Simplest 2514 Config

[scottkulpins]

Hi

I'm trying to set up a 2514 (11.2) in a lab environment to allow everything from one interface to be passed on to the other interface. My only goal is to have a private subnet on one interface and the other interface connected to a switch.

In my current config, I can ping everything on the "public" interface from the router (even beyond other routers), but I can't ping anyting on the "private" side; and I can't ping from the private to the "public" (198.162 is the private, and 10.173 is the public). Any suggestions or examples would be greatly appreciated!

[Georg Pauwen]

Hello,

if both of your interfaces are on the same 2514 router, your 'private' and your 'public' networks should be able to communicate. Can you post the configuration of your 2514 ?

Regards,

GP

www.solutionfinders.nl

[scottkulpins]

Thanks for you help! Here's my latest configuration: (I've tried many, many, many variations!)

Current configuration:

!

version 11.2

no service password-encryption

no service udp-small-servers

no service tcp-small-servers

!

hostname syststrouter

!

enable secret xxxx

enable password config

!

ip domain-name us-bgr-systst.us.abatos.com

ip name-server 10.173.206.250

ip name-server 136.157.43.49

!

interface Ethernet0

ip address 10.173.206.119 255.255.255.0

ip access-group 1 in

ip access-group 1 out

!

interface Ethernet1

ip address 192.168.1.1 255.255.255.0

ip access-group 1 in

ip access-group 1 out

!

interface Serial0

no ip address

shutdown

!

interface Serial1

no ip address

shutdown

!

ip default-gateway 10.173.206.1

no ip classless

access-list 1 permit any

snmp-server community public RO

!

line con 0

line aux 0

line vty 0 4

password xxx

login

!

end

As I mentioned, I can ping anywhere on the corporate network (Eth0) and also anywhere on the private side (Eth1) from the router itself; and the arp cache has many entries from the public side, and all (gateway entry and PC entries) from the private side. I simply can't ping from Eth1 to anything beyond the router. (I can ping both interfaces from the proivate side). Please let me know if there's any further info you may need (although I know it must be tough dealing with a verbose newbie!)

Thanks again!

[b.scherer]

if what your trying to ping is not on one of the subnets you have defined in your router then you will need to issue the "ip classless" cmd to pass traffic to those unknown subnets. you also wouldnt need that access list ;)