Link to home
Start Free TrialLog in
Avatar of jimmylew52
jimmylew52Flag for United States of America

asked on

Accessing a network segment from a different segment on a Cisco 2901 router.

I have a Cisco 2901 router that has two internet links and a LAN link. I have add a forth interface, F0/1/0, to wet up a second LAN.

The second LAN can access the internet but I cannot get communication between the two LAN segments.

What needs to be configured to enable communication between the two Lan segments?
Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image

In most cases on routers if there in no access-lists assigned to interfaces inter VLAN communication should work by default.
Could you paste relevant parts of config (or even, better, whole config - remove sensitive parts before paste code here)?
Avatar of jimmylew52

ASKER

The config is forevermore long and I am not sure what part of it to post.
Start with the ACLs that are applied to the LAN interfaces and the show route output.
I dont see anything applied to the interface


RTR#sh route
route-map SERVERS-ISP2, permit, sequence 5
  Match clauses:
    ip address (access-lists): 150
  Set clauses:
    ip next-hop verify-availability 68.15.183.161 1 track 123  [up]
  Policy routing matches: 17693741 packets, 940829253 bytes
route-map SERVERS-ISP2, permit, sequence 10
  Match clauses:
    ip address (access-lists): ROUTE-MAP
  Set clauses:
    ip next-hop 105.233.195.161
  Policy routing matches: 1478341 packets, 128034459 bytes
route-map servers-isp2, permit, sequence 10
  Match clauses:
  Set clauses:
  Policy routing matches: 7117 packets, 1430947 bytes
route-map DMZ-ISP2, permit, sequence 10
  Match clauses:
    ip address (access-lists): ROUTE-MAP-DMZ
  Set clauses:
    ip next-hop 105.233.195.161
  Policy routing matches: 94655 packets, 20283882 bytes
route-map test123, permit, sequence 10
  Match clauses:
  Set clauses:
  Policy routing matches: 0 packets, 0 bytes
route-map isp2, permit, sequence 10
  Match clauses:
    ip address (access-lists): 105
    interface FastEthernet0/0/0
  Set clauses:
  Policy routing matches: 0 packets, 0 bytes
route-map isp1, permit, sequence 10
  Match clauses:
    ip address (access-lists): 105
    interface GigabitEthernet0/1
  Set clauses:
  Policy routing matches: 0 packets, 0 bytes
RTR#sh int f0/1/0
FastEthernet0/1/0 is up, line protocol is up
  Hardware is FastEthernet, address is e05f.b904.4a6c (bia e05f.b904.4a6c)
  Description: Developement$ES_WAN$$ETH-WAN$
  Internet address is 10.30.0.1/16
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, 100BaseTX/FX
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:01, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 2000 bits/sec, 2 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     1445383 packets input, 169195816 bytes
     Received 1421363 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog
     0 input packets with dribble condition detected
     67504 packets output, 9252894 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     460 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     1 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out
please post complete config. it sounds like a blocking acl or missing.
also do a show access-lists
Complete configure is impossible. To long and after sanitising it I do not think anything would be gained.

I have purchased a smart net for the router and opened a trouble ticket. Stil not working but I found out  each interface has to be assigned to a unique zone and the zone pairs set up. Also the inspected traffic has to be identified, still working on that.
Okay, can show youre Lan interface configuration. and the access-list that belong to them

also post the result of show access-lists
ASKER CERTIFIED SOLUTION
Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Route Maps were the problem. Everything not specified was routed to an external interface and I had not specified the new interface.