OK the gist is:3 vlans:
- VLAN1 Management
- VLAN2 Public IP space (220.127.116.11/28)
- VLAN3 Private IP space (172.16.0.0/24)
The route obtains it's external IP via DHCP from the ISP - the address it gets is 18.104.22.168 - this is also the same address as the gateway for VLAN2 (I was informed this is the correct way to configure that part, and that bit is working). VLAN3 is set as the inside NAT interface and the outside NAT interface is set as Dialer0.
The clients in VLAN3 cannot "talk" to VLAN2 and vice versa but the IP helper is working and DHCP is being dished out fine from VLAN2 -> VLAN3.
It's probably something to do with the firewall rules I have in place. I've included my config below, can anyone see where I'm going wrong? and if there is anything that am seriously missing can you point me in the right direction.
Also what is the significance of the line:
Without this DNS would not work - even though I have an permit statement for the 2 DNS servers further down in the config.
Thanks in advance