2013年11月19日星期二

Cisco 1941 Router Can't Connect to WAN

Cisco 1941 Router Can't Connect to WAN

1 I am converting our offices over to Cisco 1941 routers.  The total background of it was covered in this EE question: Configuring 1941 Router

Since then, I have confirmed that everything internally, works fine.  I can communicate with all the internal networks as was planned.  What is not working, is getting out to the internet.  I have taken a second 1941 and configured it with a striped down config, and can connect out to the internet fine.  I have also moved the WAN connection to int g0/0 from int g0/0/0, but that made no difference.  From the CLI, I can ping the gateway, but nothing else outside.

What am I missing or what do I have configured incorrectly?

I've attached the current running config.  Usernames/Passwords, and certain ip addresses have been replaced with xxxxxxxx or x.x.x.x.

Solution:
On first look at your ACL's you have subnet masks and not wildcard masks:

access-list 101 permit tcp any 0.0.0.0 255.255.255.0 established
access-list 102 permit tcp any 0.0.0.0 255.255.255.0 established
access-list 105 permit tcp any 0.0.0.0 255.255.255.0 established
etc.. etc...

if you want this to be ANY ANY you should have access-list XYZ permit tcp any 0.0.0.0 255.255.255.255 established, just checking through rest of config.

2 Ping 8.8.8.8 timed out, on both the router and a connected pc.
I just did some other ping tests.  As said before, I can ping the WAN gateway.  Can't ping a external domain name (doesn't get translated), can't ping an external domain ip, and can't ping the ISP DNS servers (which I confirmed correct).
guptasan26: if I remove those routes, will the 1941 automatically route the internal networks?

Solution:
No sure how current the config is that yo uposted but you have turned off routing with the
no ip routing.

Re-enable ip routing by entering ip routing from config mode and then you should be able to route correctly.

没有评论:

发表评论