Cisco:路由器可以ping Internet,客户端不能

网络工程 思科 路由器 故障排除
2022-02-02 20:36:01

我目前正在夏天的地方使用 Cisco 819 LTE 集成 (C819G-4G-G-K9) 路由器,以获得更好的 LTE 信号和 ISP 路由器为我提供的控制。

目前我被困在路由器能够ping通互联网(1.1.1.1或8.8.8.8)的地方。客户端可以 ping 通路由器。

  • 客户端 IP:10.0.1.12 (VL20)
  • IOS:Cisco IOS 软件,C800 软件 (C800-UNIVERSALK9-M),版本 15.3(3)M3

如果有人知道为什么会出错,如果您能帮助我,我将不胜感激。我已经阅读了其他类似的帖子,但没有成功。

运行:

Router#sh run

Building configuration...

WLAN_AP_SM: Config command is not supported

Current configuration : 2382 bytes

!

! Last configuration change at 20:50:24 UTC Wed Jul 4 2018

version 15.3

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

no service password-recovery

!

hostname Router

!

boot-start-marker

boot-end-marker

!

aqm-register-fnf

no aaa new-model

!

ip dhcp excluded-address 10.0.1.2 10.0.1.10

!

ip dhcp pool cable

network 10.0.1.0 255.255.255.0

defaul.1.1

dns-server 1.1.1.1

!

no ip domain lookup

ip cef

no ipv6 cef

!

multilink bundle-name authenticated !

chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"

!

license udi pid C819G-4G-G-K9 sn FCZ182191J3

!

vtp mode transent

!

controller Cellular 0

!

vlan 20

name transfer

!

interface Cellular0

ip address negotiated

ip nat outside

ip virtual-reassembly in

encapsulatioip

dialer in-band

dialer string lte

dialer-group 1

!

interface FastEthernet0

no ip address

!

Interface FastEthernet1

!

interface FastEthernet2

switchport access vlan 20

no ip address

!

interface FastEthernet3

no ip address

!

interface GigabitEthernet0

no ip address

shutdown

duplex auto

speed auto

!

interface Serial0

no ip address

shutdown

clock rate 2000000

!

interface Vlan1

ip address 10.0.0.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface Vlan20

ip address 10.0.1.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

ip default-gateway 10.0.0.1

ip forward-protocol nd

no ip http server

no ip http secure-server

!

ip nat inside source list NAT interface Cellular0 overload

ip route 0.0.0.0 0.0.0.0 Cellular0

!

ip access-list extended NAT

permit ip 10.0.0.0 0.0.0.255 any

!

dialer-list 1 protocol ip permit

!

access-list 1 permit 0.0.0.0 255.255.255.0

access-list 1 permit 0.0.0.0 0.0.0.255

!

control-plane

!

mgcp behavior rsip-range tgcp-only

mgcp behavior comedia-role none

mgcp behavior comedia-check-media-src disable

mgcp behavior comedia-sdp-force disable

!

mgcp profile default

!

line con 0

no modem enable

line aux 0

line 2

no activation-character

no exec

transport preferred none

transport input all

stopbits 1

line 3

script dialer lte

no exec

rxspeed 100000000

txspeed 50000000

line vty 0 4

login

transport input all

!

scheduler allocate 20000 1000

!

end

And a sh ip route:

Router#sh ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

a - application route

+ - replicated route, % - next hop override

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S* 0.0.0.0/0 is directly connected, Cellular0

10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 10.0.1.0/24 is directly connected, Vlan20

L 10.0.1.1/32 is directly connected, Vlan20

90.0.0.0/32 is subnetted, 1 subnets

C 90.232.20.89 is directly connected, Cellular0

Router#
1个回答

您的 NAT 访问列表不包括您的客户端子网。您需要运行以下命令:

config terminal
  ip access-list extended NAT
  permit ip 10.0.1.0 0.0.0.255 any

这将允许两个内部罪人上的主机在离开您的 WAN 接口时正确地进行 NAT。

对于任何格式问题,我深表歉意;我怪我的手机:)