04-30-2013 11:44 AM - edited 03-04-2019 07:46 PM
The image of my current setup is below. I am tryint to connect the Central router to the ISP router through a switch. Same with the South router. However, I want the Central and South routers to not be on the same network. Central will be 222.222.222.0/30 and South will be 222.222.222.4/30. Packets between Central and South will be routed through the ISP router, including a VPN connection between the two. The problem I am having is that I can't get the crypto map setting to work on subinterfaces, so how can I keep this set up without needing to connect the two routers to the ISP router directly?
The ISP and that switch are meant to represent an Internet connection. This is why I can't have them on the same network.I am still pretty new to this, so forgive my ignorance if I haven't posted all the required information.
Solved! Go to Solution.
04-30-2013 07:28 PM
Add 2 vlans to the 2960; 1 vlan for South and 1 vlan for Central. create a trunk between the 2960 and the 2811 ISP router.
the configure the sub interfaces on the 2811 that represent each VLAN to be in either 222.222.222.0/30 and the other sub interface in 222.222.222.4/30.
so lets say your fa0/1 on your isp router is connected to the 2960:
fa0/1.100
description central
encapsulation dot1q 100
ip address 222.222.222.1 255.255.255.252
fa0/1.200
description south
encapsulation dot1q 200
ip address 222.222.222.4 255.255.255.252
(syntax off the top of my head)
=============================
Please remember to rate useful posts, by clicking on the stars below.
=============================
04-30-2013 07:28 PM
Add 2 vlans to the 2960; 1 vlan for South and 1 vlan for Central. create a trunk between the 2960 and the 2811 ISP router.
the configure the sub interfaces on the 2811 that represent each VLAN to be in either 222.222.222.0/30 and the other sub interface in 222.222.222.4/30.
so lets say your fa0/1 on your isp router is connected to the 2960:
fa0/1.100
description central
encapsulation dot1q 100
ip address 222.222.222.1 255.255.255.252
fa0/1.200
description south
encapsulation dot1q 200
ip address 222.222.222.4 255.255.255.252
(syntax off the top of my head)
=============================
Please remember to rate useful posts, by clicking on the stars below.
=============================
04-30-2013 08:19 PM
I swear I was trying that before and it wasn't working. But now it is... Oh well, no matter, I got the networks working now with your help. Now it's just the matter of getting the VPN to work. Thanks a lot.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide