01-28-2021 03:17 AM - edited 07-05-2021 01:06 PM
I have a test network I am using for my certification. I have a simple configuration. I have a domain controller and the 2504 WLC, is connected to the domain. I have a cisco 1142n access point running in light weight mode. The access point is connected to the Cisco 2504 WLC. The access point does join the controller, and the access point is getting a valid IP address from DHCP on the domain controller. When I try to connect to the wlan, the device does connect to the wlan but it does not connect to the internet. The device says, "connected but no internet".
I have run some tests. This is what I have found:
The WLC can ping the svi of the vlan it's on 192.168.5.2
The WLC can ping the gateway of the vlan it's on 192.168.5.1
The WLC can ping the gateway of the network it's on 192.168.1.1
The WLC can ping google 8.8.8.8
The 1142n access point can ping the IP address of itself(issued by DHCP) 192.168.20.12
The 1142n access point can ping the IP address of the svi it's on 192.168.20.2
The 1142n access point can ping the gateway IP of the vlan it's on 192.168.20.1
The 1142n access point can ping the IP address of the WLC 192.168.5.4
The 1142n access point can not ping the gateway IP address of the network 192.168.1.1(to the internet)
The 1142n access point can not ping google 8.8.8.8
I think The access point is not passing through the 2504 WLC to get to the internet. Can someone help me trouble shoot this problem. What other things can I check to fix this? Any help will be appreciated.
Thank you.
01-28-2021 03:59 AM
are clients getting write IP, Gateway and DNS server IP address ?
01-28-2021 04:09 AM - edited 01-28-2021 04:16 AM
Yes, the laptop that I am trying to connect to is getting a valid wlan IP address from DHCP:
192.168.20.20. Also gateway IP and DNS is correct.
But I can not ping 192.168.1.1 or 8.8.8.8 from the laptop
This is from router:
ip nat inside source list 101 interface GigabitEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
!
!
access-list 101 permit ip 192.168.6.0 0.0.0.255 any
access-list 101 permit ip 192.168.20.0 0.0.0.255 any
access-list 101 permit ip 192.168.30.0 0.0.0.255 any
access-list 101 permit ip 192.168.13.0 0.0.0.255 any
access-list 101 permit ip 172.16.10.0 0.0.0.3 any
access-list 101 permit ip 192.168.80.0 0.0.0.255 any
access-list 101 permit ip 0.0.0.0 255.255.255.0 any
access-list 101 permit ip 192.168.5.0 0.0.0.255 any
01-28-2021 04:18 AM
01-28-2021 04:26 AM
Yes, the inter vlan routing is working, I can ping all other vlans. I am using a Cisco 2911 router with an SM-ES2_24-P switch module. The NAT is correct. When I plug this laptop into wired network, all is working with internet. Any idea's ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide