Cisco Routing Question

I am planning on replacing some of our networking equipment as it is currently patch worked together.  Currently I am using a 3825 and a 3550 to do the routing at the hub location of our network.  My plan was to replace these two devices with a 3560X that I have.  

I have attached the config of the 3560X that I attempted to use.  The problem I have was the switch would only pass 192.168.1.X traffic out to our firewall.  My guess is it is a VLAN issue as traffic between all of the locations worked correctly.  I can provide any other relevant information to anyone who has any suggestions on this.
s1config.txt
joshparkerAsked:
Who is Participating?
 
joshparkerAuthor Commented:
Ended up using a different piece of equipment
0
 
joshparkerAuthor Commented:
I should have mentioned that 192.168.1.1 is the address of my firewall connected via g0/22.
0
 
Don JohnstonInstructorCommented:
1) Is your FW configured to NAT traffic from all the networks?

2) Does your FW have routes to the networks with the 3560 as the next hop?
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
joshparkerAuthor Commented:
My firewall is configure to nat traffic from all networks and also has routers for all networks back to the 3560X  I was able to ping from the firewall to all networks but could not ping the firewall from those networks.  

I am pretty sure the problem was the firewall and entire 192.168.1.X subnet being on VLAN1.  I could access outside the network from that subnet but not any of the others but was unsure how to solve the issue.
0
 
Don JohnstonInstructorCommented:
I was able to ping from the firewall to all networks but could not ping the firewall from those networks.  

Since pings are bi-directional, if the firewall can ping a device on network A, then a device on network A can ping the firewall... unless the firewall is blocking the ICMP echo request.

From a device on one of the problem networks, do a traceroute to the internet and see where it stops.  That would be a good starting point.
0
 
joshparkerAuthor Commented:
All traffic bound for outside the network stopped at the 3560 when doing a trace route.
0
 
joshparkerAuthor Commented:
Couldnt find a solution so used a different piece of equipment
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.