No communication from No switchport network to VLAN network client PC

[ankitohc]

Hi 

I am trying to do the nat on below topology. I don't know why my client machine is not able to reach to 192.168.200.0 network. My switch can reach out to 192.168.200.0 not sure what is the issue? I have give the IP address to VLAN 1

I don't know what wrong I am doing in this topology. I need help to fix the issue.

Router config

Current configuration : 1066 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
ip name-server 8.8.8.8
ip name-server 4.2.2.2
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.200.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip route 192.168.100.0 255.255.255.0 192.168.200.2
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
!
access-list 1 permit 192.168.200.0 0.0.0.255
access-list 1 permit 192.168.100.0 0.0.0.255
no cdp advertise-v2
!
!
!
!
!
!
control-plane
!
!
!
!!
line con 0
line aux 0
line vty 0 4

Gateway of last resort is 192.168.0.1 to network 0.0.0.0

C 192.168.200.0/24 is directly connected, FastEthernet0/1
C 192.168.0.0/24 is directly connected, FastEthernet0/0
S 192.168.100.0/24 [1/0] via 192.168.200.2
S* 0.0.0.0/0 [1/0] via 192.168.0.1

!

Switch config

Switch#show running-config
Building configuration...

Current configuration : 1903 bytes
!
! Last configuration change at 04:44:01 UTC Fri Sep 22 2023
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
!
!
!
!
ip dhcp pool 100
network 192.168.100.0 255.255.255.0
default-router 192.168.100.2
dns-server 8.8.8.8 4.2.2.2
!
!
ip cef
no ipv6 cef
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Ethernet0/0
no switchport
ip address 192.168.200.2 255.255.255.0
duplex auto
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet1/0
!
interface Ethernet1/1
!
interface Ethernet1/2
!
interface Ethernet1/3
!
interface Ethernet2/0
!
interface Ethernet2/1
!
interface Ethernet2/2
!
interface Ethernet2/3
!
interface Ethernet3/0
!
interface Ethernet3/1
!
interface Ethernet3/2
!
interface Ethernet3/3
!
interface Ethernet4/0
!
interface Ethernet4/1
!
interface Ethernet4/2
!
interface Ethernet4/3
!
interface Ethernet5/0
!
interface Ethernet5/1
!
interface Ethernet5/2
!
interface Ethernet5/3
!
interface Ethernet6/0
!
interface Ethernet6/1
!
interface Ethernet6/2
!
interface Ethernet6/3
!
interface Ethernet7/0
!
interface Ethernet7/1
!
interface Ethernet7/2
!
interface Ethernet7/3
!
interface Ethernet8/0
!
interface Ethernet8/1
!
interface Ethernet8/2
!
interface Ethernet8/3
!
interface Ethernet9/0
!
interface Ethernet9/1
!
interface Ethernet9/2
!
interface Ethernet9/3
!
interface Vlan1
ip address 192.168.100.1 255.255.255.0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 192.168.200.1
ip route 192.168.100.0 255.255.255.0 Ethernet0/0
!
!
!
!
!
control-plane
!
!
line con 0
logging synchronous
line aux 0
line vty 0 4
!
!

end

[M02@rt37]

Hello @ankitohc,

Please modify Gateway on SW DHCP pool, you have:

default-router 192.168.100.2

Modify by : default-router 192.168.100.1

Also, delete that ip route on Switch:

ip route 192.168.100.0 255.255.255.0 Ethernet0/0

This subnet is diretcly connected to the Switch ; no need a route.

I know that is vlan 1 but, configure on SW port e1/0 and 2/0:

swithchport mode access 

switchport access vlan 1

spanning-tree portfast

Then, check IP config on PCs, try ping from PC to Gateway 192.168.100.1 and if it is OK try to ping 192.168.200.x.

Switch success to ping that network because it has got interface diretcly connected on that subnet.

Also, perhaps it is mandatory, but is better to let in this topology your SW as Layer2. Configure Trunk between Sw and Router. On router side configure sub-interfaces in front of that Switch.

https://www.grandmetric.com/knowledge-base/design_and_configure/router-on-a-stick-approach-cisco-configuration/

[ankitohc]

Now I am able to ping the 200 network however my switch is able to reach 8.8.8.8 but my pc can't 

also, why switch is giving 80 percent success rate not 100

[M02@rt37]

@ankitohc 

On Router ensure that this route is configured:

ip route 192.168.100.0 255.255.255.0 192.168.200.2

Also ensure that on Sw you have deleted this route:

ip route 192.168.100.0 255.255.255.0 Ethernet0/0

[paul driver]

Hello
Make the following amendments:

rtr
no ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp

sw
no ip route 0.0.0.0 0.0.0.0 192.168.200.1
no ip route 192.168.100.0 255.255.255.0 Ethernet0/0
ip route 0.0.0.0 0.0.0.0 Ethernet0/0 192.168.200.1