You dont have an access-list 1 in your conf (you have "1" in your nat statement) - I assume it is supposed to be "10" based on your conf
> Date: Sun, 1 Dec 2013 11:34:56 -0700 > From: [email protected] > To: [email protected] > Subject: [c-nsp] 2921 router with 4 port switch > > I have a 2921 router with a 4 port switch for our internet router, I have our > public wireless plugged into the 4 port switch on the router but cannot > figure out how to pass traffic outside of the router from our public wireless > controller. The public wireless is a tagged from the controller vlan 253, I > can ping the vlan ip address but nothing beyond. > > TIA > Mike > > Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M3, > RELEASE SOFTWARE (fc1) > > Here is my current config. > > hostname inet-router > ! > boot-start-marker > boot-end-marker > ! > ! > no logging console > ! > no aaa new-model > clock timezone MST -7 0 > clock summer-time MDT recurring > ! > no ipv6 cef > ip source-route > ip cef > ! > > ! > no ip bootp server > no ip domain lookup > > multilink bundle-name authenticated > ! > crypto pki token default removal timeout 0 > ! > ! > ! > ! > vtp mode transparent > ! > ! > vlan 253 > ! > > ! > interface Embedded-Service-Engine0/0 > no ip address > shutdown > ! > interface GigabitEthernet0/0 > description Interface to PIX Firewall > ip address 206.127.2.89 255.255.255.248 > duplex full > speed 1000 > ! > interface GigabitEthernet0/1 > description Link to MIC DS3 Radio > bandwidth 45000 > ip address 206.127.0.30 255.255.255.252 > no ip redirects > no ip unreachables > no ip proxy-arp > ip nat outside > ip virtual-reassembly in > duplex auto > speed auto > ! > interface GigabitEthernet0/0/0 > description Interface to Cisco Public Wireless > switchport trunk allowed vlan 1,253,1002-1005 > switchport mode trunk > no ip address > ! > interface GigabitEthernet0/0/1 > no ip address > shutdown > ! > interface GigabitEthernet0/0/2 > no ip address > shutdown > ! > interface GigabitEthernet0/0/3 > no ip address > shutdown > ! > interface Vlan1 > no ip address > shutdown > ! > interface Vlan253 > ip address 192.168.253.1 255.255.255.0 > ip nat inside > ip virtual-reassembly in > ! > ip forward-protocol nd > ! > no ip http server > no ip http secure-server > ! > ip nat inside source list 1 interface GigabitEthernet0/0 overload > ip route 0.0.0.0 0.0.0.0 206.127.1.29 > ip route 206.127.8.0 255.255.255.0 206.127.2.90 > ! > access-list 10 permit 206.127.2.90 > access-list 10 permit 192.168.253.0 0.0.0.255 > dialer-list 1 protocol ip permit > ! > ! > snmp-server community public RO > snmp-server enable traps tty > > ! > control-plane > ! > > end > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
