2 Subnets, 1 Lan and a 1600 router...

[simonepezzano]

Good day.

I'm trying to help a friend who lives abroad so I don't have the hands on the hardware.

He wanted to use a old 1600 series router as a firewall in a LAN.

So the test setup is as follow:

-a d-link router for internet connectivity. It has a 4 ports switch integrated

-a 1600 router

-a few PCs

The PCs and the 1600 is linked to the d-link built-in switch with the following IP schema:

d-link -> 192.168.1.1

1600 -> 192.168.1.10

1600 -> 192.168.2.1 (secondary)

pcz -> 192.168.2.22 gw -> 192.168.2.1

Of course, I told him to add a route to the d-link for 192.168.0.0 through 192.168.1.1 and to set the default gateways properly.

So the problem is he can, from the 1600 router, ping anything, inbound, outbound... all works; but when he pings from a pc, nothing works.

Debugging icmps he discovered that:

00:07:59: ICMP: redirect rcvd from 192.168.1.1 -- for 212.216.112.112 use gw 224.39.4.246

Any suggestions?

Thanks a lot

[Georg Pauwen]

Hello,

I assume the PCs and the router are connected to the D-Link ? Can you try and connect the PCs to the D-Link and assign an IP address in the range 192.168.1.0 with a default gateway of 192.168.1.1 to the PCs ?

In this case you would not really need the router...

My apologies if I am misreading your physical setup...

Regards,

GP

[simonepezzano]

In fact I know that I do not need the 1600 router for connectivity. My friend just wanted to use IOS features for firewalling purposes, turning the 1600 into a gateway

[Georg Pauwen]

Hello,

I am not sure this works with only one Ethernet interface and secondary addressing. I think you need two Ethernet interfaces (e.g. the 1605 has two) for the router to function as a gateway...

Regards,

GP