July 6, 2008 02:59pm pdt

1. lrmoore 195,038
2. JFrederi... 185,525
3. donjohnston 181,448
4. RobWill 107,391
5. batry_boy 100,786
6. that1guy15 82,375
7. donmanrobb 80,125
8. giltjr 61,860
9. from_exp 61,185
10. naughton 58,735
11. logic2 43,552
12. dpk_wal 43,202
13. bfason 40,955
14. rsivanandan 35,525
15. arnold 32,200

1. lrmoore 2,856,728
2. JFrederi... 1,145,836
3. donjohnston 1,047,869
4. mikebern... 613,688
5. rsivanandan 350,841
6. RobWill 322,680
7. Dr-IP 293,929
8. harbor235 253,441
9. kbbcnet 200,499
10. batry_boy 190,196
11. Scotty_c... 186,404
12. calvinetter 180,631
13. giltjr 175,441
14. pseudocyber 156,945
15. pjtemplin 152,803

05.09.2008 at 08:38PM PDT, ID: 23391268

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

9.4

Can't ping computers on the other subnet

Zone: Network Routers

Hi everyone, I have a home network that is configured in the following way:

Cisco 2600 Router
Bell Sympatico DSL 192.168.1.1 ----------> Fa0/1 192.168.1.254 (External)
Fa0/0 192.168.0.254 (Internal) ------------> Catalyst 2900
Vlan1 only
192.168.0.0 Subnet

All the computers in the default Vlan1 can ping other computers in the 192.168.0.0 subnet no problem. The computers can also ping the default 0.254, 1.254 & 1.1 gateways no problem. They can also go out to the internet no problem.

I have however a laptop that is on the 192.168.1.0 subnet. The laptop has the following STATIC ip address assigned

IP: 192.168.1.5
Mask: 255.255.255.0
Gateway: 192.168.1.1
DNS: Dns of the ISP

The laptop can go out to the internet no problem, however whe I try to ping any hosts on the 192.168.0.0 subnet the request is timed out. I can ping the 192.168.1.254 interface fine. Here is a quick configuration of my router:

Current configuration : 1080 bytes
!
version 12.3
no parser cache
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 $1$LlbC$Ip4KIB.jgB54A.8c6.yci/
!
no aaa new-model
ip subnet-zero
ip cef
!
!
ip name-server 192.168.0.10
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
description Connection to the LAN
ip address 192.168.0.254 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface Serial0/0
no ip address
shutdown
!
interface FastEthernet0/1
description Connection to the internet
ip address 192.168.1.254 255.255.255.0
ip nat outside
duplex auto
speed auto
!
ip nat inside source list 101 interface FastEthernet0/1 overload
no ip http server
ip classless

ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
!
access-list 101 permit ip any any
!
!
!
dial-peer cor custom

What can i do to allow my laptop on 192.168.1.0 subnet access my computers on the 192.168.0.0 subnet ?

Start your free trial to view this solution

Question Stats

Zone: Computer Hardware

Question Asked By: Turbowy

Solution Provided By: donjohnston

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

05.09.2008 at 10:10PM PDT, ID: 21537917

Rank: Master

logic2:

what are the nat statements doing there ??
remove the inside and outside and it would work

05.09.2008 at 10:14PM PDT, ID: 21537929

Turbowy:

Hi Ineed the NAT statements in order for all the hosts on the 192.168.0.0 to go out to the internet. Without the NAT the computers cannot access the internet.

Thanks

05.10.2008 at 04:19AM PDT, ID: 21538505

Rank: Genius

donjohnston:

The problem(s) is that you're doing NAT on your 2600. As far as anything outside the 2600 is concerned, the 192.168.0.0 network doesn't exist. You should be able to access the 192.168.1.5 device from the 192.168.0.0 net but not the other way around.

If you need to initiate traffic to the 192.168.0.0 network from the 192.168.1.5 device, you'll need to create a static NAT entry.

The only catch is that (in this example) you will only be able to telnet in to one address.

                       
             ip nat inside source static tcp 192.168.0.x 23 192.168.1.254 23

Open in New Window

Accepted Solution

05.10.2008 at 12:56PM PDT, ID: 21540313

Rank: Master

logic2:

donjohnston seems a very expert user but i think there should be still some way to do and still use the nat but it needs a deep look at it

05.11.2008 at 07:45PM PDT, ID: 21544414

Turbowy:

Hello, I apologize for the late reply, however i have tried your suggestion of typing in
ip nat inside source static tcp 192.168.0.x 23 192.168.1.254 23

but it did not work, hosts on the 192.168.1.0 subnet still cannot ping any computers on 192.168.0.0 subnet... should this be perhaps controlled with the access lists?

05.12.2008 at 05:30AM PDT, ID: 21546247

Rank: Genius

donjohnston:

What application is the device on the 1.0 network trying to access? In my example, I was using telnet as the application (port 23).

05.12.2008 at 09:02PM PDT, ID: 21552233

Turbowy:

Hi I am trying to access RDP, here is the configuration of the router... but it still does not work, on my Bell sympatico router I have forwarded port 3389 to 192.168.1.254 which is the fa0/1 but still no luck

Router#sh run
Building configuration...

Current configuration : 1630 bytes
!
version 12.3
no parser cache
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 $1$LlbC$Ip4KIB.jgB54A.8c6.yci/
!
no aaa new-model
ip subnet-zero
ip cef
!
!
ip domain name paulaga.com
ip name-server 192.168.0.10
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
description Connection to the LAN
ip address 192.168.0.254 255.255.255.0
ip access-group inside in
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/0.2
description Connection to Vlan2
encapsulation dot1Q 2
ip address 10.10.10.254 255.0.0.0
ip helper-address 192.168.0.10
ip nat inside
!
interface Serial0/0
no ip address
shutdown
!
interface FastEthernet0/1
description Connection to the internet
ip address 192.168.1.254 255.255.255.0
ip access-group outside in
ip nat outside
duplex auto
speed auto
!
ip nat inside source list 23 interface FastEthernet0/1 overload
ip nat inside source static tcp 192.168.0.7 3389 interface FastEthernet0/1 3389
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
!
!
ip access-list extended inside
permit ip any any
permit tcp any any
ip access-list extended outside
permit tcp any host 192.168.1.254 eq 3389
permit ip any any
permit tcp any any
permit icmp any host 192.168.1.254 echo-reply
access-list 23 permit 192.168.0.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.255
!
!
!
dial-peer cor custom

05.12.2008 at 09:14PM PDT, ID: 21552284

Rank: Genius

donjohnston:

First, remove any ACL's from your interfaces until you get the forwarding to work. Otherwise, you could be troubleshooting two overlapping problems.

05.13.2008 at 04:41AM PDT, ID: 21553975

Turbowy:

Hi I have removed from Fa0/0 ip access-group inside in and from Fa0/1 ip access-group outside in, but im still having the same problem.

I use the access-list 23 permit 192.168.0.0 0.0.0.255 & access-list 23 permit 10.10.10.0 0.0.0.255 to allow the two vlans to go out to the internet.

Anything else that i can try?

Thank You

05.13.2008 at 04:51AM PDT, ID: 21554043

Rank: Genius

donjohnston:

post the output of a "show ip nat trans".

Then before you try to establish the remote desktop connection to 192.168.1.254, do a "debug ip nat"

05.15.2008 at 04:36AM PDT, ID: 21572402

Rank: Genius

donjohnston:

How did you get it to work?

20080236-EE-VQP-29 / EE_QW_2_20070628