[c-nsp] Cisco 877W BVI nat problem

Bas kilobit at gmail.com
Wed Aug 22 19:45:39 EDT 2007


Hi guys,

I'm lost here, can't seem to find where I'm going wrong.

atm0.1 is unnumbered to vlan1
vlan1 has public IP address and is nat outside
bvi2 has internal address, is bridge for vlan2 and ssid "wifi4" and is
nat inside

wifi clients on this router are getting their IP addresses, but can't
reach the outside world.
Here is my config:
----------------------------
dot11 ssid wifi4
   vlan 2
   authentication open
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 0 XXXXXXXX
!
ip dhcp excluded-address 192.168.30.1
!
ip dhcp pool vlan2
   network 192.168.30.0 255.255.255.0
   dns-server 83.149.80.123 62.212.65.123
   default-router 192.168.30.1

bridge irb

interface ATM0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 ip unnumbered Vlan1
 no snmp trap link-status
 pvc 0/35
  encapsulation aal5snap

interface FastEthernet0
 switchport access vlan 2

interface Dot11Radio0
 no ip address
 !
 encryption vlan 2 mode ciphers aes-ccm
 !
 ssid wifi4
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0
36.0 48.0 54.0
 station-role root
!
interface Dot11Radio0.2
 encapsulation dot1Q 2
 bridge-group 2
 bridge-group 2 subscriber-loop-control
 bridge-group 2 spanning-disabled
 bridge-group 2 block-unknown-source
 no bridge-group 2 source-learning
 no bridge-group 2 unicast-flooding
!
interface Vlan1
 ip address 85.17.85.97 255.255.255.248
 ip nat outside
 ip virtual-reassembly
!
interface Vlan2
 no ip address
 bridge-group 2
 bridge-group 2 spanning-disabled
!
interface BVI2
 ip address 192.168.30.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
ip route 0.0.0.0 0.0.0.0 ATM0.1
!
ip nat inside source list 10 interface Vlan1 overload
!
access-list 10 permit 192.168.30.0 0.0.0.255
!
bridge 2 route ip
----------------------------

Any pointers in the right direction would help me greatly.
Thanks in advance,

Bas


More information about the cisco-nsp mailing list