无法从交换机上切换互联网

Question

路由器因特网接口Fastethernet0 0/0 192.168.0.17 (ip nat外部)

内部接口192.168.1.1 (内部ip nat )

能够从路由器ping 8.8.8.8

Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0/0            192.168.0.17    YES DHCP   up                    up
FastEthernet0/1            192.168.1.1     YES NVRAM  up                    up
NVI0                       unassigned      NO  unset  up                    up

路由器配置：

interface FastEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto


ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip nat inside source list 1 interface FastEthernet0/0 overload
access-list 1 permit 192.168.1.0 0.0.0.255

从交换机到ping两个路由器的整数，但不是8.8.8.8

在交换机上设置默认网关

ip default-gateway 192.168.1.1

两者都是思科

开关配置：

service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname nemanja_SW1_35550
!
enable secret 5 $1$vc35$d7PthbPyFSMsiQlnQTMIU0
enable password 7 1218011A1B05
!
no aaa new-model
clock timezone CST 1
ip subnet-zero
no ip domain-lookup
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
interface FastEthernet0/1
 switchport mode dynamic desirable
!
interface FastEthernet0/2
 switchport mode dynamic desirable
!
interface FastEthernet0/3
 switchport mode dynamic desirable
interface Vlan1
 ip address 192.168.1.3 255.255.255.0
 no ip route-cache
!
ip default-gateway 192.168.1.1

Answer 1

找到解决方案时，必须将默认路由更改为

ip route 0.0.0.0 0.0.0.0 192.168.0.1

192.168.0.1是ISP提供商路由器

Answer 2

我认为您需要一个扩展访问列表ip访问-列表100允许ip 192.168.1.0 0.0.0.25将您的nat语句更改为

ip nat内部源列表100接口FastEthernet0 0/0过载