思科:路由器可以上网，客户不能

Question

我目前正在玩思科819 LTE集成(C819G-4G-G-K9)路由器在我的夏天的地方，以获得一个更好的LTE信号和控制，ISP路由器提供我。

目前，我被困在客户端不能在路由器能够访问internet (1.1.1.1或8.8.8.8)的地方。客户端可以打开路由器。

• 客户IP: 10.0.1.12 (VL20)
• IOS: Cisco IOS软件，C800软件(C 800-UNIVERSALK9-M)，版本15.3(3)M3

如果有人想知道为什么会出问题，我很感激你能帮我。我读过其他类似的文章，但都没有成功。

sh run：

Router#sh run

Building configuration...

WLAN_AP_SM: Config command is not supported

Current configuration : 2382 bytes

!

! Last configuration change at 20:50:24 UTC Wed Jul 4 2018

version 15.3

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

no service password-recovery

!

hostname Router

!

boot-start-marker

boot-end-marker

!

aqm-register-fnf

no aaa new-model

!

ip dhcp excluded-address 10.0.1.2 10.0.1.10

!

ip dhcp pool cable

network 10.0.1.0 255.255.255.0

defaul.1.1

dns-server 1.1.1.1

!

no ip domain lookup

ip cef

no ipv6 cef

!

multilink bundle-name authenticated !

chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"

!

license udi pid C819G-4G-G-K9 sn FCZ182191J3

!

vtp mode transent

!

controller Cellular 0

!

vlan 20

name transfer

!

interface Cellular0

ip address negotiated

ip nat outside

ip virtual-reassembly in

encapsulatioip

dialer in-band

dialer string lte

dialer-group 1

!

interface FastEthernet0

no ip address

!

Interface FastEthernet1

!

interface FastEthernet2

switchport access vlan 20

no ip address

!

interface FastEthernet3

no ip address

!

interface GigabitEthernet0

no ip address

shutdown

duplex auto

speed auto

!

interface Serial0

no ip address

shutdown

clock rate 2000000

!

interface Vlan1

ip address 10.0.0.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

interface Vlan20

ip address 10.0.1.1 255.255.255.0

ip nat inside

ip virtual-reassembly in

!

ip default-gateway 10.0.0.1

ip forward-protocol nd

no ip http server

no ip http secure-server

!

ip nat inside source list NAT interface Cellular0 overload

ip route 0.0.0.0 0.0.0.0 Cellular0

!

ip access-list extended NAT

permit ip 10.0.0.0 0.0.0.255 any

!

dialer-list 1 protocol ip permit

!

access-list 1 permit 0.0.0.0 255.255.255.0

access-list 1 permit 0.0.0.0 0.0.0.255

!

control-plane

!

mgcp behavior rsip-range tgcp-only

mgcp behavior comedia-role none

mgcp behavior comedia-check-media-src disable

mgcp behavior comedia-sdp-force disable

!

mgcp profile default

!

line con 0

no modem enable

line aux 0

line 2

no activation-character

no exec

transport preferred none

transport input all

stopbits 1

line 3

script dialer lte

no exec

rxspeed 100000000

txspeed 50000000

line vty 0 4

login

transport input all

!

scheduler allocate 20000 1000

!

end

And a sh ip route:

Router#sh ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

a - application route

+ - replicated route, % - next hop override

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S* 0.0.0.0/0 is directly connected, Cellular0

10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 10.0.1.0/24 is directly connected, Vlan20

L 10.0.1.1/32 is directly connected, Vlan20

90.0.0.0/32 is subnetted, 1 subnets

C 90.232.20.89 is directly connected, Cellular0

Router#

Answer 1

您的NAT访问列表不包括客户端子网。您需要运行以下操作：

config terminal
  ip access-list extended NAT
  permit ip 10.0.1.0 0.0.0.255 any

这将允许两个内部罪人的主机在离开广域网接口时正确地使用NATted。

我为任何格式化问题道歉；我责怪我的手机:)