cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
536
Views
0
Helpful
2
Replies

Catalyst 3560 for routing between 2 networks to WLC 2106 for external internet access

Marni scrivens
Level 1
Level 1

We have a Catalyst 3560 L3 Switch which we would like to use for routing by connecting the following:

VLAN1 - 192.168.1.1  --Cisco 2106 WIreless Lan controller : IP 192.168.1.10   ---- WITH 2 - Cisco 1131 Access points
a) XP machine assigned IP 192.168.1.4

VLAN2 - 10.182.0.4 -- External Internet access from local ISP   (whose DHCP assigns  IP:  10.182.0.x    Gateway: 10.182.0.1   DNS: 216.81.55.55)
a)Windows 7 Machine assigned IP: 10.182.0.6

WE CAN  PING  both VLANS  from both VLANS.
WE CAN access the SWITCH's GUI   and   the WLC's GUI  from both sides

We have tryed every combination of VLAN we can think of but cannot get INTERNET access on the XP Machine on 192.168.1.X.
THUS no internet on the access points.    I have enabled routing  both thru the CLI and the GUI.

I am happy to post more or start again with a different config.
Ideas welcome

2 Replies 2

Nagaraja Thanthry
Cisco Employee
Cisco Employee

Hello,

Does the device with IP of 10.182.0.1 have a route to 192.168.1.x subnet? It should have a route and the next hop should be 10.182.0.4. Also, there should be NAT rules to allow 192.168.1.x use the public IP to go to internet.

Hope this helps.

Regards,

NT

Jon Marshall
Hall of Fame
Hall of Fame

scrivies4 wrote:

We have a Catalyst 3560 L3 Switch which we would like to use for routing by connecting the following:

VLAN1 - 192.168.1.1  --Cisco 2106 WIreless Lan controller : IP 192.168.1.10   ---- WITH 2 - Cisco 1131 Access points
a) XP machine assigned IP 192.168.1.4

VLAN2 - 10.182.0.4 -- External Internet access from local ISP   (whose DHCP assigns  IP:  10.182.0.x    Gateway: 10.182.0.1   DNS: 216.81.55.55)
a)Windows 7 Machine assigned IP: 10.182.0.6

WE CAN  PING  both VLANS  from both VLANS.
WE CAN access the SWITCH's GUI   and   the WLC's GUI  from both sides

We have tryed every combination of VLAN we can think of but cannot get INTERNET access on the XP Machine on 192.168.1.X.
THUS no internet on the access points.    I have enabled routing  both thru the CLI and the GUI.

I am happy to post more or start again with a different config.
Ideas welcome

The internet connection, your ISP is allocating you a 10.x.x.x address so presumably the Natting is done by the ISP ?

So 2 things spring to mind -

1) how does the XP machine get the DNS server that your ISP allocates ? Have you tried pinging an IP address rather than a URL from the XP machine ?

2) does the device that the 3560 is connected to for internet access (presumably owned by the ISP) know about the 192.168.1.0/24 network as it will need to and will need to know how to route to that network ie. via the 10.182.0.x address that is allocated to the 3560.

Ordinarily 2) is not a problem because you can NAT all source IPs to the address the ISP does know about ie. the 10.182.0.x address but the 3560 does not support NAT so the ISP will need to know about it.

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: