Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 49
  • Last Modified:

Cisco Routing Question

I am planning on replacing some of our networking equipment as it is currently patch worked together.  Currently I am using a 3825 and a 3550 to do the routing at the hub location of our network.  My plan was to replace these two devices with a 3560X that I have.  

I have attached the config of the 3560X that I attempted to use.  The problem I have was the switch would only pass 192.168.1.X traffic out to our firewall.  My guess is it is a VLAN issue as traffic between all of the locations worked correctly.  I can provide any other relevant information to anyone who has any suggestions on this.
s1config.txt
0
joshparker
Asked:
joshparker
  • 5
  • 2
1 Solution
 
joshparkerAuthor Commented:
I should have mentioned that 192.168.1.1 is the address of my firewall connected via g0/22.
0
 
Don JohnstonInstructorCommented:
1) Is your FW configured to NAT traffic from all the networks?

2) Does your FW have routes to the networks with the 3560 as the next hop?
0
 
joshparkerAuthor Commented:
My firewall is configure to nat traffic from all networks and also has routers for all networks back to the 3560X  I was able to ping from the firewall to all networks but could not ping the firewall from those networks.  

I am pretty sure the problem was the firewall and entire 192.168.1.X subnet being on VLAN1.  I could access outside the network from that subnet but not any of the others but was unsure how to solve the issue.
0
What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

 
Don JohnstonInstructorCommented:
I was able to ping from the firewall to all networks but could not ping the firewall from those networks.  

Since pings are bi-directional, if the firewall can ping a device on network A, then a device on network A can ping the firewall... unless the firewall is blocking the ICMP echo request.

From a device on one of the problem networks, do a traceroute to the internet and see where it stops.  That would be a good starting point.
0
 
joshparkerAuthor Commented:
All traffic bound for outside the network stopped at the 3560 when doing a trace route.
0
 
joshparkerAuthor Commented:
Ended up using a different piece of equipment
0
 
joshparkerAuthor Commented:
Couldnt find a solution so used a different piece of equipment
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 5
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now