Cisco Static routing problem

Posted on 2007-03-20
Last Modified: 2010-08-05
I'm having a routing problem I could use some help with. Here is my network.

                                                                            DSL to Internet
                                                                                   | network----cisco 2600 #1----T1----cisco 2600 #2-----firewall-----

Here are the important details of Cisco 2600 #2 config

interface f/o
ip addr   (This is the ethernet port that looks at the firewall)
ip nat inside

interface s/0/0
ip addr 25 (This is the serial to the T1)
ip nat inside

int f1/0
ip addr
ip nat outside

ip nat inside source list 1 int f1/0 overload
ip classless
ip route
ip route

access list 1 permit

Withe this config I can ping from to the Internet, but not

Am I missing a route that would allow that? I have bypassed the FW so i don't think that's my problem. Appreceate some help. Thanks.

Question by:BigfootSunRa
LVL 10

Accepted Solution

Sorenson earned 500 total points
ID: 18759037
post "show ip route" from 2600 #1 and 2600 #2 please.
If it is not a routing issue, you may need to exclude the networks from the "overload" statement.

(create new access-list 100)
access-list 100 deny ip
access-list 100 deny ip
access-list 100 permit ip any

(then attach it to the overload command)
(turn off nat (disrupt internet :)  )  )
int f1/0
 no ip nat outside
do clear ip nat trans *
no ip nat inside source list 1 intf1/0 overload
ip nat inside source list 100 intf1/0 overload
int f1/0
 ip nat outside
access-list 100 will then not allow packets from 192.168.1.x <--> 192.168.2.x to be translated.
all other internet will pick up nat.

Author Comment

ID: 18760325
It looks like I've found the answer. I think it was firewall problem after all. Thanks.

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Ghost Calls on Cisco Video Conference System 5 63
GRE Trunnel with IPsec Encryption Issue 3 54
Network Config 9 71
BGP Network restrictions 6 18
We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now