Question : Cisco Router help- should be easy 2821 router

I have 2 2821 advanced IP service routers that I just bought for a new network. I'm going to put HSRP on them so let's focus on one for now.
I had them working then the network scheme changed and I reset the routers back to factory to reprogram.

Here's the problem:

I setup the router, 2 gig interfaces and i bought a 4 port ethernet adapter for it. I'm not using the adapter until I get the other ports working.

gig int 0/0 is set as the connection to the internet (which is already on a network in my office, it will not be used after we move this router to the new location).
int gig 0/0 ip address 69.xxx.xxx.70 255.255.xxx.xxx  ---public address that we own
int gig 0/1 ip address 192.168.30.1 255.255.255.0 ---internal network I want to setup
ip route 0.0.0.0 0.0.0.0 69.xxx.xxx.65

For some reason, when I add a laptop to my cisco 3560 switch and give it IP 192.168.30.33 and default gateway 192.168.30.1, I cannot ping the internet. I do however get DNS resolution from the internet (I set it up in the config). I can ping internal network and the router from the laptop, just not outside to the internet.

I can ping from the router to the internet and internal network.
Can't ping from the laptop to the internet.

Any ideas? Am I missing something simple?

Here's my running config:


_____________________________________________________________________________________


Current configuration : 3945 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname router1
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable password 7 075XXXXXXXXXXXXX
!
no aaa new-model
!
resource policy
!
clock timezone pctime -5
ip subnet-zero
!
!
!
ip cef
!
!
ip domain name yourdomain.com
ip name-server 66.XXX.XXX.2
!
!
voice-card 0
 no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-806740676
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-806xxxxx
 revocation-check none
 rsakeypair TP-self-signed-806xxxxxx
!
!
crypto pki certificate chain TP-self-signed-806740676
 certificate self-signed 01
  3082024D 308201B6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 38303637 34303637 36301E17 0D303631 30303631 38303333
  305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3830 36373430
  36373630 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
  9D8A6183 8301297A 6842F119 631BE025 6235A2DF 3D9436AE 66C2FA21 7D4B8DE5 quit
username cbrown privilege 15 password 7 14xxxxxxx5435
!
!
!
!
!
!
!
interface GigabitEthernet0/0
 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
 ip address 69.xxx.xxx.70 255.255.xxx.xxx
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 ip address 192.168.30.1 255.255.255.0
 duplex auto
 speed auto
!
interface GigabitEthernet0/1.1
 shutdown
!
interface FastEthernet0/0/0
!
interface FastEthernet0/0/1
!
interface FastEthernet0/0/2
!
interface FastEthernet0/0/3
 vlan-id dot1q 1
  exit-vlan-config
 !
!
interface Vlan1
 no ip address
!
interface Vlan30
 no ip address
!
ip classless
ip route 0.0.0.0 0.0.0.0 69.xxx.xxx.65
ip route 69.xxx.xxx.64 255.255.xxx.xxx GigabitEthernet0/0
ip route 192.168.30.0 255.255.255.0 GigabitEthernet0/1
!
ip dns server
!
ip http server
ip http authentication local
ip http secure-server
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
banner login ^C
----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device. This

feature requires the one time use, initial credentials, of username "cisco"
with password "cisco".

-----------------------------------------------------------------------
^C
!
line con 0
 exec-timeout 30 0
 login local
line aux 0
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
line vty 5 15
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler allocate 20000 1000
!
end

Answer : Cisco Router help- should be easy 2821 router

You need to configure nat

access-list 1 permit 192.168.30.0 0.0.0.255

ip nat inside source list 1 interface GigabitEthernet0/0 overload


int GigabitEthernet0/0
ip nat outside

GigabitEthernet0/0
ip nat inside