Solved

static routing issue no access to public internet

Posted on 2016-11-24
7
17 Views
Last Modified: 2016-11-24
static routing issue no access to public internet
We have 3 vlan's
vlan 1
vlan 12
vlan 13

interface NULL0

# configuration of 1 router vrrp
interface Vlan-interface12
 ip address 192.168.2.252 255.255.255.0
 vrrp vrid 12 virtual-ip 192.168.2.1
#
interface Vlan-interface13
 ip address 192.168.1.252 255.255.255.0
 vrrp vrid 13 virtual-ip 192.168.1.1
#

# gateway to internet
interface GigabitEthernet0/1
 port link-mode route
 ip address 103.103.103.2 255.255.255.0

#static route to internet
ip route-static 0.0.0.0 0.0.0.0 103.103.103.1

Routing Tables:
Destination/Mask    Proto  Pre  Cost         NextHop         Interface
0.0.0.0/0           Static 60   0            103.103.103.1   GE0/1
127.0.0.0/8         Direct 0    0            127.0.0.1       InLoop0
127.0.0.1/32        Direct 0    0            127.0.0.1       InLoop0
192.168.1.0/24      Direct 0    0            192.168.1.252   Vlan13
192.168.1.1/32      Direct 1    0            127.0.0.1       InLoop0
192.168.1.252/32    Direct 0    0            127.0.0.1       InLoop0
192.168.2.0/24      Direct 0    0            192.168.2.252   Vlan12
192.168.2.1/32      Direct 1    0            127.0.0.1       InLoop0
192.168.2.252/32    Direct 0    0            127.0.0.1       InLoop0

Computer
Ip : 192.168.2.10
Mask : 255.255.255.0
Gateway : 192.168.2.1

Ping to 192.168.2.1     is ok            gateway
ping to 192.168.1.1     is ok            gateway
ping to 192.168.1.10      is ok            computer in network
ping to 103.103.103.2      is ok            public ip router
ping to 103.103.103.1      no response      public gateway
ping to 8.8.8.8            no response      public internet
0
Comment
Question by:manuverhaegen
  • 4
  • 3
7 Comments
 
LVL 26

Expert Comment

by:Predrag Jovic
ID: 41900771
Did you check your NAT configuration?
If not natted, private IP address space is dropped at ISP.
1
 
LVL 2

Author Comment

by:manuverhaegen
ID: 41900775
Hi,

Nat from external to internal work perfect
0
 
LVL 26

Accepted Solution

by:
Predrag Jovic earned 500 total points
ID: 41900776
Most likely NAT is problem. Double check it. Internal routing works properly.
1
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 2

Author Comment

by:manuverhaegen
ID: 41900779
i try to ping to external a receive no reply
0
 
LVL 26

Expert Comment

by:Predrag Jovic
ID: 41900799
Until you try to ping ISP router it is OK.
My guess is
103.103.103.2 is your router
103.103.103.1 is ISP device
Basically - traffic from ISP router drop your traffic (not natted) or forwarding traffic in wrong direction (ISP's router do not point to your router as next hop to reach netted traffic).
Nat from external to internal work perfect
If you can ping ISP from router directly connected to ISP 99% chance is that NAT is the root cause. From the statement that external NAT works OK most likely that is the case.
1
 
LVL 2

Author Closing Comment

by:manuverhaegen
ID: 41900802
On the public interface i forget :
nat outbound
1
 
LVL 26

Expert Comment

by:Predrag Jovic
ID: 41900804
It happens. ;)
1

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now