Inter-VLAN communication issue! Help!

[richarddowna]

I have two VLANs setup 10 and 20.

192.168.10.0 (VLAN10)

192.168.20.0 (VLAN20)

Host 192.168.10.254 cannot ping host 192.168.20.254,

but 192.168.20.254 can ping host 192.168.10.254 !

Host 192.168.10.254 on VLAN10 :

Can ping 127.0.0.1

Can ping 192.168.10.254

Can ping 192.168.10.1

Can ping 192.168.20.1

Can ping 192.168.20.0

Can ping 192.168.20.255

Cannot ping 192.168.20.254

Host 192.168.20.254 on VLAN20 :

Can ping 127.0.0.1

Can ping 192.168.20.254

Can ping 192.168.20.1

Can ping 192.168.10.1

Can ping 192.168.10.0

Can ping 192.168.10.255

Can ping 192.168.10.254

Here is the relevant info from sh run

interface FastEthernet0

switchport access vlan 10

no cdp enable

!

interface FastEthernet1

switchport access vlan 10

no cdp enable

!

interface FastEthernet2

switchport access vlan 10

no cdp enable

!

interface FastEthernet3

switchport access vlan 20

no cdp enable

!

interface Vlan1

no ip address

!

interface Vlan10

description General

ip address 192.168.10.1 255.255.255.0

ip nat inside

ip virtual-reassembly

!

interface Vlan20

description DMZ

ip address 192.168.20.1 255.255.255.0

ip nat inside

ip virtual-reassembly

!

no ip http server

no ip http secure-server

ip nat inside source list 1 interface Dialer0 overload

!

access-list 1 permit 192.168.10.0 0.0.0.255

access-list 1 permit 192.168.20.0 0.0.0.255

access-list 1 remark Permitted Subnets to go out to the Internet

dialer-list 1 protocol ip permit

no cdp run

!

end

Any ideas why VLAN10 cannot ping VLAN20's host IP?

Thanks

[Thotsaphon Lueangwattanaphong · Accepted solution]

Hi Guys,

      To make sure that Host-192.168.20.254 has been allowed icmp on its personal firewall.

Kind Regards,

Toshi

[richarddowna]

= EDIT =

Thank you that was the issue!

It seems that the network created on windows 7 was "untrusted" and therefore i had to enable echo requests.

I did this by:

Control Panel --> System and security --> Windows Firewall --> Advanced settings --> Inbound rules --> New rule --> custom rule

in Protocol and ports: Protocol: ICMPv4
on the same panel go to customize, choose "Specific ICMP types", check the box "echo request"

Cheers