Connect Your Home Cisco Lab to the Internet | Cisco CCNA 200-301
ฝัง
- เผยแพร่เมื่อ 30 ก.ย. 2024
- Skills used: Static Routes, OSPF, Default Routes, NAT/PAT, SVIs, and more.
Free TH-cam Playlists from Keith:
Master Playlist for Cisco CCNA 200-301 ogit.online/sloth
Cisco CCNA 200-301 Security ogit.online/20...
Cisco CCNA 200-301 IPv4 Subnetting ogit.online/su...
Join our Discord server ogit.online/Jo...
And…
Keith’s Content at CBT Nuggets ogit.online/Ke...
#KeithBarker #CCNA #200-301
This has to be the single most informative video on building a home lab behind and your ISP! You filled in the gaps for me most magnificently! THANK YOU KEITH #subscribed
Loved every minute of this video. Specially when things did not work as expected 🙂 - thank you Keith
Glad you enjoyed it
Very good presentation Keith! I have a home Cisco lab with a couple of 1841 routers, 3 3560 v1 switches and an ASA 5510 firewall. I was able to follow your specific instructions to the tee and was successful with setup. Now, how would I add a second 3560 switch to my home Cisco lab?
Amazing video Mr. Keith. I'm about 8 months late to the party, but I do have a question: After you fix the telnet connection at the end by updating the NAT ACL can the switch and any subnets off it still reach the internet?
Me too I have the same doubt.
Now that's some serious troubleshooting skills ! I like that you didn't edit the unexpected events
Hey just, just started studying for the 200-301 certification, who wanna be study buddy, so we can motivate 1 and other?
Jump on our Discord server, there are lots of people who may be also looking for a study buddy. Here is the invite link ogit.online/Join_OGIT_on_Discord
Happy studies!
When do you plan on taking it
Hey I went in 4months ago
45:07 Wouldn't it be more scalable and less error-prone if you'd configure R1 as the PC's default gateway (or swap the IPs of your home router and R1)? That way, if you configure another subnet later, like the 10s subnet, you wouldn't have to add that statically to the PC, because R1 would already know about it. Maybe an even better solution would be to configure R1 as the DHCP server, that way all new end user hosts would have R1 as their default gateway. What do you think? Thank you.
Thanks, Keith for all your videos and support. I always use your videos for CCNA preparation a re-certification. I am wondering why you are using in this Lab the Cisco router after the ISP Wi-Fi router? Is it not a better option to have the Cisco router controlling the whole network getting the internet signal after the IPS modem? Please advise. Thank you!
Wow very informative and I get really help to practice my homelab config! Thanks for the video !
Many thanks for the video.
Question:
Instead to do the static nat you can use a dynamic nat with extended acl by denying the 172 source subnet to 192 subnet and permit source 172 to any. By this way we keep the access to the switch with his original ip address?
Yes, absolutely. Perfect. Thank you.
Would you mind to elaborate on thay please? I'm a bit confused. Thank you
@@Klaoloam3864 Yea, me too. @AHANOUH can you explain this a little more or can you give a sample config for this, please?
Hi Keith,
For someone just starting out in Networking like from the very basic, where do you recommend I start from, any videos/series from you will be very helpful. Thank you
Me!
Keith. You're the man. Has almost a decade that am following your videos and for me is one of the best one. Was struggling and stuck to connect my Cisco homelab but now I know what was wrong. Asked the wrong people for support even ISP provider told me that will be possible only if I pay for a private ip wich is expencive
Glad you got it working. Thanks for the comments!
This was awesome. Thanks Keith. I survived certpocalypse and passed the 200-125 back in February, but still staying tuned in here. BTW, assuming your home router supports this, couldn't you have avoided all the NAT business with a static route to 172.16.0.0/16 pointed at 192.168.1.11 (R1)?
Thank you for the question Chris. Yes, it is likely that the home router with that static route, would remove the requirement for the NAT at R1. This is assuming the home router would still provide translation for the 172.16.1.200 before forwarding a packet from SW1 to the Internet. Great insight.
How do i wipe out the configs. Just failed CCNA this weekend so I am setting up a lab with my Google Nest Router, Google Wifi Mesh. I have a cisco 1900 with no switch yet and a Raspi4 8g. I couldnt get it working. I was able to ping around the network (different computer, Google Nest router) from rapsi with wifi off through ethernet. no internet connectivity. I figure if i start from jump street with Cisco Router I should be able to configure. According to Pearson, I understand about 70% of this stuff. Thanks Barker! I have been watching you on CBTnuggets and youtube for about 4 months.
Thank you James Long. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again James Long!
I used the pc static route configuration today to set up management to the beginnings of my home lab made up of 5 3560 switches with OSPF routing capabilities, but no NAT. It worked great to allow me to manage all of the 10.10.x.x devices from my home-side pc :) thank you for the new tool to put in my bag
That is awesome!
How to configure a Cisco Access Switch to AC1200 Wi-Fi Gigabit Router
DIR-825 ? Please help on this setup
Thank you Venkatesh M. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again Venkatesh M!
Hello Keith. How are you? Just a quick one. Say like if i have an ASA i can exclude the cisco lab router (R1)and connect it to the home router and use it as a L3 device? Also use the 3750 as a L2 device create same VLANS on both the 3750 and the ASA, connect them through a trunk port? So basically all the routing is handled by the ASA having a static route pointing to the home router for internet access for the clients? Thank you
Thank you P A. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again P A!
I am also running Google WiFi. Are you using their 3-puck product? If so, are you connecting the main puck's LAN to the WAN of the Cisco router?
Thank you Nathaniel Morris. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again Nathaniel Morris!
I followed along with a Cisco 2921 and a 3850 worked perfect! Had a ton of fun with this lab thanks Keith!
Happy to do it, thanks for the feedback Stephen Flores.
I didn't see the ip 192.168.1.200 configured in R1.. where it was and when it was configured ? This is the ip which statically maped to SW1,s SVI at the end . :)
Thank you satksd. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again satksd!
Really enjoyed this video especially the trouble shooting parts. Thanks
Thank you WemDizzle!
Why OSPF and not EIGRP?
Oh man great video loved it all the way through. I am actually buying some hardware from your recommendation list for home lab. Been using GNS3 and EVE-NG and always something doesn't work so now I am going for physical equipment now.
Not sure if you could advise I want to put my equipment in my garage due to noise switches and routers will make. I was thinking I can put a wireless extender in the garage and connect the routers and switches with it so I can ssh from insode the home. Or do you prefer or recommend something else?
Great stuff!! I am going to set this up just for fun!
Love your videos Keith. I got 1x 2911, 2x 1921 routers n 3 x 3750 switches also a asa 5510 firewall. Will that work following this video? I want to be able to remote in and work with them
Whats the cheapest router I can get that does NAT
As a follow up.. On top of the NAT statement for telnet, I re-configured the original NAT statement back in the router and I now have internet access from my laptop. Now.. thats the next thing I'd like to conquer. Which is to properly NAT to the lab switch using its actual SVI IP and not the home lan IP..
Another amazing video. Thanks Keith. Hope you’re staying safe in these strange times.
I am!
This was such a great video. I had some basic cisco skills before loading up this video and bought a home lab kit in order to study for ccna, ccnp. This is exactly the way I was looking to get started and I thank you for your time and the extra time spent troubleshooting the issues because I was having the same issues. Great work!
Great video. You're teaching style is so much better than most. Thank you.
You're very welcome!
@@KeithBarkeris the switch a L2 or a L3 switch in this lab? Please advise🙏
Keith, would you show us how to connect without the home router?
Happy to do it, thanks for the feedback Lee. I will add that to my list for new videos.
Where would you connect an ASA? Is it best to put it on R1 0/0 interface or 0/1?
Can you use a cisco small business router to connect directly to my fiber ISP or does the simple cisco routers always need a "isp router" or any other internet connected device between ISP and cisco routeR?
what a great video man, it shows how everything is done in real life!
Thank you Jaffeth!
I did not get time to watch this video yet, but this was something I had to Google the heck out of when I ran into this. Off the top of my head it involved creating a DNS server in Packet tracer and using one of the loopback ports on the router to connect to the DNS server. It was deffinately an interesting process.
Packet tracer can be quite robust, but sometimes it can take HOURS to figure things like this out.
Thank you, and yes. Sometimes it takes quite a while.
Hello Keith, I have a question about the telnet issue by the end of the video.
I wanted to solve it in a different way, so I tried setting up an extended ACL with the first statement being a deny tcp any any eq telnet and the second statement matching 172.16.x.x, so in theory telnet connections shouldn't have their IP addresses changed because of NAT (due to the first rule matching Telnet traffic), while everything else would be translated.
However this solution didn't work, so I'm left wondering: is my logic flawed, or is it something else (like maybe the fact I'm using packet tracer and it has a lot of limitations).
Thank you for your time and awesome content.
Thank you Deivid! This would involve the use of a route map. Here is an example www.dslreports.com/forum/r27266639-Conditional-NAT-NAT-source-only-to-specific-destinations
Thanks for the question!
great stuff I just subscribed. couple of questions: first (and I understand you are trying to show multiple technologies such as nat) would the non reach-ability of the 172 networks to the internet have been solved if you have put a static route on the home router pointing 172.16.0.0 to 192.168.1.11? would this have also allowed the telnet to the switch from the workstation (workstation to home router, home router to .11 and then to switch? Finally in the last step with the static nat, since you did away with the inside source list 1 did you kill the access to the internet from 172 when you solved telnet from your workstation? and how would you then get that access back while keeping the nat for the telnet session from your pc to the switch? for example if you put back the original nat would the specific static nat override the nat done for all of 172 by list 1 letting pings work to the internet from the switch but still allowing telnet to 192.168.1.200 to access the switch from the pc? great video thanks!!!
Thank you for the question. Let's have a voice chat sometime on the Discord server. ogit.online/Join_OGIT_on_Discord DM me there, and we can set up a time to discuss.
Cheers.
Hm, I think it could be useful if we checked why SW1 has a larger MTU configured, not just ignore this problem.
But this is a minor nitpick
Nice stuff at the end. I also forgot this [obvious!] detail This is why Port Forwarding exists after all
Good tip!
Great video! I do have a few questions, is it possible to telnet from my switch to my router ? I configured telnet on both devices, I can telnet into both devices individually but not from from one device to another. Thanks!
Yes you can! Try a ping from one device to the other to verify connectivity, if that doesn't work, correct that problem first. Then you should be able to telnet from either device to the other.
Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again Jean Garcia!
Thank you so much ! I build my first WORKING packet tracer of my home network and if finally worked !! You did a fantastic job
I am an IT director and had networking as my weak spot. Not anymore! Thanks for your dedication !
Congratulations Luc Tiber❗
So great to hear, way to get it done. Best wishes on your continued success.
This is excellent, love your videos, and yes, I echo what a lot of others have said, loved watching the fails, was right there with you, thinking right alongside you, now why isn't that working, and going through scenarios and the process as well. My question is, ok, yes, want the setup, just like this, however in my office is where my setup is at, and yes, I want internet access, for well, going through CCNA/CCNP labs and stuff. But I also have a work laptop and several home-based laptops/desktops in this area as well, and I want them to use the lab router/switches for internet access, but I do not want to access or connect to my lab stuff with those PCs. Your thought, create a separate VLAN/ or network altogether to allow them to access the internet, but not the lab environment. I believe I know the answer but just want a second opinion.
Thank you Jayme Smith. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again Jayme Smith!
Awesome Video! Great topic. Like. Subscribed. Its pretty cool to see even the experts sometimes sweat lol.. I followed this line by line.. weird thing happens to me though.. with the original NAT statement, I can ping the router 172.16.1.11 address but not the switch svi. What the??
Thank you for the comments. Does the Switch have route back???
Hello Keith..Hope you are doing great..
In case of a topology performing HSRP between 2 routers, (1 interface of each router is connected with the internet) in which router should we be performing PAT?Do we need to perform PAT on both the routers performing HSRP?
Thank you for the question Arijit. There are several variables involved in that, including the idea that if 1 router has a translation, and the return path uses the alternate router (asymmetrical routing), it may not work. Not a simple answer to that question.
Thanks Keith for this great video - may I suggest an updated one ? I am trying to build a lab connected to the internet with a twist ; between my home router and my Cisco 2921 router, I added a Fortigate 60D. It would be great to see how this little twist fits in the overall picture 😅
Happy to new year to everyone on the channel 🎉
Thank you Luc Tiber! The 60D is just a another firewall. So you can implement NAT, Firewall Policies, Routing, etc. very similar to using other vendor's gear.
I really enjoyed this video. The best part was the troubleshooting. I will go back and watch this video and take notes. I am working on transitioning from using physical Cisco gear to using CML2. Thanks!
Thank you Bill Wade!
Great Lab, I am in situation where cisco 3560 has no nat/pat, my L3 switch routed port has internet route via adsl router and back, but no vlans can access the internet, i cannot add any routes to adsl router - to route back to vlan ranges, 3560 not capable of pat, so i believe i need a router between L3 switch and Adsl modem.
Thank you office 2crazy, I think we discussed this on the call.
Happy labbing!
Which Cisco router is used in this video?
Thank you for the question Vincent Acierto. I don't recall the exact model, but IOS ver 12 or 15 on a standard Cisco router will give the same results.
Anything older than iOS version 15 will not show locally connected routes when you run the show ip route command. 12:48
Thank you Melvin!
Keith first of all im watching your series and thank you for your value that you offer in IT community. I want to ask, what if the R1(router) doesn't connect to home router but instead of this we may connect it straight to the internet cable, would it be a problem?
Thank you for the question Just another guy george. If we connect the router to the cable modem directly, we will be offered an address via DHCP. (usually). If that is the case, you could configure the router to be a dhcp client on that interface, and you would be good to go. If you try this, also reboot the cable modem at the same time. Sometimes they don't react well (or at all) to a MAC address change.
This is a very amazing guide and put together very well! Thank you for your time
Happy To Help!!
Hi Keith, thanks a lot for sharing your knowledge and teaching us in a clear and exciting way.
I need your advice.
I am presently configuring internet access using customer home router huawei hg8245w5 provided by service provider.
Internal router consists of 350 cisco as core and 8 220 cisco switches.
Problem being faced is that the local vlans on core 350 are not able to ping 8.8.8.8
The router has disabled features of static routing, NAT configuration, lan port configuration and there is only one subnet allowed on router.
How should i configure internet access? I was thinking of creating a static route on router pointing any destination internal traffic to core 350 but this feature is disabled. Is there any other way? Pls advise.
The port from core 350 to router is configured as trunk with native vlan as subnet of router.
From 350 ping is working ip addresses from this vlan - subnet router
Thank you for the question Adb. Join us on the Discord server, after one of our streams, and we would be happy to discuss.
@@KeithBarker ok done. I would join your next live stream and try to ask you this question.
Setting up, troubleshooting, NAT, OSPF... Loved it!
Thank you mpunkt79!
Hello Keith. I noticed that the switch port connected to the router is a part of one of the vlans. I assume that you didn't use the no switchport command and make the router and switch connection a separate network. Is the method you used a better way. Thank you
Thank you for the question Michael. Correct, the port that goes from SW1 to the R1 Fa 0/1 is a layer 2 switchport. There is more flexibility when switchports are left as layer 2, and the SVIs on the switch can be used for interVLAN routing. In this lab, I wasn't doing any interVLAN routing on SW1 (yet).
Hi keith, how can i access my lab from remote network, without console server, and use access for more than 1 user? thank you
Thank you for the question Fero Koľvek. Multiple VTY lines can be supported, but having a static reachable address (for inbound access from the Internet) is required. There may by some Dynamic DNS options available through a company providing that service as well.
Hello Keith, It was a very good lab especially the trouble shooting bit. I often watch your videos when stuck with something and thank you.
Thank you SMS mehmood!
Hey Keith can you tell me when is the new CCNP ENCOR training will be release ?
Hi Bryan. We are all eager to see it. CBT will be making an announcement when it becomes available. Thank you for your interest.
Hey Keith. Love your vids. 1 question. I have a more or less similar lab set up to your diagram except the I have a 3750 switch coming out of my home router which is a cisco 2901. If I were to configure my home lab to uplink to the home switch instead of the home router, how would I configure it. It looks like you are going direct from lab router to home router, that's why I'm asking. Thanks.
Thank you for the question John. Jump on the discord server, DM me, and would love to confirm your question and provide an answer.
ogit.online/Join_OGIT_on_Discord
Hi Keith. Tried to configure NAT on my 3750 home switch and found that it does not support NAT. Bummer.😢 I however managed to find a WAN card cheap on ebay and picked it up. I will just configure it Home router to lab router once I get the WAN card and I have the additional port I need. Thanks again for all your help as routing is not one of my strong suites but its coming along more and more with the labbing.
Great video, so much "good stuff"!!! I went into this thinking for sure I would need to set up static NAT for any lab side devices I wanted to manage from home side, but I had never seen the trick of setting a static route on a pc (neat). So with that and the extended ACL suggestion below, I do see how it could be done without any static NAT.
Glad it was helpful!
Hello Keith, thanks so much for such an amazing and great video. I am preparing for CCNA and just started studying for the exam. I am building my own lab but still confused don't not sure about the ip address that I need to assign to my home lab router. My homer modem has a DHCP enabled and the range for the ip address is from 10 to 200 and then I am confused about the default gateway of my home router. Could you explain to me what IP address should I assign to my home lab router? Thanks
Thank you Hawkar Khalil. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again Hawkar Khalil!
@@KeithBarker Thanks so much for all you do for us (learners). I would love to join your Discord Server and your live sessions. Will make sure to join your live sessions on Saturdays. I live in CT, USA. Do we get reminder notifications before the live session starts? Thanks again.
Thank you for all of your work, Keith! It really shows that you want all of us to learn. Is there a way we can support your work financially? If you'd post your Paypal under your videos, I'm sure I wouldn't be the only one who'd donate money. I know making money isn't your primary goal for doing this, but at least we viewers can show you some appreciation as well, other than via our comments (which I'm sure are by themselves a rewarding experience to read). Have a nice weekend.
Thank you for the suggestion!
@@KeithBarker
Thank you for everything! :) All the best to you!
What are the differences in home and cisco router, can we do configure home router just like the one cisco.
Thank you for the question kamal. Home routers are less cost, less features, and usually have a fairly simple GUI interface. Cisco industrial routers have thousands of options, and a less intuitive interface.
Amazing. :)
You are!
great stuff!
Thanks!
Follow-up question.. I have since plugged in a laptop into one of my switch ports, on the same subnet, using 172.16.1.11 as the gateway. No internet access. Anyone know what am I missing??
Thank you for the question. does the laptop have a default gateway of the lab router? Is the lab router including the laptop in its NAT/PAT? Those are the 2 items I would look at.
@@KeithBarker thanx for replying!! I added the original nat statement back into my router and voila!
Thanks so much Keith once Again. Bonito Viegas from Angola
Thank you Bonito!
Would you now have to add an address exclusion on the home router for 192.168.1.200 in order for that address to not be used by another device?
Thank you for the question Ben. It would be safest to add an exclusion for that address on the current DHCP server. Most DHCP servers will ping the address before handing it out, to make sure there isn't a conflict due to that address already being used in the local network. Great question, thank you.
Needed!
Thank you M Boone!
Thank You, troubleshouting is also very handy
Happy to help
I learned a lot 👍Thanks Keith. What software do you use for the illustration board?
Thank you for the question Muveefan. I use a painter program, and a program called Epic Pen for drawing.
Hey Keith, Hope you are doing great and thank you so much for throwing such a great stuff for our help with setting up our lab with our internet. If you could please make a video on how to establish remote access to our lab over the internet.
Me and My friend has lab, what if we want to setup a gre tunnel between them, how to make it work. I don't know how on the base of private ip (of R1) being translated into public by our internet router we can setup a gre tunnel. Please help
Thank you for the question Ahmad Shami. Do you have at least 1 publicly reachable address at either site?
Keith Barker : publicly reachable ip is only on wan side of the fios router on each site.
How about if i do static NAT for my lab router , meaning only R1 is translated,
And i make another ssid put all my home devices in there and R1 too as their default gateway with NAT for them.
Keith Barker Also please suggest a server, i have to get one which could easily help me setup windows server lab, cucm lab and vmware esxi lab.
Thank you Keith
Keith
Can you just make the one NAT you took out a list 2 for an access list and make the connection to the PC (NAT) list 1?
Thank you for the question Wilson. Conditional NAT/PAT is possible, but involved more than a standard ACL when qualifying what tiraffic will go through the NAT/PAT process. For CCNA, only a standard ACL for dynamic NAT/PAT would be required knowledge.
ok cool. I was asking because I wonder if I change to the last access list you made. It won't do PAT any more but will be able to ping my laptop/computer
A great video tutorial!!!!!!! would be nice to have a tutorial in reverse accessing the lab from the internet when travelling etc.
Noted
@@KeithBarker Same here!!!!
Good stuff Keith. Thanks for sharing!
Thanks for watching!
What switch and router models you recommend for the CCNA?
Thank you for the question Jose. First choice would be the free Packet Tracer. After that, almost any router running IOS 15, and a basic multilayer switch, with an ipservices image. 3560s are very affordable.
Keith Barker thank you Keith. Greetings from Santa Cruz, California
This is very impressive and elaborate, you are a great tutor, many thanks for this learning session
Many thanks!
@@KeithBarkerwhy did you set a static IP address in your PC ? Is it necessarily? Any particular reason why? Could you advise, please?
So with the last access list would you not lose connectivity to the internet I’m confused.
Thank you for the question Scott. Access Control Lists (ACLs) can be used for several things, including:
Identifying traffic for QoS (Quality of Service) or preferential treatment
Filtering traffic (if placed on an interface as a filtering ACL)
Identifying which traffic should have NAT/PAT applied to it, which is what the ACL was used for in this demonstration.
Because the ACL wasn't used as a filtering ACL, it isn't dropping or stopping any packets.
Let me know if that helps, or if I can provide more insight regarding your question. You can also find me on the Discord server, and there is a voice chat option there as well if needed or wanted. ogit.online/Join_OGIT_on_Discord If so, you can DM me there.
That’s brilliant. Thank you for the reply.🤙🏼
Very informative keep it up
Thank you, I will
Wont you have dbl Nat with this configuration?
Thank you for the question Melvin Bartlett. Yes, R1 will be performing NAT/PAT and so will the home router for traffic going to and from the Internet from the VLAN1 network.
If you don't want to have double NAT, it's easy to solve with most routers. You make the same configuration as before adding the NAT to R1, and apply the static rule which Keith put on the PC into your internet (ISP) router. In this way router R1 knows how to reach the internet router, and the internet router knows how to reach the network behind R1. OSPF does the rest behind R1, add every other router you add to the OSPF area.
Thank you Keith, Love your work.
Thank you Fitsum
I take it this cant be done with a layer 2 switch instead of a layer 3?
Thank you for the question Mark. If SW1 is a layer 2 switch only, you will want to set a default gateway on the switch instead of a default route, or a routing protocol. The default gateway on the switch would point to the IP address on the Fa0/1 interface of R1.
@@KeithBarker Thanks Keith your a legend :) as you can see new to cisco
Thanks Keith, i Hope u are fine !
Thank you. I am doing well. Appreciate you watching, and for your comment.
I appreciate your Hard work
Thank you Haroon Khan!
Old laptop, zero tier, ssh
Thank you.
Thanks...love your work!
So glad! Thank you Alin.
I m trying to set this up but my 3750 has "c3750-ipbase-mz.122-53.SE2.bin" which does not have OSPF support. Getting following error message:
SW1(config)#router ospf 1
Protocol not in this image
- Can someone tell me which image i will need to get this working?
Thank you for the question Rutvij. Just use RIP or EIGRP instead of OSPF.
@@KeithBarker Thanks a million
@@KeithBarker Hi Keith, Thanks Tried RIP as below, but somehow not working. Works fine from the router though. P.S. - My home network is 192.168.0.1/24
interface GigabitEthernet0/0
ip address 192.168.0.11 255.255.255.0
ip nat outside
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 172.16.1.11 255.255.255.0
ip nat inside
duplex auto
speed auto
!
router rip
version 2
network 172.16.0.0
network 192.168.0.0
default-information originate
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.0.1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface GigabitEthernet0/0 overload
!
access-list 1 permit 172.16.0.0 0.0.255.255 log
@@KeithBarker SW1#show ip int bri | ex unass
Interface IP-Address OK? Method Status Protocol
Vlan1 172.16.1.200 YES NVRAM up up
Vlan2 172.16.2.200 YES NVRAM down down
Vlan3 172.16.3.200 YES NVRAM down down
SW1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 172.16.1.11 to network 0.0.0.0
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Vlan1
R 192.168.0.0/24 [120/1] via 172.16.1.11, 00:00:00, Vlan1
R* 0.0.0.0/0 [120/1] via 172.16.1.11, 00:00:00, Vlan1
SW1#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
@@rutvijbrahmbhatt Can your router ping 8.8.8.8 does that work?
Awesome
Thank you Troy Sipple!