Unable to ping ISR 1100 router from 3560 Vlan 10 IP address

[brettw-sebastian]

Hi community! This is my first post. So here goes.

I have an ISR 1100 router with the nat outside interface getting an IP from my ISP via DHCP and the nat inside interface configured as 192.168.0.1 255.255.252.0. The nat inside interface is connected to a 3560 12 pt POE (192.168.0.2) on one of the four none POE interfaces. Vlan1 on the switch is working great and getting DHCP as expected. I have a Vlan 10 configured:

interface Vlan10
description PCs
ip address 192.168.10.1 255.255.255.0

On the switch, I can ping the router, 192.168.0.1. And I can ping vlan 10 itself, 192.168.10.1. But I can not ping out to the router from vlan 10. See below:

core-switch.bsebastian.me#ping 192.168.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms

core-switch.bsebastian.me#ping 192.168.10.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/3 ms

core-switch.bsebastian.me#ping 192.168.0.1 so 192.168.10.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:
Packet sent with a source address of 192.168.10.1
.....
Success rate is 0 percent (0/5)

Any help/guidance here would be greatly appreciated. I have been fighting with this for a couple of days now.

I am attaching my router and switch configs.

Also very important to note: If I remove the 1100 from the scenario, remove the Vlan1 Mgmt DHCP pool from the switch and connect to the Frontier provider EERO router, which is setup to use the same basic DHCP range, then it works. So I do not believe it is a switch config issue, but rather a router side issue.

PLEASE HELP!!!

Best regards,

Brett W. Sebastian

[balaji.bandi]

on ISR Router -

remove below config :

no ip default-gateway 192.168.0.2

If the ISR Router connected to switch using this post - interface GigabitEthernet0/0/1

On the switch 

interface GigabitEthernet0/13
description Uplink To isr1100
switchport mode access   <--- change this to trunk

If the switch acting as Layer 2 as best practice (make changes as below and test it)

On Router :

interface GigabitEthernet0/0/1.10
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly

On switch :

interface Vlan10
description PCs
ip address 192.168.10.2 255.255.255.0

Other option you can also do routing, but i would suggest best option as above.

The suggest made only to work VLAN 10 - if other vlan in the LAN to work you need to do same sub interface on router and LAN correct the IP.

Still not working post again all the modified config :