Solved: 2621XM encapsulation question

willymaldonado1 · ‎10-11-2011

while back I configure one of my cisco router on the stick, I remember getting the info over the net; and before I was a ble to config the subint to an encapsulation I had to enable a command on the router, I did a mem erase on the unit, so now I need some help to get this router 2621XM enable it to run intervlans router ios c2600-i-mz.122-8.T10.bin, or it could be my other router ios c2600-ipbase-mz.123-6b.bin, I would really thankyou for your support...

cadet alain · ‎10-12-2011

Hi,

This is not supported on first IOS c2600-i-mz.122-8.T10.bin, and supported on second c2600-ipbase-mz.123-6b.bin.

Regards.

Alain.

Don't forget to rate helpful posts.

View solution in original post

Jon Marshall · ‎10-12-2011

IP Base does not support dot1q encapsualtion. You need IP Plus minimum.

If you do -

int fa0/0.10

encapsulatin dot1q 10

and it rejects the encapsulation command it is because it is not supported.

Jon

View solution in original post

Reza Sharifi · ‎10-11-2011

Here is document that will explain it and provide config with examples:

You basicaly need to create a sub-interface with the .1q encapsulation under the sub-interface and also the ip

c2600(config)#int fastEthernet 0/0.2c2600(config-subif)#encapsulation dot1Q 2c2600(config-subif)#ip address 10.10.10.1 255.255.255.o

http://www.cisco.com/en/US/tech/tk389/tk815/technologies_configuration_example09186a00800949fd.shtml

HTH

willymaldonado1 · ‎10-11-2011

Reza, thanks for your prompt reply, I understand that part very well, and I am sorry I should have mention that the encapsulation command it is not recognized in my router and I get this message

Router(config-subif)#encap

^

% Invalid input detected at '^' marker.

Router(config-subif)#encap ?

% Unrecognized command

Do you have a way to enableling that command?

cadet alain · ‎10-12-2011

Hi,

This is not supported on first IOS c2600-i-mz.122-8.T10.bin, and supported on second c2600-ipbase-mz.123-6b.bin.

Regards.

Alain.

Don't forget to rate helpful posts.

willymaldonado1 · ‎10-12-2011

Thanks Alain, not matter where did i look for to find out if it was supported or not on any of my ios's... couldnt find it, so I thankyou for that info; however as mentioned at the begining of my question, I belive that a command must to be enable on the router in order to be able to use the encapsulaton config under the subint, I tried to exec the encapsul command and keeps complaining

INTRT(config-subif)#encaps

INTRT(config-subif)#encapsulation

^

% Invalid input detected at '^' marker.

and that it's with the second ios the ipbase, does need to have like cef or cdp enable, I believe that it's a very simple task that needs to be done, so experts somewhere out there in the Cisco field I need your help here, I am on holt here to get a router on a stick going....

Reza Sharifi · ‎10-12-2011

Willy,

Can you post "sh run" and "sh ver" from the router?

HTH

willymaldonado1 · ‎10-12-2011

This is my config file

INTRT#sh run

Building configuration...

Current configuration : 6680 bytes

!

version 12.2

no service pad

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname INTRT

!

logging count

no logging buffered

enable secret 5 $1$EaPd$5XPE6q/UCwJVMbCCgmNlb.

!

ip subnet-zero

no ip source-route

ip cef

!

no ip domain-lookup

no ip dhcp conflict logging

ip dhcp excluded-address 10.0.100.0 10.0.100.99

!

ip dhcp pool INTERNET

network 10.0.100.0 255.255.255.0

default-router 10.0.100.1 255.255.255.0

dns-server 192.168.1.1

lease 5

!

ip dhcp pool internet

!

no ip bootp server

!

interface FastEthernet0/0

ip address 192.168.10.11 255.255.255.0

ip access-group 102 in

ip access-group 100 out

ip verify unicast reverse-path

no ip redirects

no ip unreachables

no ip proxy-arp

ip nat outside

ip route-cache flow

no ip route-cache cef

no ip mroute-cache

speed auto

full-duplex

no cdp enable

!

interface FastEthernet0/1

ip address 10.0.100.1 255.255.255.0

no ip proxy-arp

ip nat inside

no ip mroute-cache

speed 100

full-duplex

no cdp enable

!

interface FastEthernet0/1.1

no cdp enable

!

ip nat inside source list 100 interface FastEthernet0/0 overload

ip classless

ip route 0.0.0.0 0.0.0.0 192.168.1.1

ip route 0.0.0.0 0.0.0.0 192.168.10.10

ip route 0.0.0.0 0.0.0.0 172.17.0.1

no ip http server

no ip pim bidir-enable

!

no logging trap

access-list 23 permit 10.0.100.0 0.0.0.255

access-list 100 permit ip 10.0.100.0 0.0.0.255 any

access-list 100 permit ip any any

access-list 100 permit tcp 10.0.100.0 0.0.0.255 any eq www

access-list 100 permit tcp 10.0.100.0 0.0.0.255 any eq 3389

access-list 100 permit tcp 10.0.100.0 0.0.0.255 any eq ftp

access-list 100 deny tcp any 10.0.100.0 0.0.0.255 eq cmd

access-list 100 deny tcp any host 0.0.0.0 eq cmd

access-list 100 permit tcp 10.0.100.0 0.0.0.255 any eq 443

access-list 102 permit tcp any any gt 1023 established

access-list 102 permit tcp any any eq www established

access-list 102 permit udp any any eq domain

access-list 102 permit udp any eq domain any

access-list 102 permit tcp any any eq domain

access-list 102 permit tcp any eq domain any

access-list 102 deny tcp any any eq ftp-data

access-list 102 deny tcp any any eq ftp

access-list 102 deny tcp any any eq telnet

access-list 102 permit tcp any 10.0.100.0 0.0.0.255 established

access-list 102 deny ip 192.168.0.0 0.0.255.255 any log-input

access-list 102 deny ip 172.16.0.0 0.15.255.255 any log-input

access-list 102 deny ip 172.17.0.0 0.0.255.255 any log-input

access-list 102 deny ip 10.0.0.0 0.255.255.255 any log-input

access-list 102 deny ip 127.0.0.0 0.255.255.255 any log-input

access-list 102 deny ip 255.0.0.0 0.255.255.255 any log-input

access-list 102 deny ip 224.0.0.0 31.255.255.255 any log-input

access-list 102 deny ip host 0.0.0.0 any log-input

access-list 102 deny icmp any any

access-list 102 deny ip any any log-input

access-list 102 deny ip 192.0.0.0 0.255.255.255 any log-input

access-list 102 deny udp any any eq bootps

access-list 102 deny udp any any eq tftp

access-list 102 deny udp any any eq domain

access-list 102 deny udp any any eq time

access-list 102 deny udp any any eq tacacs

access-list 102 deny udp any any eq 70

access-list 102 deny udp any any eq 87

access-list 102 deny udp any any eq sunrpc

access-list 102 deny udp any any eq ntp

access-list 102 deny udp any any eq snmp

access-list 102 deny udp any any eq snmptrap

access-list 102 deny udp any any eq 2049

access-list 102 deny udp any any eq 6000

access-list 102 deny udp any any eq 6001

access-list 102 deny ip 10.0.0.0 0.0.0.255 any

access-list 102 deny tcp any any eq gopher

access-list 102 deny tcp any any eq 87

access-list 102 deny tcp any any eq pop3

access-list 102 deny tcp any any eq sunrpc

access-list 102 deny tcp any any eq nntp

access-list 102 deny tcp any any eq 123

access-list 102 deny tcp any any eq 144

access-list 102 deny tcp any any eq bgp

access-list 102 deny tcp any any eq irc

access-list 102 deny tcp any any eq 372

access-list 102 deny tcp any any eq exec

access-list 102 deny tcp any any eq login

access-list 102 deny tcp any any eq cmd

access-list 102 deny tcp any any eq lpd

access-list 102 deny tcp any any eq talk

access-list 102 deny tcp any any eq 520

access-list 102 deny tcp any any eq uucp

access-list 102 deny tcp any any eq 2000

access-list 102 deny tcp any any eq 2001

access-list 102 deny tcp any any eq 2002

access-list 102 deny tcp any any eq 68

access-list 102 deny tcp any any eq 6000

access-list 102 deny tcp any any eq 6001

access-list 102 deny tcp any any eq 6002

access-list 102 deny udp any any eq echo log-input

access-list 102 deny udp any eq echo any log-input

access-list 102 deny udp any any eq 445

access-list 102 deny udp any any eq netbios-dgm

access-list 102 deny udp any any eq netbios-ns

access-list 102 deny udp any any eq netbios-ss

access-list 102 deny udp any any eq rip

access-list 102 deny udp any any eq bootpc

access-list 102 deny tcp any any eq 67

access-list 102 deny ip any 0.0.0.255 255.255.255.0

access-list 102 deny ip any 0.0.0.0 255.255.255.0

access-list 102 deny tcp any host 0.0.0.0 eq cmd

access-list 102 deny tcp any any eq cmd log

access-list 102 permit tcp any 10.0.100.0 0.0.0.255 established log-input

access-list 102 deny tcp 192.168.10.0 0.0.0.255 any log

access-list 102 deny tcp any 192.168.10.0 0.0.0.255 log

access-list 102 deny udp any 192.168.10.0 0.0.0.255 log

access-list 102 permit udp 192.168.1.0 0.0.0.255 any eq bootpc

access-list 102 permit udp 192.168.1.0 0.0.0.255 any eq bootps

access-list 102 deny tcp any 192.168.10.0 0.0.0.255 eq 445 log-input

access-list 102 deny udp any any eq 23

access-list 102 deny tcp any any eq 123 log

access-list 102 deny tcp any any eq 123 log-input

access-list 102 deny udp any any eq 23 log-input

access-list 102 deny tcp any any eq telnet log-input

access-list 102 permit udp host 132.163.4.103 eq ntp 10.0.100.0 0.0.0.255 log-in

put

access-list 102 deny tcp any host 10.0.100.1 eq cmd log-input

access-list 102 deny udp 192.168.1.0 0.0.0.255 any eq bootps

access-list 102 deny udp 192.168.1.0 0.0.0.255 any eq bootpc

no cdp run

!

line con 0

exec-timeout 0 0

password 7 071724404F5B495446

logging synchronous

login

line aux 0

line vty 0 4

access-class 23 in

exec-timeout 2 0

password 7 05130303201E1E58484F5D5D44

login

line vty 5 15

access-class 23 in

password 7 05130303201E1E58484F5D5D44

login

!

end

THIS IS MY ROUTER VER

INTRT#sh ver

Cisco Internetwork Operating System Software

IOS (tm) C2600 Software (C2600-I-M), Version 12.2(8)T10, RELEASE SOFTWARE (fc1)

TAC Support: http://www.cisco.com/tac

Compiled Fri 30-May-03 02:45 by kellythw

Image text-base: 0x80008074, data-base: 0x80A2C2B0

ROM: System Bootstrap, Version 12.2(8r) [cmong 8r], RELEASE SOFTWARE (fc1)

INTRT uptime is 1 hour, 9 minutes

System returned to ROM by power-on

System image file is "flash:c2600-ipbase-mz.123-6b.bin"

cisco 2621XM (MPC860P) processor (revision 0x300) with 93184K/5120K bytes of mem

ory.

Processor board ID JAE0821J2B2 (2834618551)

M860 processor: part number 5, mask 2

Bridging software.

X.25 software, Version 3.0.0.

2 FastEthernet/IEEE 802.3 interface(s)

32K bytes of non-volatile configuration memory.

32768K bytes of processor board System flash (Read/Write)

Configuration register is 0x2102

Jon Marshall · ‎10-12-2011

IP Base does not support dot1q encapsualtion. You need IP Plus minimum.

If you do -

int fa0/0.10

encapsulatin dot1q 10

and it rejects the encapsulation command it is because it is not supported.

Jon

willymaldonado1 · ‎10-12-2011

Thank you all!! I will try a different ios.... and how could i close this question

Jon Marshall · ‎10-12-2011

Willy

You don't actually close a question as such.

If your question has been answered then you can use the ratings buttons to show that.

Jon