NIM-ES2-8-P

[mdehsan230564]

Dear sir,

In my cisco 4331 router following are my configuration ad from external switch it is working fine and i can access internet as well as both the vlan each other. external switch are connected to interface GigabitEthernet0/0/0

4331 router config

ip dhcp pool vlan1
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 8.8.8.8 192.168.1.1 8.8.4.4
!
ip dhcp pool vlan2
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 8.8.8.8 192.168.1.1 8.8.4.4

interface GigabitEthernet0/0/0.1
bandwidth 100000000
encapsulation dot1Q 1 native
ip address 192.168.10.1 255.255.255.0
ip nat inside
!
interface GigabitEthernet0/0/0.2
bandwidth 100000000
encapsulation dot1Q 2
ip address 192.168.11.1 255.255.255.0
ip nat inside

interface GigabitEthernet0/0/1
bandwidth 100000000
bandwidth inherit 100000000
no ip dhcp client request tftp-server-address
ip address 192.168.1.6 255.255.255.0
ip nat outside
negotiation auto

Now i installed NIM-ES2-8-P in cisco 4331.

I can I assign ip address 192.168.11.2 in vlan 2 for NIM-ES2-8-P

So that device connected to the port of NIM-ES2-8-P should get IP from dhcp vlan 2 as well as access internet and access the device in vlan 1. for vlan 2 do i need to make that also NATIVE.

Thanks and best regards.

Mohammed Ehsan

[balaji.bandi]

the high level should work, but you need to add NAT configuration for the new IP address, which is the device doing NAT here?

or post full show run to understand better.

[mdehsan230564]

Dear sir,

Following are necessary config :-

ip name-server 8.8.8.8 8.8.4.4

ip domain name vrf Mgmt-intf mmalesayi.com
ip dhcp excluded-address 192.168.11.1 192.168.11.9
ip dhcp excluded-address 192.168.10.1 192.168.10.99
ip dhcp excluded-address 192.168.10.200 192.168.10.254
ip dhcp excluded-address 192.168.11.250 192.168.20.254

!
ip dhcp pool vlan1
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 8.8.8.8 192.168.1.1 8.8.4.4
!
ip dhcp pool vlan2
network 192.168.11.0 255.255.255.0
default-router 192.168.11.1
dns-server 8.8.8.8 192.168.1.1 8.8.4.4

interface GigabitEthernet0/0/0.1
bandwidth 100000000
encapsulation dot1Q 1 native
ip address 192.168.10.1 255.255.255.0
ip nat inside

interface GigabitEthernet0/0/0.2
bandwidth 100000000
encapsulation dot1Q 2
ip address 192.168.11.1 255.255.255.0
ip nat inside

interface GigabitEthernet0/0/1
bandwidth 100000000
bandwidth inherit 100000000
no ip dhcp client request tftp-server-address
ip address 192.168.1.6 255.255.255.0
ip nat outside
negotiation auto

interface range gigabitethernet0/1/0 - 7
switchport access vlan 2

interface Vlan1
no ip address
shutdown

interface Vlan2
no ip address
shutdown

ip nat inside source list 1 interface GigabitEthernet0/0/1 overload

ip route 0.0.0.0 0.0.0.0 192.168.1.1

access-list 1 permit 192.168.0.0 0.0.255.255

My main problem is that in this scenario i am not able to get dhcp ip for client. for both the vlan.

but if the config is like :- NO interface GigabitEthernet0/0/0.2

and

interface Vlan2
ip address 192.168.11.1
no shutdown

Every thing is ok both vlan getting ip from dhcp and can ping each other but there are some device work on application APPLE AIR connected to vlan 1 that we can ping from vlan 2 client but application cannot find the device.

but client from vlan 1 can see the device through apple air application.

Also client from vlan2 can ping the device connected to switch on vlan 1 but cannot ping the switch = vlan1= ip 192.168.10.3

Thanks and best regards

[Georg Pauwen]

Hello,

use the config below(no subinterfaces, just the Vlan (SVI) interfaces.

interface GigabitEthernet0/0/0
no ip address
!
interface GigabitEthernet0/0/1
bandwidth 100000000
bandwidth inherit 100000000
no ip dhcp client request tftp-server-address
ip address 192.168.1.6 255.255.255.0
ip nat outside
negotiation auto
!
interface range gigabitethernet0/1/0 - 7
switchport access vlan 2
!
interface Vlan1
ip address 192.168.10.1 255.255.255.0
ip nat inside
!
interface Vlan2
ip address 192.168.11.1
ip nat inside
!
ip nat inside source list 1 interface GigabitEthernet0/0/1 overload
!
ip route 0.0.0.0 0.0.0.0 192.168.1.1

!

access-list 1 permit 192.168.0.0 0.0.255.255

[mdehsan230564]

Dear Sir,

I am getting vlan1 down, kindly check the attachment.

Thanks and best regards.

[balaji.bandi]

Since you get VLAN 1 Down, because no port associated with that.

if you associate with any of the port from this : example :

config t

!

interface range gigabitethernet0/1/0
switchport access vlan 1

no shutdown

!

Connect any device to that port, the VLAN 1 Interface will come up, kindly test and advice.

Note : i was in impression this was the real gear.

[mdehsan230564]

Dear Sir,

Sir all port of NIM-ES2-8-P is in vlan 2.

interface GigabitEthernet0/0/0.1
bandwidth 100000000
encapsulation dot1Q 1 native
ip address 192.168.10.1 255.255.255.0
ip nat inside

interface GigabitEthernet0/0/0.2
bandwidth 100000000
encapsulation dot1Q 2
ip address 192.168.11.1 255.255.255.0
ip nat inside

interface GigabitEthernet0/0/0

above interface is connected to outside switch which have vlan1 and ip = 192.168.10.2 and vlan2 ip = 192.168.11.2

My scenario from starting is like :- interface GigabitEthernet0/0/0 this connected to external switch with trunk port.

And having vlan1 and vlan2 And working fine.

Both after installing NIM-ES2-8-P. I want to use this in vlan2 and also client connected to any of the port should get ip from dhcp.

I tried to assign all the port in vlan1, still not getting IP from dhcp.

Thanks and best regards.

[Georg Pauwen]

Hello,

did you delete the subinterfaces and did you configure both the SVIs ? Post your current running configuration again...

[mdehsan230564]

Dear Sir,

I deleted both the sub-interface of interface GigabitEthernet0/0/0 and after that
interface GigabitEthernet0/0/0
no ip address

AND

interface Vlan1
ip address 192.168.10.1 255.255.255.0
ip nat inside
!
interface Vlan2
ip address 192.168.11.1
ip nat inside

Thanks and best regards.

[Georg Pauwen]

Hello,

odd. I tested this in a lab, and it apparently worked. Can you post your current config (sh run) again ?

[balaji.bandi]

Thank you for the information, before i give an advise here

where is this port connecte ? - interface GigabitEthernet0/0/0

interface GigabitEthernet0/0/0
shutdown

and move the IP to below :

interface Vlan1
ip address 192.168.10.1 255.255.255.0
ip nat inside
no shutdown

interface Vlan2
ip address 192.168.11.1 255.255.255.0
ip nat inside
no shutdown

access-list 1 permit 192.168.0.0 0.0.255.255  < this should cover the NAT

Connect the device to Gi 0/1/0 and check you able to get DHCP IP from VLAN and able to get internet ?

[Georg Pauwen]

@balaji.bandi 

On a side note, I do think there is something wrong with either the visibility and/or the timestamps of the posts. If you look at my post from 2:48AM, it contains almost the exact same information as your post from 3:16AM (minus the fact that if you shut GigabitEthernet0/0/0 down, the trunked switch connected to that interface will have no access whatsoever). So my guess is that previous posts are not visible to other users, or yours was there before mine, and I did not see it, or vice versa.

[balaji.bandi]

Not sure how the community manages (i do not have that visibility) based on post the reply i have addressed and replied.

if you shut GigabitEthernet0/0/0 down, the trunked switch connected to that interface will have no access whatsoeve

If you look at my reply this is what i have asked ?  (where is this port connecte ? - interface GigabitEthernet0/0/0)

I only suggested based on the information and assuming that user is connecting  to switch port module on the router and testing ( at this stage)  until user inputs where he connected G0/0/0 - we dont know?

is this make sense ?