07-03-2018 04:12 AM - edited 03-03-2019 08:50 AM
Hello
i have a problem with ping isnide network wich connected cisco lan interface there my topology how i want to use cisco router
i have csico router wich have one ips interface f0/0 and lan interface f0/1 (192.168.247.0). lan interface connecet onther router with other lan (192.168.250.0) i can ping in 250.0 lan 247 but 247 can't ping 250 lan devices
Current configuration : 1766 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname doso ! boot-start-marker boot-end-marker ! enable secret 5 $1$TFVW$jcIdNpb8rMm9pWZN5Lnns/ ! no aaa new-model ! resource policy ! mmi polling-interval 60 no mmi auto-configure no mmi pvc mmi snmp-timeout 180 ip subnet-zero ip cef ! ! ! ! ! ! ! ! ! ! ! crypto isakmp policy 10 encr 3des authentication pre-share group 2 crypto isakmp key address ! ! crypto ipsec transform-set 3DES-SHA esp-3des esp-sha-hmac ! crypto map PRIMEVPN 15 ipsec-isakmp set peer set transform-set 3DES-SHA set pfs group2 match address 100 ! ! ! interface FastEthernet0/0 mac-address 0023.5e39.20b7 ip address dhcp ip access-group 102 in ip nat outside ip virtual-reassembly ip policy route-map NONAT duplex auto speed auto crypto map PRIMEVPN ! interface FastEthernet0/1 ip address 192.168.247.254 255.255.255.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! ip classless ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 ! ip http server no ip http secure-server ip nat inside source static tcp 192.168.250.12 3389 interface FastEthernet0/0 3389 ip nat inside source route-map NONAT interface FastEthernet0/0 overload ! access-list 100 permit ip 192.168.247.0 0.0.0.255 10.130.130.0 0.0.0.255 access-list 100 permit ip 10.130.130.0 0.0.0.255 192.168.247.0 0.0.0.255 access-list 103 permit tcp any eq 3389 any access-list 110 deny ip 192.168.247.0 0.0.0.255 10.130.130.0 0.0.0.255 access-list 110 permit ip 192.168.247.0 0.0.0.255 any route-map NONAT permit 10 match ip address 110 ! ! ! control-plane ! ! line con 0 line aux 0 line vty 0 4 password login ! end
Solved! Go to Solution.
07-04-2018 02:59 AM
If I understand you correctly, F0/1 connects to another router to the 192.168.250.x network. The 192.168.250.x can ping 192.168.247.254, but 192.168.247.254 cannot ping any of the 192.168.250.x. Correct?
If that is the case, the router needs a route to the next hop router off the LAN interface to the 192.168.250.x network. For example, if the next hop router is 192.168.247.250 then:
!
ip route 192.168.250.0 255.255.255.0 192.168.247.250
!
Hope this helps
07-04-2018 02:59 AM
If I understand you correctly, F0/1 connects to another router to the 192.168.250.x network. The 192.168.250.x can ping 192.168.247.254, but 192.168.247.254 cannot ping any of the 192.168.250.x. Correct?
If that is the case, the router needs a route to the next hop router off the LAN interface to the 192.168.250.x network. For example, if the next hop router is 192.168.247.250 then:
!
ip route 192.168.250.0 255.255.255.0 192.168.247.250
!
Hope this helps
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide