Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Dot1Q Encapsulation in Wan and Lan interfaces of Router 2900

Hello Friends,

A Router 2911 have its Lan interface with dot1q encapsulation, my task was configure its Wan interface with dot1q encapsulation too. The point was that a vlan in Lan SubInterface had to go out through other vlan in Wan SubInterface, they must be related one to one.

So, I make the following:


1.-Added SubInterfaces in Wan  interface, Vlan 80 y 81:


interface GigabitEthernet0/0.80

 encapsulation dot1Q 80

 ip address


interface GigabitEthernet0/0.81

 encapsulation dot1Q 81

 ip address



2.- Configured Accesslist y RouteMap for each Lan Subinterface:


access-list 101 permit ip any

access-list 102 permit ip any


route-map RedB_Cahua permit 20

 match ip address 102

 set ip next-hop


route-map RedA_Cahua permit 10

 match ip address 101

 set ip next-hop



3.- Added the IP Route's followings:


ip route GigabitEthernet0/0.80

ip route GigabitEthernet0/0.81

ip route GigabitEthernet0/1.20

ip route GigabitEthernet0/1.21


4.-Finally, inserted the Route-Map in the Lan Subinterfaces


interface GigabitEthernet0/1.20

 encapsulation dot1Q 20

 ip address

 standby 2 ip

 standby 2 priority 105

 standby 2 preempt

 standby 2 track 1 decrement 10

ip policy route-map RedA_Cahua


interface GigabitEthernet0/1.21

 encapsulation dot1Q 21

 ip address

 standby 3 ip

 standby 3 priority 105

 standby 3 preempt

 standby 3 track 1 decrement 10

 ip policy route-map RedB_Cahua



This Wan port is connected to a Trunk port of remote Swich 3560, in this only is allowed the Vlans 80 and 81, and I configured its nativeVlan as Vlan2.

When I connect a Laptop on access port with Vlan80 in remote Switch, I can do ping to all equipments on subnetwork corresponding to it (
/192). The same way for Vlan 81.

But the trouble is that I can't have web connection to this equipments. Also, this equipments can do ping's to google, hotmail, DNS's but they don't have web connections. I have checked with traceroute and it is correct. There is no filter either.

And when this network is without Wan Subinterfaces on Router and connected to Acces port  on remote Switch, it works very well.

I will  appreciate all help you can give me on this issue.

Thanks for your time.

Best regards,




Everyone's tags (1)

Hello Sandro, For "I can't

Hello Sandro,


For "I can't have web connection to this equipments" what error message do you get or what is the behavior?  Do you get an HTTP 500 or something similar?

New Member

Hello,Davrojas, there is no


Davrojas, there is no message, all seem to be rigth, but when I test the web connection it does not connect.


Hello zsmr00001, What results

Hello zsmr00001,


What results do you get when you try to telnet using port 8080 or 443 to any of the equipments?

New Member

Hello davrojas,I found the

Hello davrojas,

I found the error yesterday.  What happend was that there is a microwave link between Router 2911 and Switch 3560, so in this microwave link the size of MTU was short, then we changed its size and it worked. 

Regarding your question I coud do telnet too, but not to the web connection. It was for the short MTU.

Thanks for your interest.

New Member

This discussion has been

This discussion has been reposted from Top Contributors to the WAN, Routing and Switching community.

CreatePlease login to create content