We have a small Linksys router in the 192.168.1.0 network, plugged into a Cisco 2950 Switch, in port 1, port 24 is connected to the primary 2950 in port 24. My Primary switch is our production switch with all the servers and routers connected, with all public IPs, so I don't want to goof it's function up. The only configuration changes made were on ports 24 on both switches to get them talking.
Set port mode to trunk, and turned off STP.
The only VLAN is VLAN1, in the switches.
I want to route the private network, 192.168.1.0 through the secondary switch to get to the internet. What do I need to do?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
"You will also need to put your hosts for that network in that VLAN." if the hosts are connected to the linksys already assigned to a VLAN, would that not take care of this?
'You will also need to put the WAN port of your linksys in the same VLAN as your internet connection." Will this be the VLAN I am creating above?
What would I need from the ISP?
Ok. Your questions helped me understand your original question better.
If you are plugging your hosts into the Linksys directly all you will need to worry about is the WAN port.
Since your managed switches only have one VLAN I am assuming that your ISP is delivering an ethernet connection and it is patched into one of your switches. Is this the case or do you have your internet connection terminating in a router and the router's internal interface is patched in to your switch?
If the internet connection is patched directly into the switch you would need a static public IP address, the ISP's assigned default gateway, and public DNS servers. Depending on the ISP you may need authentication information such as PPPoE credentials etc.
What type of connection is it and how does it get to your switch?
I am an ISP, normally someone else does this and I am trying to take care of it myself instead of outsourcing it and plus I am getting ready to take my CCNA exam. I wanted to setup a VLAN, instead of using the VLAN1, again for training.
I can assign a public IP to the linksys. The router is plugged into a primary switch, with all my other servers, it is patched to my backup/secondary switch. The linksys is plugged into the secondary switch, port 1. I have assigned 192.168.1.250 to VLAN1 in secondary switch, Primary has 192.168.1.200 in VLAN1.
My IP to my router is 12.195.84.1. I have all my DNS too.
This is in the .4 router............
router rip
network 10.0.0.0
network 12.0.0.0
network 63.0.0.0
!
ip classless
no ip forward-protocol udp tftp
no ip forward-protocol udp domain
no ip forward-protocol udp time
no ip forward-protocol udp netbios-ns
no ip forward-protocol udp netbios-dgm
no ip forward-protocol udp tacacs
ip route 0.0.0.0 0.0.0.0 12.118.65.101
ip route 0.0.0.0 0.0.0.0 12.118.65.57
ip route 0.0.0.0 0.0.0.0 12.118.65.109
ip route 0.0.0.0 0.0.0.0 12.118.65.53
ip route 172.16.0.0 255.240.0.0 Null0
ip route 192.168.0.0 255.255.0.0 Null0 (is this my route already configured?)
no ip http server
OK lets start with getting your Linksys LAN working.
Your 2 switches (Primary and Secondary) are trunked via port 24. Since you have that in place each switch can forward all traffic for each VLAN.
Since you only have VLAN 1 the trunk is not that big of a deal.
On your Linksys the WAN port must be in VLAN1 with your public address etc. This allows the Linksys access to the internet. Unless you are using your switches to do routing you will only need your VLAN1 interfaces in the switch for management.
If you are plugging your hosts into the Linksys directly you are done execpt for routing to the internet.
If you are not plugging the hosts in directly you need to create a VLAN in your secondary switch for your Linksys LAN port. You can do this my going into the interface config of the Cisco port you plugged Linksys LAN port into and typing
switchport mode access
switchport access vlan X (replace X with your vlan number)
This will create the vlan and assign the port at the same time. You will need to repeat this process for any host you want to add to the Linksys LAN. Assign each host port to the same vlan.
See if that will get your hosts talking with the Linksys and DHCP etc. If that works we will start on the internet routing part.
ip route 0.0.0.0 0.0.0.0 12.118.65.101
ip route 0.0.0.0 0.0.0.0 12.118.65.57
ip route 0.0.0.0 0.0.0.0 12.118.65.109
ip route 0.0.0.0 0.0.0.0 12.118.65.53
ip route 172.16.0.0 255.240.0.0 Null0
ip route 192.168.0.0 255.255.0.0 Null0
This is basically saying route anything with the address of 192.168.0.0 to the Null0 interface. This is there because 192.168 is not a public routable address.
The other routes look like multiple default routes (any host) can be sent to any of these gateways. (12.118.65.x)
I think where the confusion is coming in is you are forgetting that your Linksys is a router. Your 192.168.x.x network only exists behind the Linksys. When a host on 192.168.x.x tries to go to the internet your Linksys is using NAT (Network Address Translation) to make it look like all hosts are a single public IP address. As long as the public IP address is assigned to the Linksys in its config, your WAN port on the Linksys is patched into your VLAN1 and you have allowed that address to be routed on your public network you will get internet for the hosts behind the Linksys.
Does that make sense?
If you are wanting to try and get some hands on experience there are some good IOS simulators that you can play with and not worry about breaking things.
I have used Boson (not free but decent)
http://www.boson.com/
Here's snother I have heard good things about and it is opensource:
http://dynagen.org/
I used Boson a lot when I was studying for my CCNA. The hands on is essential to pass your test. Did you have any more questions about what you were working on?
Canallns, I did purchase a study guide which is all the ICND1 & 2 manuals, plus an IPOD with the lectures on it and it came online time routers, switches for hands on training, but their schedule is in 8 hour shifts and they are central time, so it is difficult to get my time in and work.
I do appreciate the advice and links. I will check them out.
Business Accounts
Answer for Membership
by: CanalInsPosted on 2009-08-19 at 07:09:19ID: 25132789
You will need to specify an interface in your router for the 192.168.1.0 network. This will be your default gateway for the hosts in the 192.168.1.0 network.
If you are allowing your linksys to do DHCP I would put the router's LAN port in its own vlan. You will also need to put your hosts for that network in that VLAN. This will prevent any accidental DHCP assignments.
You will also need to put the WAN port of your linksys in teh same VLAN as your internet connection. It will need to be assigned a static public address and you will need to get with your ISP for any specific settings needed to get the Linksys talking on the internet.
This setup would give you a standalone LAN that could get to the internet.