Solved

static routing issue no access to public internet

Posted on 2016-11-24
7
49 Views
Last Modified: 2017-01-14
static routing issue no access to public internet
We have 3 vlan's
vlan 1
vlan 12
vlan 13

interface NULL0

# configuration of 1 router vrrp
interface Vlan-interface12
 ip address 192.168.2.252 255.255.255.0
 vrrp vrid 12 virtual-ip 192.168.2.1
#
interface Vlan-interface13
 ip address 192.168.1.252 255.255.255.0
 vrrp vrid 13 virtual-ip 192.168.1.1
#

# gateway to internet
interface GigabitEthernet0/1
 port link-mode route
 ip address 103.103.103.2 255.255.255.0

#static route to internet
ip route-static 0.0.0.0 0.0.0.0 103.103.103.1

Routing Tables:
Destination/Mask    Proto  Pre  Cost         NextHop         Interface
0.0.0.0/0           Static 60   0            103.103.103.1   GE0/1
127.0.0.0/8         Direct 0    0            127.0.0.1       InLoop0
127.0.0.1/32        Direct 0    0            127.0.0.1       InLoop0
192.168.1.0/24      Direct 0    0            192.168.1.252   Vlan13
192.168.1.1/32      Direct 1    0            127.0.0.1       InLoop0
192.168.1.252/32    Direct 0    0            127.0.0.1       InLoop0
192.168.2.0/24      Direct 0    0            192.168.2.252   Vlan12
192.168.2.1/32      Direct 1    0            127.0.0.1       InLoop0
192.168.2.252/32    Direct 0    0            127.0.0.1       InLoop0

Computer
Ip : 192.168.2.10
Mask : 255.255.255.0
Gateway : 192.168.2.1

Ping to 192.168.2.1     is ok            gateway
ping to 192.168.1.1     is ok            gateway
ping to 192.168.1.10      is ok            computer in network
ping to 103.103.103.2      is ok            public ip router
ping to 103.103.103.1      no response      public gateway
ping to 8.8.8.8            no response      public internet
0
Comment
Question by:manuverhaegen
  • 4
  • 3
7 Comments
 
LVL 28

Expert Comment

by:Predrag Jovic
ID: 41900771
Did you check your NAT configuration?
If not natted, private IP address space is dropped at ISP.
1
 
LVL 2

Author Comment

by:manuverhaegen
ID: 41900775
Hi,

Nat from external to internal work perfect
0
 
LVL 28

Accepted Solution

by:
Predrag Jovic earned 500 total points
ID: 41900776
Most likely NAT is problem. Double check it. Internal routing works properly.
1
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 2

Author Comment

by:manuverhaegen
ID: 41900779
i try to ping to external a receive no reply
0
 
LVL 28

Expert Comment

by:Predrag Jovic
ID: 41900799
Until you try to ping ISP router it is OK.
My guess is
103.103.103.2 is your router
103.103.103.1 is ISP device
Basically - traffic from ISP router drop your traffic (not natted) or forwarding traffic in wrong direction (ISP's router do not point to your router as next hop to reach netted traffic).
Nat from external to internal work perfect
If you can ping ISP from router directly connected to ISP 99% chance is that NAT is the root cause. From the statement that external NAT works OK most likely that is the case.
1
 
LVL 2

Author Closing Comment

by:manuverhaegen
ID: 41900802
On the public interface i forget :
nat outbound
1
 
LVL 28

Expert Comment

by:Predrag Jovic
ID: 41900804
It happens. ;)
1

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question