I figure I am missing some small but important detail here. I have a
871 router with wireless with the advanced security IOS. Any wired connection works just fine. I can get an IP address from a Windows DHCP server and ping any internal address. However, I can not ping the vlan interface IP address nor get to the Internet. Below is the relevant part of the config.Thank you.
Andrew
bridge irb ! ! interface FastEthernet0 no cdp enable ! interface FastEthernet1 no cdp enable ! interface FastEthernet2 no cdp enable ! interface FastEthernet3 no cdp enable ! interface FastEthernet4 ip address 172.16.0.2 255.255.255.248 ip access-group 100 in ip nat outside ip virtual-reassembly no ip route-cache cef no ip route-cache no ip mroute-cache duplex auto speed auto no cdp enable ! interface Dot11Radio0 no ip address ! encryption vlan 1 key 2 size 128bit 7 90CA5D61A6C466B4BAA7CFF017FA transmit-key encryption vlan 1 mode ciphers tkip wep128 ! ssid vlan1 vlan 1 authentication open authentication key-management wpa optional wpa-psk ascii 7
050F030B721C1A0C1D0612470F5C547C7A7D7932677A4354155056 ! speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 no cdp enable ! interface Dot11Radio0.1 encapsulation dot1Q 1 native no snmp trap link-status no cdp enable bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Vlan1 description default vlan ip address 192.168.100.1 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 bridge-group 1 bridge-group 1 spanning-disabled ! interface BVI1 no ip address ! ip classless ip route 0.0.0.0 0.0.0.0 172.16.0.1 ! ip http server ip http authentication local ip http secure-server ip http timeout-policy idle 5 life 86400 requests 10000 ip nat inside source route-map nonat interface FastEthernet4 overload