Solved

Cisco Routing Question

Posted on 2014-03-10
7
29 Views
Last Modified: 2015-09-15
I am planning on replacing some of our networking equipment as it is currently patch worked together.  Currently I am using a 3825 and a 3550 to do the routing at the hub location of our network.  My plan was to replace these two devices with a 3560X that I have.  

I have attached the config of the 3560X that I attempted to use.  The problem I have was the switch would only pass 192.168.1.X traffic out to our firewall.  My guess is it is a VLAN issue as traffic between all of the locations worked correctly.  I can provide any other relevant information to anyone who has any suggestions on this.
s1config.txt
0
Comment
Question by:joshparker
  • 5
  • 2
7 Comments
 

Author Comment

by:joshparker
Comment Utility
I should have mentioned that 192.168.1.1 is the address of my firewall connected via g0/22.
0
 
LVL 50

Expert Comment

by:Don Johnston
Comment Utility
1) Is your FW configured to NAT traffic from all the networks?

2) Does your FW have routes to the networks with the 3560 as the next hop?
0
 

Author Comment

by:joshparker
Comment Utility
My firewall is configure to nat traffic from all networks and also has routers for all networks back to the 3560X  I was able to ping from the firewall to all networks but could not ping the firewall from those networks.  

I am pretty sure the problem was the firewall and entire 192.168.1.X subnet being on VLAN1.  I could access outside the network from that subnet but not any of the others but was unsure how to solve the issue.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 50

Expert Comment

by:Don Johnston
Comment Utility
I was able to ping from the firewall to all networks but could not ping the firewall from those networks.  

Since pings are bi-directional, if the firewall can ping a device on network A, then a device on network A can ping the firewall... unless the firewall is blocking the ICMP echo request.

From a device on one of the problem networks, do a traceroute to the internet and see where it stops.  That would be a good starting point.
0
 

Author Comment

by:joshparker
Comment Utility
All traffic bound for outside the network stopped at the 3560 when doing a trace route.
0
 

Accepted Solution

by:
joshparker earned 0 total points
Comment Utility
Ended up using a different piece of equipment
0
 

Author Closing Comment

by:joshparker
Comment Utility
Couldnt find a solution so used a different piece of equipment
0

Featured Post

NetScaler Deployment Guides and Resources

Citrix NetScaler is certified to support many of the most commonly deployed enterprise applications. Deployment guides provide in-depth recommendations on configuring NetScaler to meet specific application requirements.

Join & Write a Comment

Let’s list some of the technologies that enable smooth teleworking. 
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now