cannot ping cisco inside interface from outside

[nirmalunagar]

Hello folks,

I am using GNS3vm on VMware workstation. and here is the topology. 

cloud is connected on bridge mode so my local machine and cloud is in same network. from firefox(linux machine), I can access the internet perfectly. packet goes via Gi0/2 -> Gi0/1-> cloud but from my windows machine, ping goes upto only Gi0/1 interface(192.168.11.26). so incoming traffice not forwareded Gi0/1 to Gi0/2.I have added below static ip route

ip route 0.0.0.0 0.0.0.0 192.168.11.55

ip route 192.168.2.0 255.255.255.0 GigabitEthernet 0/1

ip route 192.168.11.0 255.255.255.0 GigabitEthernet 0/2

this the ping from my windows

please anyone know what I am missing here?

Thanks 

[Flavio Miranda]

Hi @nirmalunagar 

 From the configuration perspective, I think all is good. The only point I would commend is this two routes:

ip route 192.168.2.0 255.255.255.0 GigabitEthernet 0/1

ip route 192.168.11.0 255.255.255.0 GigabitEthernet 0/2

They are not necessary if they were placed on the router. The router know already the network 192.168.2.0 and 192.168.11.0 as it is directly connected. Reason for that, the VM has access to the internet, as you told.

 If the VM is properly configured with gateway, which must be as it access the internet, them I believe you are good for configurarion.  I believe the problem can be related to some security issue on the Vmware. I recall I got in a similar problem in the past and I only succeed to make it work with VirtualBox.

One last thing you can check is if your physical machine has route to 192.168.2.0 network.  If it is window machine you need to add a static route pointing to the bridge interface.

[nirmalunagar]

Thanks @Flavio Miranda 

I have removed both ip route and issue still there.

my windows machine didnt have that route, I have added manually. 

but still same problem

[Flavio Miranda]

Right. I would recommend you to do the same lab using VirtualBox. I ran in a similar issue in the past and I could not fix it.

Seems like some security issue.

[M02@rt37]

Hello @nirmalunagar,

Since you have a linux machine, do yo tcpdump your inbound interface 'e0' to see if icmp echo request frome your Windows machine enter ?

Because you ping 192.168.11.26 and say "so incoming traffice not forwareded Gi0/1 to Gi0/2". You do not need static route because network are directly connected to these interfaces.

[nirmalunagar]

I want to ping Gi0/2 interface

[nirmalunagar]

once I got ping to Gi0/2 it will ping to linux as well