jimmylew52
asked on
Accessing a network segment from a different segment on a Cisco 2901 router.
I have a Cisco 2901 router that has two internet links and a LAN link. I have add a forth interface, F0/1/0, to wet up a second LAN.
The second LAN can access the internet but I cannot get communication between the two LAN segments.
What needs to be configured to enable communication between the two Lan segments?
The second LAN can access the internet but I cannot get communication between the two LAN segments.
What needs to be configured to enable communication between the two Lan segments?
ASKER
The config is forevermore long and I am not sure what part of it to post.
Start with the ACLs that are applied to the LAN interfaces and the show route output.
ASKER
I dont see anything applied to the interface
RTR#sh route
route-map SERVERS-ISP2, permit, sequence 5
Match clauses:
ip address (access-lists): 150
Set clauses:
ip next-hop verify-availability 68.15.183.161 1 track 123 [up]
Policy routing matches: 17693741 packets, 940829253 bytes
route-map SERVERS-ISP2, permit, sequence 10
Match clauses:
ip address (access-lists): ROUTE-MAP
Set clauses:
ip next-hop 105.233.195.161
Policy routing matches: 1478341 packets, 128034459 bytes
route-map servers-isp2, permit, sequence 10
Match clauses:
Set clauses:
Policy routing matches: 7117 packets, 1430947 bytes
route-map DMZ-ISP2, permit, sequence 10
Match clauses:
ip address (access-lists): ROUTE-MAP-DMZ
Set clauses:
ip next-hop 105.233.195.161
Policy routing matches: 94655 packets, 20283882 bytes
route-map test123, permit, sequence 10
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map isp2, permit, sequence 10
Match clauses:
ip address (access-lists): 105
interface FastEthernet0/0/0
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map isp1, permit, sequence 10
Match clauses:
ip address (access-lists): 105
interface GigabitEthernet0/1
Set clauses:
Policy routing matches: 0 packets, 0 bytes
RTR#sh int f0/1/0
FastEthernet0/1/0 is up, line protocol is up
Hardware is FastEthernet, address is e05f.b904.4a6c (bia e05f.b904.4a6c)
Description: Developement$ES_WAN$$ETH-W AN$
Internet address is 10.30.0.1/16
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:01, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 2000 bits/sec, 2 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
1445383 packets input, 169195816 bytes
Received 1421363 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
67504 packets output, 9252894 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
460 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
1 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
RTR#sh route
route-map SERVERS-ISP2, permit, sequence 5
Match clauses:
ip address (access-lists): 150
Set clauses:
ip next-hop verify-availability 68.15.183.161 1 track 123 [up]
Policy routing matches: 17693741 packets, 940829253 bytes
route-map SERVERS-ISP2, permit, sequence 10
Match clauses:
ip address (access-lists): ROUTE-MAP
Set clauses:
ip next-hop 105.233.195.161
Policy routing matches: 1478341 packets, 128034459 bytes
route-map servers-isp2, permit, sequence 10
Match clauses:
Set clauses:
Policy routing matches: 7117 packets, 1430947 bytes
route-map DMZ-ISP2, permit, sequence 10
Match clauses:
ip address (access-lists): ROUTE-MAP-DMZ
Set clauses:
ip next-hop 105.233.195.161
Policy routing matches: 94655 packets, 20283882 bytes
route-map test123, permit, sequence 10
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map isp2, permit, sequence 10
Match clauses:
ip address (access-lists): 105
interface FastEthernet0/0/0
Set clauses:
Policy routing matches: 0 packets, 0 bytes
route-map isp1, permit, sequence 10
Match clauses:
ip address (access-lists): 105
interface GigabitEthernet0/1
Set clauses:
Policy routing matches: 0 packets, 0 bytes
RTR#sh int f0/1/0
FastEthernet0/1/0 is up, line protocol is up
Hardware is FastEthernet, address is e05f.b904.4a6c (bia e05f.b904.4a6c)
Description: Developement$ES_WAN$$ETH-W
Internet address is 10.30.0.1/16
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:01, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 2000 bits/sec, 2 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
1445383 packets input, 169195816 bytes
Received 1421363 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
67504 packets output, 9252894 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
460 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
1 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
please post complete config. it sounds like a blocking acl or missing.
also do a show access-lists
also do a show access-lists
ASKER
Complete configure is impossible. To long and after sanitising it I do not think anything would be gained.
I have purchased a smart net for the router and opened a trouble ticket. Stil not working but I found out each interface has to be assigned to a unique zone and the zone pairs set up. Also the inspected traffic has to be identified, still working on that.
I have purchased a smart net for the router and opened a trouble ticket. Stil not working but I found out each interface has to be assigned to a unique zone and the zone pairs set up. Also the inspected traffic has to be identified, still working on that.
Okay, can show youre Lan interface configuration. and the access-list that belong to them
also post the result of show access-lists
also post the result of show access-lists
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Route Maps were the problem. Everything not specified was routed to an external interface and I had not specified the new interface.
Could you paste relevant parts of config (or even, better, whole config - remove sensitive parts before paste code here)?