Network / Routing Issue Help!!!!!!!!!

Gang,

I have this issue with accessing the internet I would like some help with.

Currently I have my 2621 configured to access the internet here is a break

off hardware and associated addresses

Workstation---switch2900---2621---ISP

FA0/0= ip address via dhcp from ISP 68.2.112.85

FA0/1=172.16.1.100 /24

Workstartion =172.16.1.2

ISP=68.1.112.1 Next Hop I think

When I am at my workstation as mentioned I am not able to access the internet however I

am able to ping the FA0/0 and FA0/1. However when I try to ping the isp

68.1.112.1 from workstation it times out with no reply. Remember from withing the router (telnet) I can ping this address 68.1.112.1 just not from the workstation. DNS works fine though.

Pinging 68.2.112.1 with 32 bytes of data:

Request timed out.

Ping statistics for 68.2.112.1:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Here is where it gets confusing for me! When I am in the router I can ping the isp and both of the FA interfaces and the workstation with no problems ARP gives me a nice breakdown of know addresses and mac addresses.

Below is some information that will be helpful, Thanks

************************************************************************

Router_a #show arp

Protocol Address Age (min) Hardware Addr Type Interface

Internet 68.2.112.1 0 0030.b8c1.fd00 ARPA FastEthernet0/0 ISP Gateway

Internet 68.2.112.85 - 00d0.58f6.2d20 ARPA FastEthernet0/0 FA0/0 Int

Internet 68.2.112.81 16 0030.b8c1.fd00 ARPA FastEthernet0/0 Who is this?

Internet 172.16.1.2 13 0040.ca3b.b558 ARPA FastEthernet0/1 Workstation

Internet 172.16.1.100 - 00d0.58f6.2d21 ARPA FastEthernet0/1 FA0/1

***********************************************************************

Gateway of last resort is 68.2.112.1 to network 0.0.0.0

68.0.0.0/23 is subnetted, 1 subnets

C 68.2.112.0 is directly connected, FastEthernet0/0

172.16.0.0/24 is subnetted, 1 subnets

C 172.16.1.0 is directly connected, FastEthernet0/1

S* 0.0.0.0/0 [254/0] via 68.2.112.1

*************************************************************************

Workstation ipconfig /all

Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Eth

Physical Address. . . . . . . . . : 00-40-CA-3B-B5-58

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 172.16.1.2

Subnet Mask . . . . . . . . . . . : 255.255.255.0

IP Address. . . . . . . . . . . . : fe80::240:caff:fe3b:b558%4

Default Gateway . . . . . . . . . : 172.16.1.100

DNS Servers . . . . . . . . . . . : 172.16.1.8

Reply to
John Smith
Loading thread data ...

I would presume this is a NAT problem. Have you configured NAT at all?

Disable IPv6 on the workstation until you rectify your IPv4 Problem.

Any Access-Lists configured on the router?

If you are still hav> Gang,

Reply to
Shalom B.

Currently, I have not enabled nat or any accesses lists as I know that would only complicate the problem. Below is the running config posted as requested take a look and see if you have any ideas this it really a strange issue.

Thanks

Current configuration : 1569 bytes ! version 12.2 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Router ! logging queue-limit 100 enable secret 5 $1$/jCz$Tuco7pQuAdj5Rv8GvNjtz0 ! memory-size iomem 10 ip subnet-zero ! ! ip name-server 172.16.1.8 ip dhcp excluded-address 172.16.1.1 172.16.1.10 ! ip dhcp pool internal-net-pool network 172.16.1.0 255.255.255.0 default-router 172.16.1.100

ip dhcp excluded-address 172.16.1.1 172.16.1.10 ! ip dhcp pool internal-net-pool network 172.16.1.0 255.255.255.0 default-router 172.16.1.100 dns-server 172.16.1.8 netbios-name-server 172.16.1.8 lease infinite ! ip audit notify log ip audit po max-events 100 no voice hpi capture buffer no voice hpi capture destination ! ! mta receive maximum-recipients 0 ! interface FastEthernet0/0 ip address dhcp client-id FastEthernet0/0 duplex auto speed auto pppoe enable ! interface BRI0/0 no ip address shutdown ! interface FastEthernet0/1 ip address 172.16.1.100 255.255.255.0 duplex auto speed auto ! router rip network 68.0.0.0 network 172.16.0.0 ! ip nat pool ipnatpool 172.16.1.10 172.16.1.254 netmask 255.255.255.0 ip nat inside source list 1 interface FastEthernet0/1 overload ip http server no ip http secure-server ip classless ip route 172.16.1.0 255.255.255.0 FastEthernet0/0 ! call rsvp-sync ! ! mgcp profile default ! dial-peer cor custom

Reply to
John Smith

Not a strange issue at all, plain and simple, your router is not configured properly.

Many things you need/don't need:

1, You NEED to nat to goto the internet! They will NOT route your private IP's which is what you are doing without using nat. 2, Nat...it's all kindsa messed up, pools are wrong, statements are wrong. 3, You need to specify a default route. It's preferable to do it via an IP, but in this case you don't know it yet. 4, You do not need the 172.16.1.0 route as it's a directly connected interface, the router alreay knows about that. 5, You most likely do not need rip. I have a feeling this is the only router on your network. 6, DHCP pools, they are duplicates, not sure why the router allowed you to put them in, maybe you messed up on copy/paste?

Paste this into the router:

Config t no ip nat inside source list 1 interface FastEthernet0/1 overload no ip nat pool ipnatpool 172.16.1.10 172.16.1.254 netmask 255.255.255.0 access-list 1 permit 172.16.1.0 0.0.0.255 ip nat inside source list 1 interface FastEthernet0/0 overload ip route 0.0.0.0 0.0.0.0 f0/0 no ip route 172.16.1.0 255.255.255.0 f0/1 no router rip int f0/0 ip nat outside int f0/1 ip nat inside exit exit wr mem

-Brian

Reply to
Brian V

Need I say more........ Thanks!!!!!!!!!!!!

D:\\>ping 68.2.112.1

Pinging 68.2.112.1 with 32 bytes of data:

Reply from 68.2.112.1: bytes=32 time=10ms TTL=63 Reply from 68.2.112.1: bytes=32 time=10ms TTL=63 Reply from 68.2.112.1: bytes=32 time=10ms TTL=63 Reply from 68.2.112.1: bytes=32 time=25ms TTL=63

Ping statistics for 68.2.112.1: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 10ms, Maximum = 25ms, Average = 13ms

Reply to
John Smith

The IP address range you are using for your network belongs in the

172.16.0.1 through 172.31.255.254 (172.16.0.0/12) RFC 1918 defined class-B private address range. To facilitate communicationg between any RFC 1918 addresses and host on the internet, a network translating device such as a NAT Router or proxy is required.

Routers on ISPs will not accept routes pointing to RFC 1918 networks and therefore will suppress your RIP updates. So if your ISP has no route to hosts on your network, no traffic will be returned, which explains why you can ping the ISPs router from your router but not your workstation.

NAT does cause complications but you have no other alternative, you must implement NAT, and since you use one public IP address, NAT overloading (PAT) is the type of NAT you need.

Here is a sample config that might help you.

interface FastEthernet0/0 ip address dhcp client-id FastEthernet0/0 ip nat outside pppoe enable ! interface FastEthernet0/1 ip address 172.16.1.100 255.255.255.0 ip nat inside ! ip nat inside source list 1 interface FastEthernet0/1 overload ! access-list 1 permit 172.16.0.0 255.255.0.0

John Smith wrote:

Reply to
Shalom B.

Hi John,

Glad it's working. Now you should set a proper IP route. From your router do a trace to something on the internet, say 4.2.2.2. The first hop you hit is now your default gateway. I'm pretty sure it was f0/0 that was your outside, if not change the f0/0 to f0/1. The X.X.X.X below represent the IP that you found as your first hop.

What this will gain for you is performance. Your router will now immeadiatly forward that packet rather than having to arp for the IP your trying to get to.

conf t no ip route 0.0.0.0 0.0.0.0 f0/0 ip route 0.0.0.0 0.0.0.0 X.X.X.X exit wr mem

-Brian

Reply to
Brian V

Brian thanks for all your help!!!!!!!! I however used the ip address dhcp client-id fa0/0 and the ISP gave me the default route see below

show ip route

Gateway of last resort is 68.98.0.1 to network 0.0.0.0

68.0.0.0/20 is subnetted, 1 subnets C 68.98.0.0 is directly connected, FastEthernet0/0 172.16.0.0/24 is subnetted, 1 subnets C 172.16.1.0 is directly connected, FastEthernet0/1 S* 0.0.0.0/0 [254/0] via 68.98.0.1

Get this though i did the traceroute to 4.2.2.2 and look what comes back my first hop is this 10.x.x.x network what is my isp doing. I found this a couple of days ago while working on the previous nat issue. I wanted to set my default route for my router so I did a traceroute to my isp and it came back with this 10.x.x.x network and I thought forsure this would not be my default route, but isp is setting it to a 68 address as the default route so I am still confused.

In addition my isp puts in the df-route (next hop) as a 68 address see above sh ip route. So I am wondering what my df-route should really be?

Any thoughts?

1 10.84.0.1 12 msec 8 msec 12 msec 2 ip68-2-4-65.ph.ph.cox.net (68.2.4.65) 12 msec 8 msec 8 msec 3 68.2.13.222 8 msec 20 msec 8 msec 4 68.2.13.122 20 msec 8 msec 12 msec 5 68.2.13.22 12 msec 8 msec 12 msec 6 68.2.13.26 12 msec 12 msec 12 msec 7 68.2.13.30 12 msec 16 msec 16 msec 8 68.2.13.34 12 msec 16 msec 12 msec
Reply to
John Smith

to network 0.0.0.0

The 10.84.0.1 address isn't strange at all, it's your cable modem. 99% is isp's using cable modems use private nets on them for management. As far as the 68.98.0.1 as a default route, your ISP must be using hsrp or vrrp on their interfaces which explains why your first real hop is not the .1, your seeing the physical.

-Brian

Reply to
Brian V

Brain,

Thanks so much for the help everything is working great now. Its time for the bri backup in a couple of weeks have to order the isnd bri channel. Again thanks for the help and the time!!!!!!

John

Reply to
John Smith

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.