×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

2811 Stub Network Routing Error

Answered Question
Apr 2nd, 2009
User Badges:

Hello Everyone:


I have spent hours putting together a "stub network," using SDM, for a single server behind a 2811 router with a HWIC-4ESW switch connected to the server's management port and its public ethernet port.


Each of the server's 2 ports is connected to one of the switch ports Vlan interface (its second ethernet port is not used).


Looking at server's public interface only for this running config detail.


FE0/0 will be connected to the ISP Ethernet cloud, currently setup with a laptop (A.B.78.1):


!

interface FastEthernet0/0

description $ETH-WAN$

ip address A.B.78.63 255.255.255.0

ip mask-reply

ip nat outside

ip virtual-reassembly

no ip route-cache

duplex full

speed auto

no mop enabled

!

interface FastEthernet0/0/0

description Public Interface

switchport access vlan 30

!

interface Vlan30

description Public Internet

ip address aa.bb.87.49 255.255.255.240

!

ip route 0.0.0.0 0.0.0.0 A.B.78.1 permanent

ip route aa.bb.87.0 255.255.255.240 aa.bb.87.50 permanent

!


The server's ethernet connection to vlan30 has an ipconfig: ip: aa.bb.87.50, mask: 255.255.255.240 & default gateway: aa.bb.87.49.


[1.] The router's Tools/Ping form will ping from FE0/0 to the server's ethernet aa.bb.87.50 -- no worries.


[2.] Similarly, the router's Ping Tool will ping from vlan30 to the laptop. (aa.bb.87.49 to A.B.78.1 = 100% 5/5).


Problems:

[1.] Using the command prompt ping tool from the server:

No ping from server aa.bb.87.50 to A.B.78.1. I can ping to A.B.78.63 (FE0/0).


[2.] Using command prompt ping tool from the laptop:

No ping from laptop A.B.78.1 to aa.bb.87.50. I can ping to aa.bb.87.49 (vlan30).


From looking at this, I think the problem is that the default routing to A.B.78.1 does not work for the vlan30 int traffic and that I need some sort of outbound vlan routing.


How do I do this? encapsulate? helper-address? There is a missing element here, and as frustration has taken over I cannot see it.


Can anyone point out the missing element?


Thanks in advance.


Correct Answer by Yudong Wu about 8 years 4 months ago

What's the output of "show ip route" from 2800 router?

Do you know if default gateway (A.B.78.1) knows how to reach your aa.bb.87. network?

If your aa.bb.87. is a private IP, you need configure NAT on 2800 router.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Yudong Wu Thu, 04/02/2009 - 20:24
User Badges:
  • Gold, 750 points or more

What's the output of "show ip route" from 2800 router?

Do you know if default gateway (A.B.78.1) knows how to reach your aa.bb.87. network?

If your aa.bb.87. is a private IP, you need configure NAT on 2800 router.

abernhardt73 Fri, 04/03/2009 - 10:02
User Badges:

Hello kwu2:


That was it!


Even though the Vlans' SVI settings were setup with SDM, as a true l3 switch, this HWIC-4ESW has its IP routing turned off by default.


"ip routing" must be enabled through the CLI for each interface.


*reaches through computer monitor and shakes kwu2's hand*


Thank You!


...funny, I must be wrong, cuz I didn't think I was stupid.

Actions

This Discussion