Unable to acces internet from cisco 850 router 1

[matthias7]

Hi

I have configured NAT inside in vlan 1 and Nat outside on interface fa4

Fa0 have ip address range 192.168.1.1 255.255.255.0 and Fe4(192.168.233.xxx) uses dhcp to obtain ip address

how dhcp pool is associated with Fe4 i do not understand but it works ...

Problem ...

I can from inside the router ping external like ping google.com and all the interfaces and so on as well other known ip addresses( i guess the DNS is not an problem)...

However from an laptop connected to fe0 it gets ip 192.168.1.2, 255.255.255.0 and gateway 192.168.1.1 and DNS 192.168.1.1


but i get when issuing ping to an know ip i get destination host unreachable ... the same in cisco when issuing debug ip icmp saying ... host unreachable sent to 192.168.1.1(my fe0) ...


do i need to define access list ??
does my NAT works because when i issue "show ip nat tra"
it shows me nothing, it is empty ...

Matthias

 

[unclerico]

post a scrubbed config

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[matthias7]

Hi


I guess it have to do with NAT table

************************
router1#show running-config

Building configuration...



Current configuration : 1153 bytes

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname router1

!

boot-start-marker

boot-end-marker

!

enable secret 5 $1$XP68$I8sR2Te0C8H46n1qVOOFb.

!

no aaa new-model

!

resource policy

!

ip subnet-zero

no ip dhcp use vrf connected

!

ip dhcp pool mat
network 192.168.1.0 255.255.255.0

domain-name mat

dns-server 192.168.1.1

default-router 192.168.1.1

!

!

ip cef

!

!

interface FastEthernet0

!

interface FastEthernet1

!

interface FastEthernet2

!

interface FastEthernet3

!

interface FastEthernet4

ip address dhcp

ip nat outside

ip virtual-reassembly

duplex auto

speed auto

!

interface Vlan1

ip address 192.168.1.1 255.255.255.0

ip nat inside

ip virtual-reassembly

!

ip classless

!

no ip http server

no ip http secure-server

ip nat inside source list 101 interface FastEthernet0 overload

!

access-list 101 permit ip any any

!

control-plane

!

!

line con 0

password 7 020B054F1F0E06205F

login

no modem enable

line aux 0

line vty 0

password 7 141A131F180C232A37

login

line vty 1 4

login

!

scheduler max-task-time 5000

end



router1#
***********************

Mat

 

[imbadatthis]

FastEthernet0 should be FastEthernet4 in your nat statement (thats what you have labeled as out interface)

since you aren't using rotary nat functions, I would just recommend changing the ACL101 to ACL1 with

access-list 1 permit 192.168.1.0 0.0.0.255

so it should look like:

ip nat inside source list 1 interface FastEthernet4 overload

!

access-list 1 permit 192.168.1.0 0.0.0.255





We must go always forward, not backward
always up, not down and always twirling twirling towards infinity.

 

[unclerico]

check your nat statement

ip nat inside source list 101 interface [b]FastEthernet0[/b] overload

it should be f4

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[unclerico]

my bad, you got this...

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[matthias7]

Hi

I found it ! ! ! it was in ip nat inside and i hade by misstake pot my input interface and no the outside interface however my dns service does not seem to work ... but ping at least ...

Mat

 

[matthias7]

Hi


Thanks to everybody that was the answer but the next one i need to look into is why ping google.com does not give
me any result but in the router is does work ...

Mat

 

[unclerico]

ip dns server
ip name-server 1.2.3.4 5.6.7.8

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)