Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Need to add an additional subnet

Posted on 2009-05-12
11
Medium Priority
?
262 Views
Last Modified: 2012-05-06
We are currently using subnet 192.168.0.X and will soon be adding more devices.  At that point we will run out of IP addresses.  I want to add subnet 192.168.1.X.  We are using a Cisco ASA5510 (as our firewall/default gateway, ip address 192.168.0.1) and a Cisco switch stack.  I have added another scope to our DHCP server (192.168.1.X) and created a Superscope with both the existing scope and the new scope.  I configured an additional interface on the ASA5510 and connected it to our switch stack, although I'm not sure if that was necessary.  I also created another subnet in Active Directory Sites and Services (the orignal subnet wasn't listed, so I added that as well).  I can create a reservation on the new scope and use an ip address from it, but that computer cannot see any network resources or access the internet.  I know I am missing something (maybe at the switch?), but I'm not sure what.  Help!
0
Comment
Question by:NBTexas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
11 Comments
 
LVL 2

Expert Comment

by:CBalderson
ID: 24366386
Sounds like a routing problem...

You have a single switch stack with more than 254 ports ( All located at the same site)?  

For the second subnet you added 192.168.1.x.
Can the client who gets the reservation ping the gateway on the ASA5510 (192.168.1.1)?
0
 

Author Comment

by:NBTexas
ID: 24366470
We have three 48 port switches in the stack and one site.  We are running out of IP addresses because we use NetMotion to connect our mobile clients and it assigns two IP addresses from the scope - one is a virtual IP and the other is a Point of Presence IP.  We have close to 100 mobile clients, so we are using almost 200 IP addresses just for them.  I can ping the 192.168.1.1 gateway from the client with the reservation.
0
 
LVL 2

Expert Comment

by:CBalderson
ID: 24366851
Ok, can you add a second client to the 192.168.1.x subnet to be sure intra subnet traffic works?

I think we need to check and be sure there is a rule on the ASA allowing the traffic between the two subnets after we ensure that local is working first.

0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 

Author Comment

by:NBTexas
ID: 24367657
I added a second client on the 192.168.1.x subnet and both clients can ping each other.
0
 
LVL 2

Expert Comment

by:CBalderson
ID: 24367935
Good, can you see if you have any policies that allow traffic between the two...
Example
access-list 101 permit ip 192.168.0.0 255.255.255.0 192.168.1.0 255.255.255.0
0
 
LVL 7

Expert Comment

by:MariusSunchaser
ID: 24374978
Hi there.
Clients in the 192.168.1 network get the ip correctly from the DHCP server and can't talk with the computers in the 192.168.0 network, or do they have problems with getting a correct IP?
For troubleshooting, perform these steps:
1. Assign manually an IP in the 192.168.1 network, and see if things work. If they don't, tell us how far the connectivity goes. (Can it ping the ASA interface in the 192.168.0 network?)
2. Connect 2 hosts in the 192.168.1 network. Let them get IP through DHCP. Can they ping each other? Can they ping ASA's interface in their network? Can they ping ASA's interface in the other network?

Please update us with these information, to see if it's a routing problem, a DHCP problem, or maybe a problem with the DHCP relay client.
0
 

Author Comment

by:NBTexas
ID: 24376526
I have spoken to Cisco about this problem.  Apparently, it is a switch stack problem.  According to Cisco, I need to create an additional VLAN and enable IP routing on my switch stack.  Currently, all ports are in one VLAN.  They tell me that I have to create a second VLAN and include the ports that are to be on the new subnet.  This will be problematic, since I am not sure what is connected to each port.  I thought this would be a much easier task than it has turned out to be.  I should know better!
0
 
LVL 2

Expert Comment

by:CBalderson
ID: 24376845
That is ok, you can get it sorted if you want.
show mac-address-table
sh arp
Between the two you can map who is connected to what switchport.

I'd suggest you put all of your ports in the same VLAN and then begin splitting the VLAN if you want to implement the VLAN.

Have you considered using a Class B subnet mask 255.255.0.0?
0
 

Author Comment

by:NBTexas
ID: 24377470
I have considered changing the subnet mask.  Are there any issues with doing that?
0
 
LVL 2

Expert Comment

by:CBalderson
ID: 24377505
Not really.  Until all existing clients update they will think the old mask is still valid and will not be able to talk to new client in the extended range.  Depending on your DHCP lease and how many Static systems you have to update it could be a very quick shift.
0
 

Accepted Solution

by:
NBTexas earned 0 total points
ID: 24425413
I guess there are two possible solutions to this problem.  1. Create an additional VLAN on the switch stack and enable IP routing, or 2. Try another subnet mask.  We are going to try solution #2 and see what happens.  Thanks to everyone who responded to my question.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question