Hello, I'm having a bit of a problem setting up a pair of VLANs on my existing network. I've only got one fastethernet interface going to my network. I need to keep the two VLANs apart. So here's my problem: when I try to configure the router (1721) for VLAN 2, I have no problem. But the moment I try to configure the subinterface for the original VLAN, everything stops working! Any help would be wonderful. Here's my current config:
Using 1138 out of 29688 bytes
!
version 12.3
service config
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname FV
!
boot-start-marker
boot-end-marker
!
enable secret xxxx
enable password xxxx
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip dhcp pool DHCPPool1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.254.100
!
no ftp-server write-enable
!
!
!
!
interface FastEthernet0
ip address 192.168.254.17 255.255.255.0
speed auto
no cdp enable
!
interface FastEthernet0.1
no cdp enable
!
interface FastEthernet0.2
encapsulation dot1Q 2
ip address 192.168.1.1 255.255.255.0
ip access-group 101 out
!
interface Serial0
ip address 10.254.0.2 255.255.255.252
no fair-queue
service-module t1 remote-alarm-enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.254.0.1 permanent
no ip http server
!
snmp-server community xxxx
snmp-server enable traps tty
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
password xxxx
login
!
!
end
----------
And what I've been trying to make subinterface 0.1 look like is this:
interface FastEthernet0.1
encapsulation dot1q 1 native
ip address 192.168.254.17 255.255.255.0
ip access-group 100 out
--------
Then I'd add access-lists to keep the two VLANs from speaking to each other and hopefully VLAN 2 would be able to use the same DNS server.
Anyway, any and ALL help would be greatly appreciated!
