[Last Call] Learn how to a build a cloud-first strategyRegister Now


Vlan 2621 cisco router and two 2900xl cisco switches

Posted on 2004-11-18
Medium Priority
Last Modified: 2012-06-22
Hello fellow techs :-)

This config is for a hotel that has two buildings
building A has hotel rooms and office
building B has just hotel rooms

They would like to supply internet access to hotel rooms and kept the office secure
Internet is in Building A were pix, router and one switch is.
Building B has the other switch.

                                          | pix     |
                                           |router  |
                                          -----------                 ------------
                                          | switch1|-------------| switch2|
                                          ------------                 -----------
                                              |                               |
                                         -----------                    -----------
                                         | users  |                    | users   |
                                        ------------                   ------------
I have a cisco pix 501 with internal ip of
there is a cisco 2621 router behind the pix with outside ip of and a inside ip of
There is a cisco 2900xl switch behind router with ip of and the other switch has ip of
I would like to vlan this network into two vlans
I would like vlan 1 to be network and vlan 2 to be network
these vlans do not need to have access to each other.  The office does not need to access hotel rooms vlan and hotel rooms need no access to office.  There office is peer to peer not my network just contracted to do this.  So they do not have a dhcp server of any kind.  I would need the router to understand both vlans and hand out ip addresses according to port or vlan tag.  Right now I have a lab setup in this example and no vlans configured.  I can ping everything and get internet access.  I must now vlan the lab.  Not sure how.  Also I would have to trunk the link running from switch A to router so that it understands both vlans.  Any help would be appreciated.
Question by:brknechtel
1 Comment
LVL 11

Accepted Solution

PennGwyn earned 1000 total points
ID: 12631506
You need to trunk the line between the router and the switch, and also the connection between the two switches.  So your ethernet port on the switch is going to have an encapsulation statement added , and two subinterfaces .20 and .30, each with an IP address on their respective VLAN.  You can add ACLs to prevent traffic between the two subinterfaces.


Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have seen some questions on problems with SSH/telnet access to Cisco routers that may occur despite the fact that from a PC connected to your LAN, Internet connectivity is in place and users can access Internet sites without any issues.  There are…
There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question