cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
984
Views
0
Helpful
5
Replies

Cannot Access website on internal website

 

I was told to correct this issue i would need to make an entry on the router as follows

# ip tcp adjust-mss 1360

 

Any assistance would be appreciated

 

* see my router config below

-----------------------

 

router#sho run
Building configuration...


Current configuration : 1310 bytes
!
! Last configuration change at 16:46:41 UTC Wed Feb 24 2021
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
dot11 syslog
ip source-route
!
!
ip cef
!
ip dhcp pool Mainpool
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
!
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO2821 sn FTX1041A35R
!
redundancy
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
description Outside Network
ip address dhcp
ip tcp adjust-mss 1360
duplex auto
speed auto
!
interface GigabitEthernet0/1
description Inside Network
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 999
duplex auto
speed auto
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
access-list 1 permit any
!
!
!
!
!
!
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
transport input all
!
scheduler allocate 20000 1000
end

router#

5 Replies 5

after making ip tcp adjust-mss 1360 

i still cannot access internal websites

 

You are not able to access internal website from external ?

you do not have any port-forward or static NAT entry here to serve the request,

 

what is the website IP address here ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

I am a newbie and was trying to figure out why i cannot access to the internet

 

I am a little confused as to the exact setting for updating the Route setting

i entered:

 

:# ip route 0.0.0.0 0.0.0.0 192.168.1.1

but this was fruitless

 

Any assistance here would be welcomed

The Router config file is above.

 

I am not that fluent as to how to achieve this using the Route command.

 

Thank you.

 

 

 

 

 

 

 

balaji.bandi
Hall of Fame
Hall of Fame

Who has advised this MTU ( Service provider) - before we tweak MTU, let's try the below config - BOLD was the change suggested.

 

Test and advise.

 

Current configuration : 1310 bytes
!
! Last configuration change at 16:46:41 UTC Wed Feb 24 2021
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
dot11 syslog
ip source-route
!
!
ip cef
!

!

 ip dhcp excluded-address 192.168.2.1

!


ip dhcp pool Mainpool
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
!
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO2821 sn FTX1041A35R
!
redundancy
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
description Outside Network
ip address dhcp
no ip tcp adjust-mss 1360
duplex auto
speed auto
!
interface GigabitEthernet0/1
description Inside Network
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
no ip tcp adjust-mss 999
duplex auto
speed auto
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
no ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 dhcp
!
no access-list 1 permit any
access-list 1 permit 192.168.2.0 0.0.0.255
!
!
!
!
!
!
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
transport input all
!
scheduler allocate 20000 1000
end

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

sandradorothy
Level 1
Level 1

i have the same issue.Even after implementing 'ip tcp adjust-mss 1360' on my network, accessing internal websites remains a challenge on my setup, as observed on my website, eyebrowsbar.