2013年7月30日星期二

Cisco 871w cannot ping outside WAN

Question:

Hello, I have Cisco 3560 Price a cisco 871w router that I'm trying to incorporate into an existing network. I have FastEthernet4 (WAN port) plugged into an ISP device, which I don't have access to. I have the address set to use dhcp, which is successfully recognized and I see that the interface gets a valid ip address that I can ping with other computers on the same network.

Problems:
I am logged into the router via the serial port and I cannot ping websites on the internet. I am able to ping sites that are hosted inside the WAN, but when I try "google.com" for instance, I see it sending out packets, but none are received. It resolves the hostname from the local DNS server, but there are no packets received.

Configuration:
I'm really new at this, so I was wondering if you guys could take a look at the commands that I type into the console to set up the router. I'm missing a lot of stuff. This is what I've been able to piece together using google and the software manuals:

enable
config t

hostname [hostname]

interface FastEthernet 4
ip address dhcp
ip nat outside
no shutdown

interface loopback 0
ip address 192.168.0.1 255.255.255.248
no shutdown

interface Vlan 1
ip dhcp pool vlan1
network 192.168.1.0 255.255.255.0
domain-name [domain]
default-router 192.168.0.1
dns-server 10.195.57.1

ip address 192.168.1.1 255.255.255.0
ip helper-address 10.195.57.2
ip virtual-reassembly
ip nat inside
no shutdown

interface FastEthernet 0
switchport access vlan 1
no shutdown

interface FastEthernet 1
switchport access vlan 1
no shutdown

interface FastEthernet 2
switchport access vlan 1
no shutdown

interface FastEthernet 3
switchport access vlan 1
no shutdown

interface FastEthernet 4
switchport access vlan 1
no shutdown

ip nat inside source list 100 interface FastEthernet4 overload
access-list 100 permit ip 192.168.1.1 0.0.0.255 any

Thank you very much for your help!

Answer:

I see several issues. First I do not see any default route configured. Probably it should be something like
ip route 0.0.0.0 0.0.0.0 dhcp

Also I believe that there is a problem in the DHCP configuration. It has the default route as 192.168.0.1. But the default route needs to be in the same subnet as the client addresses. So the default router should probably be 192.168.1.1.

Also the address translation is using an extended access list. But I do not see anything that justifies the extended list. I suggest that it would be better to use a standard access list like this
access-list 1 permit 192.168.1.0 0.0.0.255

ip nat inside source list 100 interface FastEthernet4 overload

For more Cisco Switch news about Price ans Specification, you can click here.

没有评论:

发表评论