Tuesday, July 31, 2018

NAT issues with VLAN on a Cisco 2951

Cross post from /r/homelab

Good Evening,

Im working on setting up a Cisco 2951 in my home lab with VLANs. As far as I can tell all the vlaning is correct and im able to ping the sub interfaces from all the vlans, im also able to ping other hosts in each vlan from each other (i can ping 172.16.20.1 from 172.16.10.100). Im working on creating that NAT translation now and im not able to ping out to the internet. From my laptop (172.16.10.100) i can ping 172.16.10.1 (the routers internal interface) and 192.168.1.2 (the routers external interface) but i cant ping 192.168.1.1 (the next router up before the internet). From the router console I can ping 192.168.1.1 and out to the internet (8.8.8.8). Im not sure what im doing wrong, ive attached the running config.

Any help is appreciated!

Current configuration : 3166 bytes

!

! Last configuration change at 20:12:54 EDT Tue Jul 31 2018 by console

! NVRAM config last updated at 19:04:24 EDT Tue Jul 31 2018 by console

! NVRAM config last updated at 19:04:24 EDT Tue Jul 31 2018 by console

version 15.2

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname CL-CORE-RT01

!

boot-start-marker

boot-end-marker

!

!

card type e1 0 0

enable secret 5

!

no aaa new-model

clock timezone EST -5 0

clock summer-time EDT recurring

no network-clock-participate wic 0

!

no ipv6 cef

!

!

!

!

!

ip name-server 8.8.8.8

ip name-server 8.8.4.4

ip cef

multilink bundle-name authenticated

!

!

!

!

!

crypto pki token default removal timeout 0

!

!

voice-card 0

!

!

!

!

!

!

!

!

license udi pid CISCO2951/K9 sn FTX1508A0FS

hw-module pvdm 0/0

!

hw-module pvdm 0/1

!

!

!

!

redundancy

!

!

controller E1 0/0/0

!

controller E1 0/0/1

!

ip ssh version 2

!

!

!

!

interface Embedded-Service-Engine0/0

no ip address

shutdown

!

interface GigabitEthernet0/0

description WAN

ip address 192.168.1.2 255.255.255.0

ip nat outside

ip virtual-reassembly in

duplex auto

speed auto

!

interface GigabitEthernet0/1

description LAN

no ip address

duplex auto

speed auto

!

interface GigabitEthernet0/1.10

encapsulation dot1Q 10

ip address 172.16.10.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface GigabitEthernet0/1.20

encapsulation dot1Q 20

ip address 172.16.20.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface GigabitEthernet0/1.30

encapsulation dot1Q 30

ip address 172.16.30.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface GigabitEthernet0/1.40

encapsulation dot1Q 40

ip address 172.16.40.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface GigabitEthernet0/1.100

encapsulation dot1Q 100

ip address 172.16.100.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface GigabitEthernet0/2

no ip address

shutdown

duplex auto

speed auto

!

ip default-gateway 192.168.1.1

ip forward-protocol nd

!

no ip http server

no ip http secure-server

!

ip route 0.0.0.0 0.0.0.0 192.168.1.1

ip nat inside source list 10 interface GigabitEthernet0/0 overload

ip nat inside source list 20 interface GigabitEthernet0/0 overload

ip nat inside source list 30 interface GigabitEthernet0/0 overload

ip nat inside source list 40 interface GigabitEthernet0/0 overload

!

access-list 10 permit 172.16.10.0 0.0.0.255

access-list 20 permit 172.16.20.0 0.0.0.255

access-list 30 permit 172.16.30.0 0.0.0.255

access-list 40 permit 172.16.40.0 0.0.0.255

!

nls resp-timeout 1

cpd cr-id 1

!

!

control-plane

!

!

!

!

!

!

!

mgcp profile default

!

!

!

!

!

gatekeeper

shutdown

!

!

!

line con 0

logging synchronous

login local

line aux 0

logging synchronous

login local

line 2

no activation-character

no exec

transport preferred none

transport input all

transport output pad telnet rlogin lapb-ta mop udptn v120 ssh

stopbits 1

line vty 0 4

logging synchronous

login local

transport input ssh

transport output ssh

line vty 5 858

logging synchronous

login local

transport input ssh

transport output ssh

!

scheduler allocate 20000 1000

ntp update-calendar

ntp server time-b-g.nist.gov

!

end



No comments:

Post a Comment