connect Cisco router with PC- not getting ping from router to pc

[Mark1110]

I have installed new NIC on my PC and configured attached ip and gateway. Also configured router with below configuration. I am able to ping from PC to router but not able to ping from router to PC. any thing i am missing?

Router#sh run int fastEthernet 0
Building configuration...

Current configuration : 74 bytes
!
interface FastEthernet0
switchport access vlan 908
no ip address
end

Router#sh run int vlan 908
Building configuration...

Current configuration : 63 bytes
!
interface Vlan908
ip address 10.35.35.10 255.255.255.0
end

---------------

Interface IP-Address OK? Method Status Protocol
FastEthernet0 unassigned YES unset up up

Vlan908 10.35.35.10 YES manual up up

---------------

Router#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is 10.35.35.8 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 10.35.35.8
10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
C 10.30.1.26/32 is directly connected, Loopback1
C 10.35.35.0/24 is directly connected, Vlan908
L 10.35.35.10/32 is directly connected, Vlan908

-----------------

arp from router

Router#sh ip arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 10.20.35.1 - 00b6.70c7.49e0 ARPA Vlan1
Internet 10.35.35.8 1 001b.217d.781b ARPA Vlan908
Internet 10.35.35.10 - 00b6.70c7.49e0 ARPA Vlan908

-----------------------------------

NIC configuration

PC - 10.35.35.8

GW - 10.35.35.10

----------

Router configuration

Vlan 908 - 10.35.35.10

GW - 10.35.35.8

------------

Issue- 

Router#ping 10.35.35.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.35.35.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

[Georg Pauwen]

Hello,

post the full running configuration (sh run) of the router.

If this is a Windows PC, ICMP is blocked by default by Defender...

[Mark1110]

Hello Georg,

Windows Firewall was on. I turn off and restarted PC. still not able to ping. PFA for FW status. i have windows 11 PC

Thanks,

Mark

[Mark1110]

Also, PFA sh run

[Martin L]

It is likely your PC Firewall; do u have Firewall on or off? what is your OS ?

Regards, ML
**Please Rate All Helpful Responses **

[Mark1110]

Hi Martin,

Windows Firewall was on. I turn off and restarted PC. still not able to ping. PFA for FW status. i have windows 11 PC

Thanks,

Mark

[Georg Pauwen]

Hello,

can you post the output of ipconfig /all from the PC ?

[Mark1110]

Yes Georg, PFA ipconfig.

Thanks,

Mark

[Georg Pauwen]

Hello,

I assume the PC is connected to interface FastEthernet0. When you do a 'show vlan' on the router, does Vlan 908 actually show up ?

[Mark1110]

yes Georg. below is the output for sh int vlan 908

#sh int vlan 908

Vlan908 is up, line protocol is up
Hardware is EtherSVI, address is 00b6.70c7.49e0 (bia 00b6.70c7.49e0)
Internet address is 10.35.35.10/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:01, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
62135 packets input, 5473913 bytes, 0 no buffer
Received 27798 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
36673 packets output, 2766373 bytes, 0 underruns
0 output errors, 2 interface resets
1113 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out

Thanks,

Mark

[Martin L]

you tested ping with firewall off before rebooting PC or after reboot ?    my PC will turn firewall On after reboot.  So, turn it off, test ping , then reboot or turn firewall back on

Regards, ML
**Please Rate All Helpful Responses **

[Mark1110]

Did both today same result. Able to ping router from pc but cant ping pc from router.

Thanks,

Mark

[siskum]

Hello Mark,

I solved your problem. I drew and attached herewith diagram according to your router configuration that submitted. I have simplified configurations for your easy reference.

ICMP responce result attached herewith from all client mechines (PC, DNS-Server, Internet-Server) as well as Router too.

Some remarks I pointed out. Finally I belive this solution slove your problem. Give me thumbs up and helpful responce this make help to others too.

ICMP (Ping) responce

!!! Here is the simple Router configuration similar to your configurations.
!!! I configured the Router series C819HGW-PT-K9 that similar to yours.
!!! Most important configurations remains and other unwanted I deleted for your easy reference.
!!! You did not properly configured OSPF routing protocol therefore recommended to delete it.
!!! Better to use EIGRP Dynamic routing protocol rather than manual Static routing protocol.
!!! You missed "Switchport mode access" and "Switchport nonegotiate"
!!! I wonder why you implemented number of access-list?

Router>
Router>enable
Router#sh run
Building configuration...

Current configuration : 1471 bytes
!
version 15.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
ip dhcp pool MAIN_35
network 10.20.35.0 255.255.255.0
default-router 10.20.35.1
!
ip cef
no ipv6 cef
!
!
license udi pid C819HGW-PT-K9 sn FTX1806XDAR-
!
!
!
interface GigabitEthernet0
description Internet
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0
switchport access vlan 908
switchport mode access
switchport nonegotiate
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Serial0
no ip address
clock rate 2000000
shutdown
!
interface Vlan1
description MAIN_35
ip address 10.20.35.1 255.255.255.0
ip nat inside
!
interface Vlan908
mac-address 0001.6323.8c01
ip address 10.35.35.10 255.255.255.0
!
router eigrp 100
network 172.168.0.0
network 10.0.0.0

!
access-list 23 permit 10.10.10.0 0.0.0.127
access-list 102 permit ip 10.20.35.0 0.0.0.255 any
access-list 112 permit ip any any
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
!
!
end

Router#

[Mark1110]

thank you @siskum  but its not working. i think its something on my windows firewall. 

[siskum]

Hi,

It is great to hear that you yourself encountered the problem where that exists.

Regards/Sisira