Link to home
Start Free TrialLog in
Avatar of yachtingpromotions
yachtingpromotionsFlag for United States of America

asked on

Connecting Cisco 3825 router to Catalyst 3560G via HWIC-1GE SFP

I have a Cisco 3825 router with HWIC-1GE SFP installed and connected. I need to trunk it and connect it to Cisco Catalyst 3560G switch. I can't seem to figure this one out. I have 2 VLANs that need to go thru this one link.
Attached is the image of what I am trying to do, called Cisco 3 times now, waste of my time.
 Below are the configs:
Switch:
interface GigabitEthernet0/52
 description TO 3825-Router Gig 0/0/0
 switchport trunk encapsulation dot1q
 switchport mode trunk
 speed nonegotiate

Router:

interface GigabitEthernet0/0/0
 no ip address
 negotiation auto
interface GigabitEthernet0/0/0.70
   encapsulation dot1q 70
interface GigabitEthernet0/0/0.92
   encapsulation dot1q 92




 product-data-sheet0900aecd8016be.jpg
Avatar of Soulja
Soulja
Flag of United States of America image

You need to assign the ip addressed to those subinterfaces also. They will then be the default gateway for their respective VLAN.
For example:

interface GigabitEthernet0/0/0.70
description Engineering
capsulation dot1q 70
ip address 192.168.70.1 255.255.255.0
 
 interface GigabitEthernet0/0/0.92
description Accounting
encapsulation dot1q 92
ip address 192.168.92.1 255.255.255.0

interface GigabitEthernet0/0/0.93
description Voice
encapsulation dot1q 93
ip address 192.168.93.1 255.255.255.0


Avatar of yachtingpromotions

ASKER

The problem is that these VLANs are already defined and have IP addresses. So when you try to assign an IP to the subinterface it states that "IT IS OVERLAPPING WITH VLAN #"  see below:

interface Vlan70
 ip address 192.168.10.1 255.255.255.0
 ip access-group 123 in
 ip flow ingress
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow
!

interface Vlan92
 ip address 66.175.117.129 255.255.255.128
 ip virtual-reassembly
 ip route-cache flow
Oh, you said you needed the vlans to go through the link, so I assumed you meant they needed to be routed by the 3825 router. Okay, so they are already routing between each other. Okay, so you don't need subinterfaces then. Subinterfaces on the ethernet ports are for if you wanted the router to perform the vlan routing. What you need to do is change the switchport connect to the router into a routed port. I see that you are using nat. Which port is the nat outside. Can you post the switch config? Thanks

NAP-CORE-SWITCH#sh run
Building configuration...

Current configuration : 5921 bytes
!

!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname NAP-CORE-SWITCH
!
boot-start-marker
boot-end-marker
!
logging buffered 52000
no logging console!

aaa new-model
!
!
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authorization exec default local
aaa authorization network sdm_vpn_group_ml_1 local
!
!
!
aaa session-id common
clock timezone EST -5
clock summer-time EDT recurring
system mtu routing 1500
ip name-server 4.2.2.2
ip name-server 69.25.1.1
ip name-server 4.2.2.1
!
!        
!
!
crypto pki trustpoint HTTPS_SS_CERT_KEYPAIR
 enrollment selfsigned
 serial-number
 revocation-check none
 rsakeypair HTTPS_SS_CERT_KEYPAIR
!
!
 
  quit
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
interface GigabitEthernet0/1
interface GigabitEthernet0/51

interface GigabitEthernet0/52
 description TO 3825-Router Gig 0/0/0
 switchport trunk encapsulation dot1q
 switchport mode trunk
 speed nonegotiate
!
interface Vlan1
 ip address 192.168.10.9 255.255.255.240
 no ip route-cache
 no ip mroute-cache
!
ip default-gateway 192.168.10.1
ip classless
ip http server
ip http secure-server
!
ip sla enable reaction-alerts
!

!
line con 0

!
end
Okay, what device has the interfac vlan 70 and 92. Could you post that config? Thanks
what we mean is configuring the ip address under the subinterface in the router itself, this ip configured will be the default gateway for PCs in the specific vlan
Soulja, router has vlan 70 and 92 see above, I posted vlan interfaces already.



WPRARAON:

READ the whole post, you can't assign an IP address to a subinterface that is within a certain VLAN, overlapping will occur......
I say scrap the vlan interfaces and create the subinterfaces of the gig connection similar to what I specified earlier. This should work for you. Also apply the necessary nat commands that you had on the vlan interfaces.
ASKER CERTIFIED SOLUTION
Avatar of yachtingpromotions
yachtingpromotions
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
thanks.
You do know however that the solution you provided using BVI's doesn't represent the solution for the original question and topology you provided. Nevertheless good luck.
Yes it does, but to each it's own Soulja. Perhaps you misunderstood the question and my setup, best of luck to you.
Thank you all.