cisco 1700 router lab issue

[scottie4442]

I have a lab that is setup like this:

4 areas consisting of a server and 3 clients connected together with switch then connected to FastEthernet on cisco 1700. I have installed Ethernet WICs in the cisco 1700s and these are connected to a central switch which is then connected to a Ethernet WIC on another cisco 1700, the other side of the 1700, FastEthernet, is connected to a Linux server and then out to the school network and the internet. I have set everything up correctly, each area has its own IP subnet, and there is a central subnet, and then a subnet from the central 1700 to the Linux server. The problem I am having is, I can ping from anywhere to anywhere, this is how I know the network is setup correctly, but I the network will not pass any other traffic, I try to ping to an internet site and it will not pass DNS nor HTTP traffic. My question is is this an issue because I am going through the Ethernet ports, and not the serial, or is this something else. BTW, I have put an ACL to allow all in and out on all the ethernet ports on all the routers.

Thanks for any help,

Scott Adams
COmputer Network Technology Instructor
Southeast Arkansas College
Pine Bluff, Arkansas

 

[burtsbees]

You don't need acl's to allow traffic in and out on a router---just a firewall. I take that back---acl's for NAT will be necessary in your situation. You need ip nat inside on ALL inside interfaces on all routers, and ip nat outside on the one outgoing interface, an acl that allows all subnets, and
ip nat inside source list (number of acl) int (outside interface) overload

Burt