using cisco switch 3550 for internet

I found another router 2600 that has 2 Fastehernet.
I connected the Internet router(AT&T) to Fa0/0 and configured it :

IP Address DHCP
IP NAT OUTSIDE
No Shut

I configured the Fa0/1
IP address 192.168.3.10
IP address inside source list 40 overload Fa0/0
No Shut

at the global config, I configured:
Access-list 40 permit 192.168.3.0 0.0.0.255

the Fa0/0 picked up an IP address from the Internet router(AT&T) 192.168.1.75

But when I run "SHOW IP NAT TRANSALATIONS" at the global config, it doesn't show anything

I did, I forgot to post on my comments above.

Switch#s run
Building configuration...

Current configuration : 3874 bytes
!
version 12.2
no service pad
s 
!
interface FastEthernet0/7
 switchport mode dynamic desirable
!
interface FastEthernet0/8
 switchport mode dynamic desirable
!
 
 
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.254 254   
ip http server
ip http secure-server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
 login
line vty 5 15
 login
!
end

Switch#

interface fa0/8 is connected  to fa0/1 of the router

I have plugged my pc to interface fa0/11 of the switch 
Notice tis is gotten by the switch automatically :
ip classless ip route 0.0.0.0 0.0.0.0 192.168.1.254 254


=======================================================
Router4#sh run
Building configuration...

Current configuration : 905 bytes
!
version 12.4
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router4
!
 
!
!
interface FastEthernet0/0
 ip address dhcp
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 ip address 192.168.3.10 255.255.255.0
 ip virtual-reassembly
 duplex auto
 speed auto
!
ip forward-protocol nd
!
!
ip http server
ip http authentication local
no ip http secure-server
!
!
!
!
control-plane
!
!
!
!
!
!
dial-peer cor custom
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 no login
 transport input all
line vty 5 15
 login
 transport input pad telnet rlogin udptn v120 ssh
!
!
end


========================
My PC is connected to interface fa0/11 of the switch
My PC static configuration:
Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   IPv4 Address. . . . . . . . . . . : 192.168.3.60
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.3.10

I can ping 192.168.3.10 [the router interface fa0/1] but cannot get to internet from my PC-->switch3550-->cisco router 2600-->AT&T internet router

Select allOpen in new window

I pasted my config above for the Cisco2600 router/Switch 3550/ and My computer IP config

 I completely excluded the router and it workedjust fine, but my concern is when I have many PCs in different switches and different vlans.

I completely excluded the router and it worked

Switch#sh run
Building configuration...

Current configuration : 3874 bytes
!
version 12.2
 
!
hostname Switch
!
 
 
interface FastEthernet0/7
 switchport mode dynamic desirable
!
interface FastEthernet0/8
 switchport mode dynamic desirable
!
 
!
interface FastEthernet0/11
 switchport mode dynamic desirable
  I completely excluded the router and it worked
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.254 254
ip http server
ip http secure-server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
 login
line vty 5 15
 login
!
end

Select allOpen in new window

Are you saying that I need to do the config on cisco 2600 router.

for now  I plugged the ATT DSL straight to cisco 3550 switch.
How can I set up different vlans on the switch or later on the switches to be able to go to internet?

Let me see if I understood your approach:

Connect cable From ATT DSL -->2600Router Fa0/0
Connect Cable from 2600 Router Fa0/1--->to 3550Switch port

then on Router 2600 configure:

int fa0/0
ip nat outside
!
int fa0/1
ip address 192.168.3.10 255.255.255.0
no Shut
ip nat inside
!
ip nat inside source list NATLIST int fa0/0 overload
ip access-list extended NATLIST
deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255      
permit ip 192.168.0.0 0.0.255.255 any


On the Switch:

  # vlan database
(vlan) vlan 10 name INTERNET
(vlan) vlan 12 name LAN12
(vlan) ex


can you please explain how would this connect the PCs to internet?

is this the correct physical connections ?
PCs-->Switch(es)-->Router-->AT&T router-->INTERNET

if so what would be the configuration?

Fa0/1 on the 2600 router is configured with 192.168.3.10
this interface fa0/1 is connected to a port on the switch for now I am trying with one PC  and the default vlan 1
and still cannot getthe PC connect to internet.

Can you please paste the configuration of the router2600 and switch 3550 in order for my PC to connect to internet.
Once I manageto get one PC on the default vlan 1 connected to internet then I will post a different question about how to get PCs from different vlans and different switches to connect to internet.

So please, whenver you get a chance paste the config of the 2600 and 3550.

Thanks

I will try it and keep you updated...

In  the meantime I found this link:
http://networking-newbie.blogspot.com/2008/10/configure-cisco-router-to-work-with_21.html

I am setting my vlans first.
I created a couple of vlans for now on the switch.
I need to know about the port that connects the switch to the router interface, is this going to be a Trunk ? and all PCs will have the IP address of the router interface as Gateway ?

Here is my Config. It didn't work
Please let me know what is missing ?

Switch#
Switch#sh run
Building configuration...

Current configuration : 4114 bytes
!
version 12.2
 
hostname Switch
 
!
interface FastEthernet0/1
 switchport access vlan 10
 switchport mode access
 
!
interface FastEthernet0/6
 switchport access vlan 10
 switchport mode access
!
interface FastEthernet0/7
 switchport access vlan 20
 switchport mode access
 
interface FastEthernet0/11
 switchport access vlan 20
 switchport mode access
!
interface FastEthernet0/12
 switchport trunk encapsulation dot1q
 switchport mode trunk
 
interface Vlan1
 no ip address
 shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.3.10
ip route 0.0.0.0 0.0.0.0 192.168.1.254 254
ip http server
ip http secure-server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
 login
line vty 5 15
 login
!
end

Notice that the ip route 0.0.0.0 0.0.0.0 192.168.1.254 254
it was provided to te switch automatically-- even if I remove ip route 0.0.0.0 0.0.0.0 192.168.3.10
 , it still doesnot work
===============================================



Router4#sh run
Building configuration...

Current configuration : 936 bytes
!
version 12.4
 
!
hostname Router4
 
ip cef
 
no ip domain lookup
  
interface FastEthernet0/0
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 ip address 192.168.3.10 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
 
!
line con 0
line aux 0
line vty 0 4
 no login
 transport input all
line vty 5 15
 login
 transport input pad telnet rlogin udptn v120 ssh
!
!
end

================================================
Regarding my PC ethernet adapter:
IP 192.168.3.60
Subnet Mask: 255.255.255.0
DG=192.168.3.10

it didn not work [I could not get it to go to internet]

I changed the IP to Automatic, and I did not get it to go to internet too.

Select allOpen in new window

Ok to make it simple

I plugged my PC straight to interface fa0/1 of the router [192.168.3.10]
configure my pc:
ip 192.168.3.60
SM=255.255.255.0
DG=192.168.3.10

I can ping 192.168.3.10 [the DG], but cannot get on the internet

I see fa0/0 getting IP 192.168.1.75
I can ping from the cisco 2660 router the ATT router 192.168.1.254

Why cannot I get to internet ?

can you please explain what this will do:

deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255      
permit ip 192.168.0.0 0.0.255.255 any


thanks

I pasted the config per your approach in the code window.

I did some troubleshooting and realized that from Fa0/0 as a source of Ping, I can ping the ATT internet router IP 192.168.1.254 but not from Fa0/1 that is connected to my PC

Router4#ping ip 192.168.1.254 source fastEthernet 0/0

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.254, timeout is 2 seconds:
Packet sent with a source address of 192.168.1.75
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms


Router4#ping ip 192.168.1.254 source fastEthernet 0/1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.254, timeout is 2 seconds:
Packet sent with a source address of 192.168.3.10
.....
Success rate is 0 percent (0/5)

Router4#sh run
Building configuration...
 
hostname Router4
 
interface FastEthernet0/0
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 ip address 192.168.3.10 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
ip forward-protocol nd
!
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list NATLIST interface FastEthernet0/0 overload
!
ip access-list extended NATLIST
 deny   ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255
 permit ip 192.168.0.0 0.0.255.255 any
 
!
line con 0
line aux 0
line vty 0 4
 no login
 transport input all
line vty 5 15
 login
 transport input pad telnet rlogin udptn v120 ssh
!
!
end

Select allOpen in new window

I change the Access listed as listed below now I can ping 192.168.1.254 from fa0/0 and fa0/1 of the router

ip nat inside source list NATLIST interface FastEthernet0/0 overload
!
ip access-list extended NATLIST
 permit ip 192.168.0.0 0.0.255.255 any

now the IP NAT TRANSALATIONS is showing data
it looks like it works:

I can ping one of Google's IP address
Router4#ping 74.125.73.105

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 74.125.73.105, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 60/60/60 ms

mmm, from PC I can ping 192.168.1.254 but cannot get to internet

from PC I can ping 192.168.1.254 but cannot get to internet
any idea ?
ethernet adapter Local Area Connection:

  Connection-specific DNS Suffix  . :
  IPv4 Address. . . . . . . . . . . : 192.168.3.60
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 192.168.3.10

the problem I have now I cannot get to internet from my PC . I can ping internet sites from the router. I can ping from my PC the DG which is the fa0/1 of the router.

Router4#sh run
Building configuration...

Current configuration : 1108 bytes
!
version 12.4
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router4
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
!
!
no ip domain lookup
 
!
interface FastEthernet0/0
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 ip address 192.168.3.10 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list NATLIST interface FastEthernet0/0 overload
!
ip access-list extended NATLIST
 permit ip 192.168.0.0 0.0.255.255 any
!
!
!
!
control-plane
!
!
!
!
!
!
dial-peer cor custom
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 no login
 transport input all
line vty 5 15
 login
 transport input pad telnet rlogin udptn v120 ssh
!
!
end

Router4#

Select allOpen in new window

Router4#ping www.google.com source fastEthernet 0/1

Translating "www.google.com"...domain server (192.168.1.254) [OK]

Translating "www.google.com"...domain server (192.168.1.254) [OK]

Translating "www.google.com"...domain server (192.168.1.254) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 74.125.73.99, timeout is 2 seconds:
Packet sent with a source address of 192.168.3.10
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 72/75/76 ms

Tracert from the PC to which IP address ??

The tracert as well as the Ping to one of Google's IP addresses worked.
it goes to the IP of Fa0/1: 192.168.3.10
Then to the IP address of ATT Router:192.168.1.254
Then to internet.
But the browser doesn 't seem to go to internet when plugged through Cisco2600 router. But when I use the wireless connection it goes to internet.
Also. when I ping www.Google.com it doesn't reply as shown below

C:\>tracert 74.125.73.105

Tracing route to 74.125.73.105 over a maximum of 30 hops

  1     1 ms     1 ms     1 ms  192.168.3.10
  2     3 ms     2 ms     2 ms  192.168.1.254
  3    22 ms    22 ms    22 ms  108.69.96.3
  4    23 ms    32 ms     *     99.167.141.60
  5    34 ms    22 ms    22 ms  99.167.141.26
  6    24 ms    22 ms    22 ms  12.83.70.13
  7    23 ms    23 ms    23 ms  12.123.153.137
  8    37 ms    24 ms    24 ms  12.249.135.14
  9    25 ms    25 ms    25 ms  209.85.253.120
 10    59 ms    46 ms    74 ms  216.239.48.192
 11    61 ms     *       84 ms  72.14.232.249



C:\>ping 74.125.73.105

Pinging 74.125.73.105 with 32 bytes of data:
Reply from 74.125.73.105: bytes=32 time=63ms TTL=44
Reply from 74.125.73.105: bytes=32 time=61ms TTL=44
Reply from 74.125.73.105: bytes=32 time=59ms TTL=44
Reply from 74.125.73.105: bytes=32 time=58ms TTL=46

Ping statistics for 74.125.73.105:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 58ms, Maximum = 63ms, Average = 60ms

C:\>ping www.google.com
Ping request could not find host www.google.com. Please check the name and try again.

Select allOpen in new window

After I ping Google's IP from my PC, then on the router I type:
SHOW IP NAT TRANSLATIONS , I get the output shown in the code.
As you notice the 192.168.3.60 is my PC static IP address

C:\>ping 74.125.73.105

Pinging 74.125.73.105 with 32 bytes of data:
Reply from 74.125.73.105: bytes=32 time=61ms TTL=44
Reply from 74.125.73.105: bytes=32 time=59ms TTL=44
Reply from 74.125.73.105: bytes=32 time=58ms TTL=46
Reply from 74.125.73.105: bytes=32 time=58ms TTL=44

Ping statistics for 74.125.73.105:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 58ms, Maximum = 61ms, Average = 59ms

Router4#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
icmp 192.168.1.75:1    192.168.3.60:1     74.125.73.105:1    74.125.73.105:1
udp 192.168.1.75:137   192.168.3.60:137   99.167.141.60:137  99.167.141.60:137

Select allOpen in new window

the Traceroute above shows that the PC is going through192.168.1.254 this is the IP of the ATT router, I don't see the path through Fa0/ of Cisco router that got 192.168.1.75 through DHCP.
can this be an issue??

I caught the root cause of the issue. it is DNS issue.
the way I found out was that from my PC when I ping www.google.com, I get :
C:\>ping www.google.com
Ping request could not find host www.google.com. Please check the name and try a
gain.

When I ping Google's IP address, the I get a Reply.:
C:\>ping 74.125.73.103

Pinging 74.125.73.103 with 32 bytes of data:
Reply from 74.125.73.103: bytes=32 time=64ms TTL=45
Reply from 74.125.73.103: bytes=32 time=58ms TTL=45
Reply from 74.125.73.103: bytes=32 time=58ms TTL=45
Reply from 74.125.73.103: bytes=32 time=59ms TTL=43

Ping statistics for 74.125.73.103:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 58ms, Maximum = 64ms, Average = 59ms

What I did was, typing Google IP address 74.125.73.103 on the browser, then I managed to access Google web Page.
Now I need your help to make the router provide my PC the DNS service so that it can access Internet.

Thanks

I got it , it is working now:
ip dns server

This is the Config that worked:

Router4#sh run
Building configuration...

Current configuration : 1108 bytes
!
version 12.4
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router4
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
 
!
interface FastEthernet0/0
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface Serial0/0
 no ip address
 shutdown
!
interface FastEthernet0/1
 ip address 192.168.3.10 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 dhcp
!
ip dns server
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list NATLIST interface FastEthernet0/0 overload
!
ip access-list extended NATLIST
 permit ip any any
!
access-list 10 permit any
!
!
!
control-plane
!
!
!
!
!
!
dial-peer cor custom
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 no login
 transport input all
line vty 5 15
 login
 transport input pad telnet rlogin udptn v120 ssh
!
!
end

Select allOpen in new window

Forgot one thing to mention.
On TCP/IP config on my PC I had to type DNS address the IP address of the 2600 Router Fa0/1 [192.168.3.10]

Excellent Guys!