I have two subnets running on 2 sets of cabling and switches. I need to be able to access 1 server on the Admin network from the Students network. I cannot just flatten the networks down into one due to school policy. So I bought a cisco router (881). I have managed to assign an ip address to the WAN port. I could not assign an ip address directly to the switchports. It turned out I had to create a VLAN for one of these and assign the ip address to it. I set a static route in Windows so it know where the device is. I can now ping both of these ips on different subnet from either network. However, I cannot work out how to route between the two of them. I can't ping beyond the router. I understand subnets ok but I have only done VLANs and routing in theory so am now completely stuck.
Connecting two subnets with Cisco 881
- Thread starter ajstan
- Start date
Thanks for all the responses. I reset the router then followed Chief Wiggum's advice. Here's a show run of how the router is now. Also will post my windows route table.
Code:
!Cisco881#show run
Building configuration...
Current configuration : 1071 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Cisco881
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable secret 5 $1$P.ME$iEGbkCgAdLJJqrxSy7/mJ.
enable password bethnal2
!
no aaa new-model
!
!
ip source-route
!
!
ip cef
no ipv6 cef
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0
switchport access vlan 2
!
interface FastEthernet1
switchport access vlan 3
!
interface FastEthernet2
shutdown
!
interface FastEthernet3
shutdown
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 10.240.132.8 255.255.252.0
!
interface Vlan3
ip address 10.240.130.15 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
dialer-list 1 protocol ip permit
!
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password bethnal3
login
!
scheduler max-task-time 5000
end
Cisco881#From each network I can ping both switchports 0 (10.240.132.8) & 1 (10.240.130.15) but I cannot ping any other devices on the other networks. (Request time out)
The windows route table looks like this.
Code:
C:\Program Files\Support Tools>ping 10.240.132.22
Pinging 10.240.132.22 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 10.240.132.22:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Program Files\Support Tools>The windows route table looks like this.
Code:
C:\Program Files\Support Tools>route add -p 10.240.132.0 mask 255.255.252.0 10.2
40.130.15 metric 1
C:\Program Files\Support Tools>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 11 09 d8 a6 6d ...... VIA Compatable Fast Ethernet Adapter #2 - Teefer
2 Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.240.130.1 10.240.130.65 20
10.240.130.0 255.255.255.0 10.240.130.65 10.240.130.65 20
10.240.130.65 255.255.255.255 127.0.0.1 127.0.0.1 20
10.240.132.0 255.255.252.0 10.240.130.15 10.240.130.65 1
10.255.255.255 255.255.255.255 10.240.130.65 10.240.130.65 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
169.254.0.0 255.255.0.0 10.240.130.65 10.240.130.65 30
224.0.0.0 240.0.0.0 10.240.130.65 10.240.130.65 20
255.255.255.255 255.255.255.255 10.240.130.65 10.240.130.65 1
Default Gateway: 10.240.130.1
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
10.240.132.0 255.255.252.0 10.240.130.15 1
C:\Program Files\Support Tools>Thanks. Turns out the problem was that I hadn't made static routes on both PCs so just like you said so I could ping a host on other subnet but the ping didn't know the route back. Now I've done that I can ping both ways. Now onto windows GPOs and AD trusts. I feel more comfortable in that territory!