2 edits |
HELP...Conguration not working...Cisco 1961Hi guys,
I know i know that this forum is so excellent and learnt many new things... however, digging around so much for the past weeks and constantly changing my configuration can't seem to work.. Here is my problem:
Simple home broadband setup 1)PC --> Cisco 2960s Switch --> Cisco 1961 Router --> Modem --> ISP 2)PAT used (ip nat translation does not seem to be translating) 3) PC can ping all way to Gi0/0 (ip nat outside) 4) PC cannot ping ISP gateway 5) 1961 can ping ISP gateway (Gi0/0 has successfully received outside-IP from ISP) 6) Vlan100 is my default/native vlan
So it seems that my PC can't get out of my router even with PAT configured over and over and over and over agian T.T
Last resorted to coming to post a topic and hoping receive some higher level technical help T.T
*I am CCNA~CCNP trained, my diploma trained us till CCNP @_@, didnt even know that until after i graduated haha*
Here is my configuration: CiscoRTR#sh run Building configuration...
Current configuration : 2770 bytes ! ! Last configuration change at 18:25:05 SG Wed Nov 23 2011 ! version 15.0 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname CiscoRTR ! boot-start-marker boot-end-marker ! enable secret 5 $1$iQCO$Ma0Q6V3NuFYTTOQj2/0b// enable password 7 011F0B1750020A03245E ! no aaa new-model ! ! ! clock timezone SG 8 ! no ipv6 cef no ip source-route ip cef ! ! ip dhcp excluded-address 172.20.100.1 172.20.100.254 ! ip dhcp pool MAINpool network 172.20.10.0 255.255.255.0 default-router 172.20.10.1 ! ip dhcp pool WIRELESSpool network 172.20.20.0 255.255.255.0 default-router 172.20.20.1 ! ip dhcp pool 123pool network 172.20.30.0 255.255.255.0 default-router 172.20.30.1 ! ip dhcp pool 456pool network 172.20.40.0 255.255.255.0 default-router 172.20.40.1 ! ip dhcp pool 789pool network 172.20.50.0 255.255.255.0 default-router 172.20.50.1 ! ! no ip domain lookup ip host CiscoSW 172.20.200.2 ! multilink bundle-name authenticated ! ! ! license udi pid CISCO1921/K9 ! ! ! redundancy ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 172.20.200.1 255.255.255.255 ! ! interface GigabitEthernet0/0 description Gateway Connection to WWW ip address dhcp ip nat outside ip virtual-reassembly duplex full speed auto ! ! interface GigabitEthernet0/1 description Internal Network no ip address ip nat inside ip virtual-reassembly duplex full speed auto ! ! interface GigabitEthernet0/1.10 description Main Network encapsulation dot1Q 10 ip address 172.20.10.1 255.255.255.0 ! interface GigabitEthernet0/1.20 description Wireless Public encapsulation dot1Q 20 ip address 172.20.20.1 255.255.255.0 ! interface GigabitEthernet0/1.30 description 123 VLAN encapsulation dot1Q 30 ip address 172.20.30.1 255.255.255.0 ! interface GigabitEthernet0/1.40 description 456 VLAN encapsulation dot1Q 40 ip address 172.20.40.1 255.255.255.0 ! interface GigabitEthernet0/1.50 description 789 VLAN encapsulation dot1Q 50 ip address 172.20.50.1 255.255.255.0 ! interface GigabitEthernet0/1.100 encapsulation dot1Q 100 native ip address 172.20.100.1 255.255.255.0 ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip nat inside source list 1 interface GigabitEthernet0/0 overload
! access-list 1 permit 172.20.10.0 0.0.0.255 access-list 1 permit 172.20.20.0 0.0.0.255 access-list 1 permit 172.20.30.0 0.0.0.255 access-list 1 permit 172.20.40.0 0.0.0.255 access-list 1 permit 172.20.50.0 0.0.0.255 ! ! ! ! ! ! control-plane ! ! ! line con 0 password 7 020A0948000F032D495C login line aux 0 line vty 0 2 password 7 075E736A1A5F115C47 login line vty 3 4 login ! scheduler allocate 20000 1000 end
CiscoRTR#sh ip nat translations ----damn weird, totally NO PAT o.O
CiscoRTR# |
|
|
Remove ip nat inside from gi 0/1 interface, and reapply it to all your sub interfaces and loopback 0.
$20 says that fixes your problem sil3ncer.
Regards |
|
|
wah?? all valid interfaces ah...hmm...
but it is suppose to work at the gi0/1 alone right?
and pardon me, whats the $20 thing ah ? > haha |
|
sil3ncer |
oh my goodness...cant believe it actually worked?
Wait...was I logically/technically wrong in my configurations in the 1st place? Or was it juz a "bug" in IOS? |
|
|
meta
Member
2011-Nov-25 3:53 pm
There is no hierarchical config with subinterfaces, they do not inherit settings from the physical interface. That behavior is completely normal. |
|
|
ahhh i understand...
Something alittle bit out of point here is regarding LACP port channel
Here is what i have on my cisco 2960s
interface GigabitEthernet1/0/21 switchport access vlan 789 switchport mode access channel-protocol lacp channel-group 1 mode active ! interface GigabitEthernet1/0/22 switchport access vlan 789 switchport mode access channel-protocol lacp channel-group 1 mode active
GigabitEthernet1/0/21 unassigned YES unset up up GigabitEthernet1/0/22 unassigned YES unset up up Port-channel1 unassigned YES unset up up
So everything seems ok, i can access the server (QNAP). They use dual-LAN ports for u noe...that is why LACP has to be configured..
The thing im puzzled is that, my this NAS does not show up in my PC's Network anymore, even though workgroup is the same I can only seem to reach it via NAS's IP...
So could it be i may missed out some configs? And the QNAP-finder software can no longer find my NAS --- could be due to vlans haha. My PC and NAS sit in 2 separate vlans (purposely configured to enhance security plus test out the vlan-routing) Another thing is, the NAS I have set to utilise 802.3ad as its load balancing algorithm, do i HAVE to do load balancing on my switch as well?
Any ideas? Just curious
*PS* Thanks u guys so much for help, did not know sub-int do not inherit configs from parent (other than no-shut command) haha |
|
cramer Premium Member join:2007-04-10 Raleigh, NC Westell 6100 Cisco PIX 501
|
to sil3ncer
Wait...was I logically/technically wrong in my configurations in the 1st place? Yes. Just a guess... your PC and NAS aren't in the same subnet. Windows browser announcements don't cross subnets. (not without a WINS server or a domain.) Even if both subnets are in the same layer 2 broadcast domain, windows will ignore the "foreign", non-native subnet announcements. |
|
your moderator at work
hidden : Spam
|
|
to cramer
Re: HELP...Conguration not working...Cisco 1961Agreed, why not put that networking knowledge to use though and capture the packets that your qnap-finder tool is actually sending to the network looking for a NAS and use that information to conclusively prove why its not working? |
|
|
to cramer
i see i see...yeah suspected so haha...thanks alot... > |
|
|
to sil3ncer
said by sil3ncer:Or was it juz a "bug" in IOS? Learned this in my first days of CCNA, and that was on 12.2 IOS I think, so not a bug at all, just an operational "feature." Best of luck with the NAS and LCAP. Regards |
|
your moderator at work
hidden : Spam
|