asked on

How to configure a management vlan on a 2851 router

Hello
I need to configure a management vlan on 2 2851 ISR's but have never done this on routers before.
What i've done is : Create vlan 91 on both routers (to use as management vlan)
vlan 91
name Management

Configure a subinterface as a trunk like so:
router1:
int G0/0.91
encapsulation dot1q 91
ip address 10.3.30.200 255.255.255.0
no shutdown

Then
int fa0/1/0
switchport mode access
switchport access vlan 91
description Management Vlan
Then connected PC to fa0/1/0(cross-over cable) with address ip address 10.3.30.202 255.255.255.0 and gateway ip address 10.3.30.200

router2:
int G0/0.91
encapsulation dot1q 91
ip address 10.3.30.201 255.255.255.0
no shutdown

Then (again router2)
int fa0/1/0
switchport mode access
switchport access vlan 91
description Management Vlan
Then connected PC to fa0/1/0(cross-over cable) with address ip address 10.3.30.203 255.255.255.0 and gateway ip address 10.3.30.201

Now a show ip int brief tells me that all is up/up
I can ping from router to router but am unable to ping either gateways from the pc's
In other words PC2 on router 2 cannot ping it's own gateway neither can pc1 ping it's own gateway.
Normally i would use a switch in between the router and pc, create a trunk between the 2 then an access port for the pc(pointing to it's gateway) but now since there is no switch in between and the router is suppose to perform both i'm a little lost (or maybe totally) on what to do in order to make this work.
Is there any chance someone can point me in the right direction on how to do this.?

Thanks for any and all help

ASKER CERTIFIED SOLUTION

Sniper98G

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Sniper98G

Note: Because these are routers the VLANs do not need to span the trunk. There should not even be a trunk be a trunk between them. Traffic should be routedacross a point to point link.

ibanez7

ASKER

Thanks very much i will try that first thing in the morning.

ibanez7

ASKER

Here`s what i did
I configured vlans with ip addresses and was able to ping the pc`s but then i was unable to get across to the other router.So i connected the 2 physically together and created a switchport and it worked. Now since they will be in different cities i wouldn`t be able to do it this way so i removed the trunk and instead i re-created the subinterfaces with different subnets created an ip route pointing to it and got it working this way. I forgot to mention that this is for testing purposes only and will be removed once the routers are installed. Here are the configs to give an idea on what i did:
router1#

interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/0.90
encapsulation dot1Q 90
ip address 10.x.x.x x.x.x.x
!
interface GigabitEthernet0/0.91 *****SUBINTERFACE CREATED FOR TESTING PURPOSES*****
description Management
encapsulation dot1Q 91
ip address 10.x.x.x x.x.x
!
interface GigabitEthernet0/1
ip address 10.x.x.x x.x.x
duplex auto
speed auto
!
interface FastEthernet0/1/0 *****ACCESS PORT FOR THE VLAN*****
description Test port
switchport access vlan 91
!
interface FastEthernet0/1/1
!
interface FastEthernet0/1/2
!
interface FastEthernet0/1/3
!
interface Vlan1
no ip address
!
interface Vlan91 ****VLAN 91 CREATED****
description Testing Vlan
ip address 10.x.x.x x.x.x

HERE IS THE IP ROUTE TO MATCH
ip route 10.x.x.x x.x.x outgoing interface

PC CONFIGURATION:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 10.x.x.x
Subnet Mask . . . . . . . . . . . : 255.x.x.x
Default Gateway . . . . . . . . . : 10.x.x.x
I did the same thing on Router2 to match .
Thanks again for the info and the help.