1721 router and internet problems

[mattclarke]

i have a 1721 and all the client/workstations can not access the internet. the router can ping and trace route items on the internet, but workstations cannot. below is my running config.

Building configuration...

Current configuration : 1019 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname burnaby
!
logging queue-limit 100
enable secret 5 $1$FT/r$hBxNJHCadvefRNbVrAjqS.
enable password lbiwest
!
memory-size iomem 20
ip subnet-zero
no ip routing
!
!
ip domain lookup source-interface Ethernet0
!
ip dhcp pool Burnaby
!
ip dhcp-server 192.168.1.2
!
!
!
!
interface Ethernet0
ip address 24.207.6.227 255.255.255.0
ip access-group 110 in
ip access-group 110 out
no ip route-cache
half-duplex
no cdp enable
!
interface FastEthernet0
ip address 192.168.1.2 255.255.255.0
ip broadcast-address 192.168.1.255
no ip route-cache
speed auto
full-duplex
no cdp enable
!
ip default-gateway 24.207.6.1
ip classless
no ip http server
ip http access-class 99
!
!
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 110 permit ip any any
no cdp run
snmp-server community public RO
snmp-server enable traps tty
!
line con 0
line aux 0
line vty 0 4
password ***********
login
!
end

any advice? we are using a dsl type service.

 

[bierhunter]

I don't see any NAT config there. You'll need to set that up to allow your internal private addresses translate to your public one.

Here's a link to a sample 1700 NAT config on Cisco's site.

http://www.cisco.com/en/US/products...tion_guide_chapter09186a008007cd02.html#63455

BierHunter
CNE, MCSE, CCNP

 

[floryklf]

One glaring issue is the router's configuration statement "no ip routing". Start there

 

[bierhunter]

One glaring issue is the router's configuration statement "no ip routing". Start there"

AH! I completely missed that one.

BierHunter
CNE, MCSE, CCNP

 

[mattclarke]

hi guys,

i will look into the "no ip routing".

one thing i wanted to ask was, the NAT issue. Well i had set up a NAT for one of the workstations, and i was still left with the same result.

when looking at the configuration of my other router, many clients do not have a NAT associated with their internal IP, and can all access the internet fine.

thanks though,

 

[Parcival21]

do these clients have adresses from a private IP space or are their addresses public. Are you maybe using a proxy server with a public IP address. Because with a private address you should not be able to access the internet in my opinion (I might be wrong though ).
bye, busche

 

[mattclarke]

Parcival21,

these clients are using private IP addresses. 192.168.1.x/255.255.255.0

what i think i will do is, purge everything that is configured, and start over.

if anyone can guide me through the best/easiest way to purge all the info i have configured...and a utility that helps configure cisco routers, that would be great.

thanks for the assistance,

matt

 

[bierhunter]

You'll definitely need the 'ip routing' command. You'll also need to setup NAT on the router. Here's some sample commands that may help.

The Access-list 10 that you have is good. Keep that for the NAT.

conf t
!
! Enable IP routing
ip routing
!
! Set int E0 as outside NAT interface
interface e0
ip nat outside
!
! Set int FA0 as inside NAT interface
interface fa0
ip nat inside
!
! Specify what internal addresses are allowed to translate outbound
access-list 10 permit 192.168.1.0 0.0.0.255
!
! Specify what IP address/interface the internal addresses are supposed to translate to
ip nat inside source list 10 interface Ethernet0 overload
!
end


I'm doing this from memory, so I hope I got everything. I think that should get you going. Hope this helps.

BierHunter
CNE, MCSE, CCNP