Help configuring Cisco 1941 router
Posted on 2013-01-04
So, based on recommendations from here, I am replacing our existing 3com routers with newer Cisco 1941 routers (with security bundle). I have worked with the 3com routers in the past and am quite comfortable with them, however, I have not worked with cisco products much until recently. As such, I have successfully gotten into the 1941 router and have set up what I thought would work, but I cannot seem to communicate between my subnets, and cannot access the internet through any interface. Obviously I do not have it configured correctly. I have done some extensive research online, and have learned quite a bit, but still can't manage to put it all together properly. Right now the 1941 routers that I am configuring are only being bench configured, and I am not pressed for time, so I do have the ability to mess around with them before bringing them live. For my bench configurations I do have them connected to live WAN connections. I am also using the Cisco Configuration Professional application to set them up, as I am not too savvy with CLI. I can get around using CLI, but just not 100% comfortable.
I will first explain the network topology that the 1941 routers will be connected to.
We have 3 physical offices (A, B, and C). All are part of the same domain. All have their own subnet(s) and Win 2003 server. All have 1 WAN connection and are connected together via VPN.
Office A (Primary Domain Controller)
- 2 seperate buildings (same subnet) connected via CAT6 trunk.
- 2 primary Cisco managed switches (one in each building) with the following connected:
- 192.168.1.x general network (vlan 1)
- 192.168.2.x cisco ip phone network (vlan 100)
- Cisco UC500 phone router, one interface connection using 192.168.1.3 (vlan 1) and 192.168.2.3 (vlan 100)
- PDC for 192.168.1.x
- IP camera subnet using 192.168.5.x (only connects to router)
- primary router with the following physical connections: 192.168.1.2 (to 1 switch), 192.168.5.2 (to IP camera switch), and WAN connection to a static internet connection.
- primary router also has 192.168.2.2 (vlan 100) as a virtual interface.
- primary router has a vpn from Office B and Office C, terminating in the 192.168.1.x subnet.
- all subnets have full access to each other and the internet (only for email and general http browsing)
- no interally hosted services.
- primary router has a static route for 10.1.10.0 to 192.168.2.3 (phone system)
- similar setup as Office A
- networks 192.168.0.x (vlan 1)(general network), and 192.168.6.x (vlan 100)
- router physical interfaces: 192.168.0.2 and WAN
- router virtual interface 192.168.6.2 (vlan 100)
- no other subnets
- vpns from Offices A & C terminates in 192.168.0.x
- static route for 10.0.10.0 to 192.168.2.3
- very basic set up (small office)
- network 192.168.3.x
- router physical interfaces: 192.168.3.2 and WAN
- no other subnets
- no IP phone network
- vpns from Offices A & B terminates in 192.168.3.x
Currently I have the 1941 routers to replace the primary routers in Offices A & B, and I am working on Office A first. Once I know how to get this one set up, then I can utilize the same info to set up the Office B router, and the Office C router when I obtain it.
The 1941 router that I have for Office A has the following interfaces: Gig 0/0 and Gig 0/1 (built in), EHWIC 0 interface 0/0/0 gig WAN card, EHWIC 1 (half) interfaces 0/1/0 to 0/1/3 gig 4 port switch card.
My initial thought and attempt for setting up the Office A 1941 router was to have the following interface connections:
0/0 - reserved for me to connect/set up & future subnet or 2nd WAN
0/1 - 192.168.5.2 connected to IP camera switch
0/0/0 - connected to static WAN
0/1/0 - access mode connection to 192.168.1.x PDC (vlan 1 only)
0/1/1 - trunk mode connection to one switch (vlan 1 native, and vlan 100)
0/1/2 - trunk mode connection to second switch (vlan 1 native, and vlan 100)
0/1/3 - ? mode connection to UC500 IP Phone router (vlan 1 and vlan 100 ?, native ?)
and somehow creating virtual interfaces for 192.168.1.2 (vlan 1) and 192.168.2.2 (vlan 100)
I can physically connect to each interface (with the appropriate IP address), and can ping the 192.168.x.2 address that is associated to the interface. However, I cannot ping to any other subnet (or the 192.168.x.2 router address associated to it), nor can I see the internet at all. I can ping the static WAN interface ip, but not the default gateway or the external DNS addresses.
Long winded, I know, but I wanted to include everything I could think of.
Can someone help me out with configuring the 1941 router for Office A? (I'm sure from there I should be able to configure the others)