Vlan 2621 cisco router and two 2900xl cisco switches

Posted on 2004-11-18
Last Modified: 2012-06-22
Hello fellow techs :-)

This config is for a hotel that has two buildings
building A has hotel rooms and office
building B has just hotel rooms

They would like to supply internet access to hotel rooms and kept the office secure
Internet is in Building A were pix, router and one switch is.
Building B has the other switch.

                                          | pix     |
                                           |router  |
                                          -----------                 ------------
                                          | switch1|-------------| switch2|
                                          ------------                 -----------
                                              |                               |
                                         -----------                    -----------
                                         | users  |                    | users   |
                                        ------------                   ------------
I have a cisco pix 501 with internal ip of
there is a cisco 2621 router behind the pix with outside ip of and a inside ip of
There is a cisco 2900xl switch behind router with ip of and the other switch has ip of
I would like to vlan this network into two vlans
I would like vlan 1 to be network and vlan 2 to be network
these vlans do not need to have access to each other.  The office does not need to access hotel rooms vlan and hotel rooms need no access to office.  There office is peer to peer not my network just contracted to do this.  So they do not have a dhcp server of any kind.  I would need the router to understand both vlans and hand out ip addresses according to port or vlan tag.  Right now I have a lab setup in this example and no vlans configured.  I can ping everything and get internet access.  I must now vlan the lab.  Not sure how.  Also I would have to trunk the link running from switch A to router so that it understands both vlans.  Any help would be appreciated.
Question by:brknechtel
    1 Comment
    LVL 11

    Accepted Solution

    You need to trunk the line between the router and the switch, and also the connection between the two switches.  So your ethernet port on the switch is going to have an encapsulation statement added , and two subinterfaces .20 and .30, each with an IP address on their respective VLAN.  You can add ACLs to prevent traffic between the two subinterfaces.


    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    Suggested Solutions

    The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
    I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now