how to enable another segment

[anitachoi3]

Hi,

I config the 1811 to be a FW. It can filter and block IM service if the PC and workstation are on the VLAN1. It is working properly.

R1

interface VLAN1

ip address 192.168.12.1 255.255.255.0

I will put another router and connect to 192.168.12.0 segment.

R2

Interface FE0/0

ip address 192.168.12.2 255.255.255.0

Interface FE0/1

ip address 192.168.18.2 255.255.255.0

Interface FE0/2

ip address 192.168.19.2 255.255.255.0

I find that all packets of R2 (192.168.18.0/24 and 192.168.19.0/24) are blocked by 1811.

How to configurate the 1811 so that the 1811 can allow those segment go out and protect those two segments?

rdgs

[a.alekseev]

run some routing protocol (ospf, eigrp) or use static routes.

on r1

ip route 192.168.18.0 255.255.254.0 192.168.12.2

on r2 i think

ip route 0.0.0.0 0.0.0.0 192.168.12.1

[anitachoi3]

Hi,

the routing had been configured.

If I disable the firewall, the packets can access out side.

R1

interface Vlan1

no ip inspect sdm_ins_in_152 in

If I enable fw again, two segment packets are blocked in 1811. any idea?

rdgs