2 edits | HELP...Conguration not working...Cisco 1961 Hi guys,
I know i know that this forum is so excellent and learnt many new things...
however, digging around so much for the past weeks and constantly changing my configuration can't seem to work..
Here is my problem:
Simple home broadband setup
1)PC --> Cisco 2960s Switch --> Cisco 1961 Router --> Modem --> ISP
2)PAT used (ip nat translation does not seem to be translating)
3) PC can ping all way to Gi0/0 (ip nat outside)
4) PC cannot ping ISP gateway
5) 1961 can ping ISP gateway (Gi0/0 has successfully received outside-IP from ISP)
6) Vlan100 is my default/native vlan
So it seems that my PC can't get out of my router even with PAT configured over and over and over and over agian T.T
Last resorted to coming to post a topic and hoping receive some higher level technical help T.T
*I am CCNA~CCNP trained, my diploma trained us till CCNP @_@, didnt even know that until after i graduated haha*
Here is my configuration:
CiscoRTR#sh run
Building configuration...
Current configuration : 2770 bytes
!
! Last configuration change at 18:25:05 SG Wed Nov 23 2011
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname CiscoRTR
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$iQCO$Ma0Q6V3NuFYTTOQj2/0b//
enable password 7 011F0B1750020A03245E
!
no aaa new-model
!
!
!
clock timezone SG 8
!
no ipv6 cef
no ip source-route
ip cef
!
!
ip dhcp excluded-address 172.20.100.1 172.20.100.254
!
ip dhcp pool MAINpool
network 172.20.10.0 255.255.255.0
default-router 172.20.10.1
!
ip dhcp pool WIRELESSpool
network 172.20.20.0 255.255.255.0
default-router 172.20.20.1
!
ip dhcp pool 123pool
network 172.20.30.0 255.255.255.0
default-router 172.20.30.1
!
ip dhcp pool 456pool
network 172.20.40.0 255.255.255.0
default-router 172.20.40.1
!
ip dhcp pool 789pool
network 172.20.50.0 255.255.255.0
default-router 172.20.50.1
!
!
no ip domain lookup
ip host CiscoSW 172.20.200.2
!
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1921/K9
!
!
!
redundancy
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 172.20.200.1 255.255.255.255
!
!
interface GigabitEthernet0/0
description Gateway Connection to WWW
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex full
speed auto
!
!
interface GigabitEthernet0/1
description Internal Network
no ip address
ip nat inside
ip virtual-reassembly
duplex full
speed auto
!
!
interface GigabitEthernet0/1.10
description Main Network
encapsulation dot1Q 10
ip address 172.20.10.1 255.255.255.0
!
interface GigabitEthernet0/1.20
description Wireless Public
encapsulation dot1Q 20
ip address 172.20.20.1 255.255.255.0
!
interface GigabitEthernet0/1.30
description 123 VLAN
encapsulation dot1Q 30
ip address 172.20.30.1 255.255.255.0
!
interface GigabitEthernet0/1.40
description 456 VLAN
encapsulation dot1Q 40
ip address 172.20.40.1 255.255.255.0
!
interface GigabitEthernet0/1.50
description 789 VLAN
encapsulation dot1Q 50
ip address 172.20.50.1 255.255.255.0
!
interface GigabitEthernet0/1.100
encapsulation dot1Q 100 native
ip address 172.20.100.1 255.255.255.0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
!
access-list 1 permit 172.20.10.0 0.0.0.255
access-list 1 permit 172.20.20.0 0.0.0.255
access-list 1 permit 172.20.30.0 0.0.0.255
access-list 1 permit 172.20.40.0 0.0.0.255
access-list 1 permit 172.20.50.0 0.0.0.255
!
!
!
!
!
!
control-plane
!
!
!
line con 0
password 7 020A0948000F032D495C
login
line aux 0
line vty 0 2
password 7 075E736A1A5F115C47
login
line vty 3 4
login
!
scheduler allocate 20000 1000
end
CiscoRTR#sh ip nat translations ----damn weird, totally NO PAT o.O
CiscoRTR# |
|
| Remove ip nat inside from gi 0/1 interface, and reapply it to all
your sub interfaces and loopback 0.
$20 says that fixes your problem sil3ncer.
Regards |
|
|
|
| wah??
all valid interfaces ah...hmm...
but it is suppose to work at the gi0/1 alone right?
and pardon me, whats the $20 thing ah ? > haha |
|
| oh my goodness...cant believe it actually worked?
Wait...was I logically/technically wrong in my configurations in the 1st place? Or was it juz a "bug" in IOS? |
|
nosx
join:2004-12-27
00000
kudos:5 | There is no hierarchical config with subinterfaces, they do not inherit settings from the physical interface. That behavior is completely normal. |
|
| ahhh i understand...
Something alittle bit out of point here is regarding LACP port channel
Here is what i have on my cisco 2960s
interface GigabitEthernet1/0/21
switchport access vlan 789
switchport mode access
channel-protocol lacp
channel-group 1 mode active
!
interface GigabitEthernet1/0/22
switchport access vlan 789
switchport mode access
channel-protocol lacp
channel-group 1 mode active
GigabitEthernet1/0/21 unassigned YES unset up up
GigabitEthernet1/0/22 unassigned YES unset up up
Port-channel1 unassigned YES unset up up
So everything seems ok, i can access the server (QNAP). They use dual-LAN ports for u noe...that is why LACP has to be configured..
The thing im puzzled is that, my this NAS does not show up in my PC's Network anymore, even though workgroup is the same
I can only seem to reach it via NAS's IP...
So could it be i may missed out some configs?
And the QNAP-finder software can no longer find my NAS --- could be due to vlans haha.
My PC and NAS sit in 2 separate vlans (purposely configured to enhance security plus test out the vlan-routing)
Another thing is, the NAS I have set to utilise 802.3ad as its load balancing algorithm, do i HAVE to do load balancing on my switch as well?
Any ideas? Just curious
*PS*
Thanks u guys so much for help, did not know sub-int do not inherit configs from parent (other than no-shut command) haha |
|
cramer
join:2007-04-10
Raleigh, NC
kudos:5 Reviews:
 ·AT&T Southeast
| reply to sil3ncer
Wait...was I logically/technically wrong in my configurations in the 1st place?
Just a guess... your PC and NAS aren't in the same subnet. Windows browser announcements don't cross subnets. (not without a WINS server or a domain.) Even if both subnets are in the same layer 2 broadcast domain, windows will ignore the "foreign", non-native subnet announcements. |
|
nosx
join:2004-12-27
00000
kudos:5 | reply to cramer
Re: HELP...Conguration not working...Cisco 1961 Agreed, why not put that networking knowledge to use though and capture the packets that your qnap-finder tool is actually sending to the network looking for a NAS and use that information to conclusively prove why its not working? |
|
| reply to cramer
i see i see...yeah suspected so haha...thanks alot... > |
|
| reply to sil3ncer
said by sil3ncer:Or was it juz a "bug" in IOS? Learned this in my first days of CCNA, and that was on 12.2 IOS I think, so not a bug
at all, just an operational "feature." 
Best of luck with the NAS and LCAP.
Regards |
|
