Accessing a network segment from a different segment on a Cisco 2901 router.

I have a Cisco 2901 router that has two internet links and a LAN link. I have add a forth interface, F0/1/0, to wet up a second LAN.

The second LAN can access the internet but I cannot get communication between the two LAN segments.

What needs to be configured to enable communication between the two Lan segments?
LVL 1
jimmylew52Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JustInCaseCommented:
In most cases on routers if there in no access-lists assigned to interfaces inter VLAN communication should work by default.
Could you paste relevant parts of config (or even, better, whole config - remove sensitive parts before paste code here)?
0
jimmylew52Author Commented:
The config is forevermore long and I am not sure what part of it to post.
0
Matt VCommented:
Start with the ACLs that are applied to the LAN interfaces and the show route output.
0
Hey MSSPs! What's your total cost of ownership?

WEBINAR: Managed security service providers often deploy & manage products from a variety of solution vendors. But is this really the best approach when it comes to saving time AND money? Join us on Aug. 15th to learn how you can improve your total cost of ownership today!

jimmylew52Author Commented:
I dont see anything applied to the interface


RTR#sh route
route-map SERVERS-ISP2, permit, sequence 5
  Match clauses:
    ip address (access-lists): 150
  Set clauses:
    ip next-hop verify-availability 68.15.183.161 1 track 123  [up]
  Policy routing matches: 17693741 packets, 940829253 bytes
route-map SERVERS-ISP2, permit, sequence 10
  Match clauses:
    ip address (access-lists): ROUTE-MAP
  Set clauses:
    ip next-hop 105.233.195.161
  Policy routing matches: 1478341 packets, 128034459 bytes
route-map servers-isp2, permit, sequence 10
  Match clauses:
  Set clauses:
  Policy routing matches: 7117 packets, 1430947 bytes
route-map DMZ-ISP2, permit, sequence 10
  Match clauses:
    ip address (access-lists): ROUTE-MAP-DMZ
  Set clauses:
    ip next-hop 105.233.195.161
  Policy routing matches: 94655 packets, 20283882 bytes
route-map test123, permit, sequence 10
  Match clauses:
  Set clauses:
  Policy routing matches: 0 packets, 0 bytes
route-map isp2, permit, sequence 10
  Match clauses:
    ip address (access-lists): 105
    interface FastEthernet0/0/0
  Set clauses:
  Policy routing matches: 0 packets, 0 bytes
route-map isp1, permit, sequence 10
  Match clauses:
    ip address (access-lists): 105
    interface GigabitEthernet0/1
  Set clauses:
  Policy routing matches: 0 packets, 0 bytes
RTR#sh int f0/1/0
FastEthernet0/1/0 is up, line protocol is up
  Hardware is FastEthernet, address is e05f.b904.4a6c (bia e05f.b904.4a6c)
  Description: Developement$ES_WAN$$ETH-WAN$
  Internet address is 10.30.0.1/16
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, 100BaseTX/FX
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:01, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 2000 bits/sec, 2 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     1445383 packets input, 169195816 bytes
     Received 1421363 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog
     0 input packets with dribble condition detected
     67504 packets output, 9252894 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     460 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     1 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out
0
Benjamin Van DitmarsCommented:
please post complete config. it sounds like a blocking acl or missing.
also do a show access-lists
0
jimmylew52Author Commented:
Complete configure is impossible. To long and after sanitising it I do not think anything would be gained.

I have purchased a smart net for the router and opened a trouble ticket. Stil not working but I found out  each interface has to be assigned to a unique zone and the zone pairs set up. Also the inspected traffic has to be identified, still working on that.
0
Benjamin Van DitmarsCommented:
Okay, can show youre Lan interface configuration. and the access-list that belong to them

also post the result of show access-lists
0
JustInCaseCommented:
The second LAN can access the internet but I cannot get communication between the two LAN segments.
PBR is set (according to route-maps that are given), so beside access-lists assigned to interfaces also problem could be PBR. Since if packets are not using route table than packets are forwarded by PBR directly to ISP. In that case there is no traffic between two network segments.
So, it could be usefull ...
#sh run | s interface
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jimmylew52Author Commented:
Route Maps were the problem. Everything not specified was routed to an external interface and I had not specified the new interface.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.