ttriggs
asked on
How to route cisco 2800 to the internet
Hi all,
I am trying to figure out how to route my cisco router to the internet and statically assigned the address. I am fairly certain I set up the nat correctly but am not sure how to fix it.
When I try and ping say, google.com (216.58.216.46), I get a 0 percent success rate:
Here is my running config.
Any help is greatly appreciated!
I am trying to figure out how to route my cisco router to the internet and statically assigned the address. I am fairly certain I set up the nat correctly but am not sure how to fix it.
When I try and ping say, google.com (216.58.216.46), I get a 0 percent success rate:
Router#ping 216.58.216.46
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.58.216.46, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Router#
Here is my running config.
Router#sh running-config
Building configuration...
Current configuration : 1077 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
! card type command needed for slot/vwic-slot 0/0
enable secret 5 $1$yXmL$AGGkTPznGUb1b2OgUp2RY/
!
no aaa new-model
!
resource policy
!
ip subnet-zero
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.1 192.168.0.3
!
ip dhcp pool DATA
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8
!
!
!
!
!
!
interface FastEthernet0/0
ip address 173.192.xxx.xxx 255.255.255.0
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
!
no ip http server
ip nat inside source list 101 interface FastEthernet0/0 overload
!
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
warm-reboot
scheduler allocate 20000 1000
!
end
Any help is greatly appreciated!
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hmm, ok. I tried to change the next hop like you suggested but I get this error. Sorry I am new at this and trying to learn how to set up a network to go outside
What settings would I have to change to fix this? Since, fa0/0 is the port being used for the internet, I thought I could set up that port with the ip address to nat outside, which is why I set the ip route 0.0.0.0 0.0.0.0 fa0/0. Is that not how you would normally do that?
Router(config)#ip route 0.0.0.0 0.0.0.0 173.196.xxx.xxx
%Invalid next hop address (it's this router)
Router(config)#
What settings would I have to change to fix this? Since, fa0/0 is the port being used for the internet, I thought I could set up that port with the ip address to nat outside, which is why I set the ip route 0.0.0.0 0.0.0.0 fa0/0. Is that not how you would normally do that?
Confirm both your IP and the gateway
You are showing:
Fa0/0 173.192.xxx.xxx 255.255.255.0
Gateway 173.196.59.250
Those are two separate subnets, is one a typo?
You are showing:
Fa0/0 173.192.xxx.xxx 255.255.255.0
Gateway 173.196.59.250
Those are two separate subnets, is one a typo?
you should be able to ping 173.196.59.250 if you source interface fa0/0
ASKER
Sorry, I accidentally showed my ip address, the other was a typo, it's set to 173.192.xxx.xxx.
I just pinged 173.192.xxx.xxx and it worked, but cant ping any other outside address
I just pinged 173.192.xxx.xxx and it worked, but cant ping any other outside address
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
so a few other checks you can do.
traceroute 216.58.216.46
telnet 216.58.216.46 80
traceroute should show indication on routing issue along the way
while telnet should show indication of ICMP filtering issue along the path
traceroute 216.58.216.46
this should show us where you are stopping or might indicate where you are having issues beyond your router.
telnet 216.58.216.46 80
if it shows a blank screen, it means you are able to reach it via http but somehow ping (ICMP) is being blocked along the way
traceroute should show indication on routing issue along the way
while telnet should show indication of ICMP filtering issue along the path
so did you fix the ip route route to be 0.0.0.0 0.0.0.0 173.192.59.250?
also lose the ip route 0.0.0.0 0.0.0.0 fa0/0 line if you have not
also lose the ip route 0.0.0.0 0.0.0.0 fa0/0 line if you have not
could you repost your config as well if you dont get it working.
ASKER
Here is the updated config. I removed the old ip route and I tried to set the new one you said to try ip route 0.0.0.0 0.0.0.0 173.192.xxx.xxx and it gave me the error -
Current Config -
Router(config)#ip route 0.0.0.0 0.0.0.0 173.192.xxx.xxx
%Invalid next hop address (it's this router)
Router(config)#
Current Config -
Current configuration : 1036 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
! card type command needed for slot/vwic-slot 0/0
enable secret 5 $1$yXmL$AGGkTPznGUb1b2OgUp2RY/
!
no aaa new-model
!
resource policy
!
ip subnet-zero
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.1 192.168.0.3
!
ip dhcp pool DATA
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8
!
!
!
!
!
!
interface FastEthernet0/0
ip address 173.192.xxx.xxx 255.255.255.0
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
ip classless
!
no ip http server
ip nat inside source list 101 interface FastEthernet0/0 overload
!
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
warm-reboot
scheduler allocate 20000 1000
!
end
ASKER
Hi ffleisma, Im not sure I understand; I thought I was already doing this.
I tried to set ip route 0.0.0.0 0.0.0.0 173.192.xxx.xxx but yields that error. Does it give me this error because that same address is set on fa0/0?
If so then what would I set fa0/0 to?
thanks again for the help, I really appreciate it
I tried to set ip route 0.0.0.0 0.0.0.0 173.192.xxx.xxx but yields that error. Does it give me this error because that same address is set on fa0/0?
If so then what would I set fa0/0 to?
thanks again for the help, I really appreciate it
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
must be configured like this
ip route 0.0.0.0 0.0.0.0 Fastethernet0/0 173.192.xxx.xxx
you must do classless to an interface then next hop
use open dns google dns sucks plus they track everything you do online, without your permission.
ip route 0.0.0.0 0.0.0.0 Fastethernet0/0 173.192.xxx.xxx
you must do classless to an interface then next hop
use open dns google dns sucks plus they track everything you do online, without your permission.
Router(config)#ip route 0.0.0.0 0.0.0.0 173.192.xxx.xxxThis means that you added your router as next hop. Next-hop router should be your ISP router.
%Invalid next hop address (it's this router)
Are you sure that your subnet mask is 255.255.255.0 for WAN interface?
Did you get that IP range from your ISP?
interface FastEthernet0/0
ip address 173.192.xxx.xxx 255.255.255.0
there is really no need for nexthop in his config since the interface is already facing the internet, or maybe he has his wires cross meaning he has the lan cable into the wan side and wan into lan. next yes I agree should be his isp however, isp's only give out next op addresses to businesses needing it for specific services.
for lab purposes you set next op to routers of other subnet and gateways, unless he uses his isp gateway as the nexthop
for lab purposes you set next op to routers of other subnet and gateways, unless he uses his isp gateway as the nexthop
I am not really sure what Author is doing (is this real life or lab situation) so I am just pointing out why error %Invalid next hop address (it's this router) appeared.
From posts above looks like author don't understand issue.
From posts above looks like author don't understand issue.
the format of the ip route command is the network to route (0.0.0.0 0.0.0.0 - which means all unknown traffic default route) and then ip address of the next router after your router. ISP will usually provide this.
ASKER
This is just for a lab, I am trying to learn how to set up a router to have internet access and be able to reach outside the network, nothing really fancy yet, Im just trying to learn.
Info provided by my ISP
Once again thanks for any help
Info provided by my ISP
Static IP - 173.192.xxx.xxx
Gateway - 173.192.xxx.1
Subnet mask - 255.255.255.0
Gateway - 173.192.xxx.1
Subnet mask - 255.255.255.0
Once again thanks for any help
@ttriggs, so were you able to apply the correct static route and are you able to have outside reachability?
You might also want to check the reverse direction of the traffic if the routers along the path have a route towards your firewall.
You might also want to check the reverse direction of the traffic if the routers along the path have a route towards your firewall.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Well I tried that and it still doesn't work :( Any ideas what I am missing here?
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
! card type command needed for slot/vwic-slot 0/0
enable secret 5 $1$yXmL$AGGkTPznGUb1b2OgUp2RY/
!
no aaa new-model
!
resource policy
!
ip subnet-zero
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.1 192.168.0.3
!
ip dhcp pool DATA
import all
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8
!
!
!
!
!
!
interface FastEthernet0/0
ip address 173.192.xxx.xxx 255.255.255.0
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 173.192.xxx.1
!
no ip http server
ip nat inside source list 101 interface FastEthernet0/0 overload
!
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
login
!
warm-reboot
scheduler allocate 20000 1000
!
end
Router#ping 74.125.224.35
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 74.125.224.35, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
The failed ping you showed , I assume that is the next hop IP correct?
A few issue that can cause this which you can check are as follows:
At the very least you should be able to ping the next-hop router's IP address. Let me know if you have further questions be glad to help you out.
A few issue that can cause this which you can check are as follows:
Your subnet mask does not match the next-hop router subnet mask. Based from your configuration you are using 173.192.xxx.xxx with a /24 subnet mask, ensure not only you have the same mask but both interface IP address are within the same subnet.
Do you have an intermediate device between your router and the next-hop router like a switch? Or is this is directly connected connection between two routers using ethernet? Kindly check your "show ip interface brief" and "show cdp neighbor". Issue might be caused by Layer2 or Layer1 issue between your router and the next-hop router.
At the very least you should be able to ping the next-hop router's IP address. Let me know if you have further questions be glad to help you out.
Also, I'm curious to where your are running your test?
are these physical Cisco devices?
GNS3?
IOU?
ASKER
ffleisma, so apparently TWC gave me the incorrect static IP.... I have the correct one now and I can ping ip addresses on the internet!
I also discovered I hadn't setup DNS completely as I was still getting this error:
To fix it I had to configure the following and can now ping google.com :
I also discovered I hadn't setup DNS completely as I was still getting this error:
Router#ping google.com
Translating "google.com"...domain server (255.255.255.255)
% Unrecognized host or address, or protocol not running.
Router#ping 74.125.224.35
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 74.125.224.35, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/8 ms
To fix it I had to configure the following and can now ping google.com :
ip dns server
ip domain name itrouter.com
ip name-server 66.75.164.89
Router#ping google.com
Translating "google.com"...domain server (66.75.164.89) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 74.125.224.71, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/8 ms
Router#
ASKER
Thanks for the help. It makes a lot of sense now.
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
also, to troubleshoot, can you try the following:
if the next-hop router IP is unreachble, it might be a Layer 1/2 problem between your router and the default-gateway/next-hop router.