
!
!
!
!
!
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
transport input all
!
scheduler allocate 20000 1000
end

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

sandradorothy
Level 1
Level 1

i have the same issue.Even after implementing 'ip tcp adjust-mss 1360' on my network, accessing internal websites remains a challenge on my setup, as observed on my website, eyebrowsbar.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: