troubleshooting Question

Help configuring Cisco 1941 router

Avatar of JP D
JP DFlag for Canada asked on
RoutersHardware FirewallsNetwork Architecture
61 Comments1 Solution5909 ViewsLast Modified:
Hi Experts,

So, based on recommendations from here, I am replacing our existing 3com routers with newer Cisco 1941 routers (with security bundle).  I have worked with the 3com routers in the past and am quite comfortable with them, however, I have not worked with cisco products much until recently.  As such, I have successfully gotten into the 1941 router and have set up what I thought would work, but I cannot seem to communicate between my subnets, and cannot access the internet through any interface.  Obviously I do not have it configured correctly.  I have done some extensive research online, and have learned quite a bit, but still can't manage to put it all together properly.  Right now the 1941 routers that I am configuring are only being bench configured, and I am not pressed for time, so I do have the ability to mess around with them before bringing them live.  For my bench configurations I do have them connected to live WAN connections.  I am also using the Cisco Configuration Professional application to set them up, as I am not too savvy with CLI.  I can get around using CLI, but just not 100% comfortable.

I will first explain the network topology that the 1941 routers will be connected to.

We have 3 physical offices (A, B, and C).  All are part of the same domain.  All have their own subnet(s) and Win 2003 server.  All have 1 WAN connection and are connected together via VPN.

Office A (Primary Domain Controller)
- 2 seperate buildings (same subnet) connected via CAT6 trunk.
- 2 primary Cisco managed switches (one in each building) with the following connected:
     - 192.168.1.x general network (vlan 1)
     - 192.168.2.x cisco ip phone network (vlan 100)
     - Cisco UC500 phone router, one interface connection using 192.168.1.3 (vlan 1) and 192.168.2.3 (vlan 100)
     - PDC for 192.168.1.x
- IP camera subnet using 192.168.5.x (only connects to router)
- primary router with the following physical connections: 192.168.1.2 (to 1 switch), 192.168.5.2 (to IP camera switch), and WAN connection to a static internet connection.
- primary router also has 192.168.2.2 (vlan 100) as a virtual interface.
- primary router has a vpn from Office B and Office C, terminating in the 192.168.1.x subnet.
- all subnets have full access to each other and the internet (only for email and general http browsing)
- no interally hosted services.
- primary router has a static route for 10.1.10.0 to 192.168.2.3 (phone system)

Office B
- similar setup as Office A
- networks 192.168.0.x (vlan 1)(general network), and 192.168.6.x (vlan 100)
- router physical interfaces: 192.168.0.2 and WAN
- router virtual interface 192.168.6.2 (vlan 100)
- no other subnets
- vpns from Offices A & C terminates in 192.168.0.x
- static route for 10.0.10.0 to 192.168.2.3

Office C
- very basic set up (small office)
- network 192.168.3.x
- router physical interfaces: 192.168.3.2 and WAN
- no other subnets
- no IP phone network
- vpns from Offices A & B terminates in 192.168.3.x

Currently I have the 1941 routers to replace the primary routers in Offices A & B, and I am working on Office A first.  Once I know how to get this one set up, then I can utilize the same info to set up the Office B router, and the Office C router when I obtain it.

The 1941 router that I have for Office A has the following interfaces: Gig 0/0 and Gig 0/1 (built in), EHWIC 0 interface 0/0/0 gig WAN card, EHWIC 1 (half) interfaces 0/1/0 to 0/1/3 gig 4 port switch card.

My initial thought and attempt for setting up the Office A 1941 router was to have the following interface connections:
0/0 - reserved for me to connect/set up & future subnet or 2nd WAN
0/1 - 192.168.5.2 connected to IP camera switch
0/0/0 - connected to static WAN
0/1/0 - access mode connection to 192.168.1.x PDC (vlan 1 only)
0/1/1 - trunk mode connection to one switch (vlan 1 native, and vlan 100)
0/1/2 - trunk mode connection to second switch (vlan 1 native, and vlan 100)
0/1/3 - ? mode connection to UC500 IP Phone router (vlan 1 and vlan 100 ?, native ?)

and somehow creating virtual interfaces for 192.168.1.2 (vlan 1) and 192.168.2.2 (vlan 100)

I can physically connect to each interface (with the appropriate IP address), and can ping the 192.168.x.2 address that is associated to the interface.  However, I cannot ping to any other subnet (or the 192.168.x.2 router address associated to it), nor can I see the internet at all.  I can ping the static WAN interface ip, but not the default gateway or the external DNS addresses.

Long winded, I know, but I wanted to include everything I could think of.

Can someone help me out with configuring the 1941 router for Office A? (I'm sure from there I should be able to configure the others)
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 61 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 61 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros