Noob asking for help with switch, router and WLC

[Sam31]

Hello, as the title suggests, I am new at CISCO. I am not studying for any exams, nor am I involved in networking at my job. I just want to learn how things work and went online to buy a bunch of used equipment just because.
So, I purchased some used, end of life products such as a Cisco 2921/K9 router, a few switches but I am using a Cisco Catalyst 2950 and a Wireless Controller Cisco 5508 with an AP AIR - I have no idea which model at this time.

I am trying to cascade three networks and have the clients on each communicate with eachother. 
Doing this at home, my ISP is accessed through a regular home router , a regular home second router followed by the cisco router.

Here is how I have them setup and how I want them to function:
Home router, gateway to the internet - Moto with a 192.168.0.0/24 internal network. on it, I DMZ the next router which has an IP of 192.168.0.10 - I can't really setup anything on this because it is controlled by the ISP. Can't even update firmware.
Second Router - a TPLink router with an internal network of 192.168.1.0/24 - Routing is done, all of its clients can communicate with the previous network. This router is connected to the previous one through RJ45 from LAN (on Motorola) to WAN (on TPLink). To this router, on another LAN port, I connected through an RJ45 my third router, a Cisco 2921.
This router is also DMZ on TPLink and it is connected to GE0/0 through an RJ45 with an IP of 192.168.1.10
First router is the gateway for first network, second router is the gateway for the second network and third router is the gateway for the third network with 192.168.0.1, 192.168.1.1 and Cisco supposedly being 192.168.2.1.

Now - Cisco Router has GE0/0 attached on 192.168.1.10 and GE0/1 I gave it 192.168.2.1
To GE0/1 I attached a switch through RJ45. This goes from GE0/1 to FE0/1 on the switch.
I want to be able to reach the web interface of switch and router from any network. I also want to be able to SSH into them but only from local network.
Problem is some pings go through while others don't. Switch is Layer 2 so it shouldn't route anything. I am also trying to avoid using VLANs but I will want to connect the Wireless Controller and AP to the switch in the future.
Here is my router running-config:

CiscoRouter>en
CiscoRouter#show running-config
Building configuration...

Current configuration : 1537 bytes
!
! Last configuration change at 14:40:33 UTC Mon May 27 2024
version 15.3
service config
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CiscoRouter
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
ip cef
!
!
!
!
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
license udi pid CISCO2921/K9 sn FGL180111S6
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.10 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 192.168.0.0 255.255.255.0 192.168.1.1
ip route 192.168.0.0 255.255.255.0 GigabitEthernet0/0
ip route 192.168.1.0 255.255.255.0 192.168.1.1
ip route 192.168.1.0 255.255.255.0 GigabitEthernet0/0
!
!
!
access-list 1 permit 192.168.2.0 0.0.0.255
!
control-plane
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
login
transport input all
!
scheduler allocate 20000 1000
!
end

CiscoRouter#




And here is my switch running config:

CiscoLowerSwitch>en
CiscoLowerSwitch#show running-config
Building configuration...

Current configuration : 1198 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname CiscoLowerSwitch
!
!
ip subnet-zero
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip default-gateway 192.168.2.1
ip http server
!
line con 0
line vty 5 15
!
!
end

CiscoLowerSwitch#


I have a bunch of clients connected to the switch and I want something like this:
Have internet access for all, be able to type 192.168.2.1 in browser and access the router webUI and type 192.168.2.10 in browser and access the switch webUI.
Again, if anyone can please help and put it in the words a dum dum like me would be able to understand, I would appreciate it.
Thank you.

[balaji.bandi · Accepted solution]

I will do step by step rather fixing all at one,. so you not going anywhere to do troubleshooitng.

You do not below config, as you have already have default route point to 1.1

ip route 192.168.0.0 255.255.255.0 192.168.1.1
ip route 192.168.0.0 255.255.255.0 GigabitEthernet0/0
ip route 192.168.1.0 255.255.255.0 192.168.1.1
ip route 192.168.1.0 255.255.255.0 GigabitEthernet0/0

On the switch  if you like to use default VLAN ?

then change below config :

interface Vlan1
ip address 192.168.2.X 255.255.255.0 ( X is one of the free IP)
no ip route-cache
no shutdown

at this stage Switch should able to ping 192.168.2.1 also able to ping 8.8.8.8

if that is working - any client connect to switch using 192.168.2.Y /24 should able to get to Internet (make sure you use google DNS 8.8.8.8)

On the switch you can also configure DHCP for the client to get IP address rather doing static as a example below :

configure terminal
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp pool MY-LAN
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8

[Sam31]

Thank you so much for your reply. It really helped.
Right now I have the router all set up. It seems to be working properly and I can ping all IPs on network as well as outside the network.
Here is the running-config

Spoiler

CiscoRouter#show running-config
Building configuration...

Current configuration : 1335 bytes
!
! Last configuration change at 16:31:52 UTC Mon May 27 2024
version 15.3
service config
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CiscoRouter
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
ip cef
!
!
!
!
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
license udi pid CISCO2921/K9 sn FGL180111S6
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.10 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
!
!
access-list 1 permit 192.168.2.0 0.0.0.255
!
control-plane
!
!
!
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
login
transport input all
!
scheduler allocate 20000 1000
!
end

CiscoRouter#

And here are ping results from router terminal:

Spoiler

CiscoRouter#ping 192.168.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
CiscoRouter#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
CiscoRouter#ping 192.168.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
CiscoRouter#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/20/28 ms
CiscoRouter#

However the switch is now able to access some of the internal networks but not the gateway for the internet and therefore no internet. 
The switch is running the default vlan 1. From what I understand I do not need to setup a vlan 1 on the router due to it assigning a "logical" one if there is only one.
Here is the new switch running-config:

Spoiler

CiscoLowerSwitch#show running-config
Building configuration...

Current configuration : 1325 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname CiscoLowerSwitch
!
!
ip subnet-zero
ip dhcp excluded-address 192.168.2.1 192.168.2.10
!
ip dhcp pool DynamicPool
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.2.10 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 5 15
!
!
end

CiscoLowerSwitch#show running-config
Building configuration...

Current configuration : 1325 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname CiscoLowerSwitch
!
!
ip subnet-zero
ip dhcp excluded-address 192.168.2.1 192.168.2.10
!
ip dhcp pool DynamicPool
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
!
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.2.10 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 5 15
!
!
end

And here are the ping results from switch terminal. Since it is a Layer 2, I am not sure I understand why it won't do it.

Spoiler

CiscoLowerSwitch#ping 192.168.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
CiscoLowerSwitch#ping 192.168.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
CiscoLowerSwitch#ping 192.168.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
CiscoLowerSwitch#ping 8.8.8.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
CiscoLowerSwitch#

Again, thank you for your reply. I've been banging my head for a few weeks now on this issue. I solve one problem yet another one arises down the road. Trying to understand how and why these configs work. I am happy it works but making something work without understanding why leaves me at square 1.

[balaji.bandi]

CiscoRouter- From router are you able to ping 8.8.8.8 ?

where is 192.168.0.0 network resides ?

can you draw a small network with can explain where the each ip subnet resides ?

[Sam31]

Thank you again for the reply. It is very appreciated.
Yes, I can ping google from the router but not from the switch. Since it is a layer 2 switch and it has no routing, I am unsure what I am doing wrong. I am thinking it may have something to do with the default vlan 1.

Router is connected to switch from GE0/1 on router to FE0/1 on switch ( I would do GE0/1 but I have no access to a fiber optics cable so I am only using RJ45)
I tried trunk port as well as access port on switch.
If I can get you a coffee for the help, please let me know

[balaji.bandi]

Good diagram - this clarify the what network you have.

May be its me - the configuration you provided - i do not see switch have any default gateway configured ?

when you connect PC to Cisco Switch (configure PC IP address 192.168.2.20 subnet 255.255.255.0 and gateway 192.168.2.1)

Does the PC able to ping 192.168.2.1 , 192.168.1.1 and ping 8.8.8.8 ?

for the 192.168.2.0/24 network to reach 192.168.0.x/24 network.

you need to have static route on Motorol router (may be need to refer their configuration guide), how to reach back to 192.168.2.0/24 network via TPlink and cisco router.

Note : i also suggest do not need so many NAT in the network, Most NAT take place on the edge router in your case Motorola router, rest all devices do just routing its best i suggest. so all your network can connect each other with out NAT.

If i get chance i will send you one Lab with similar situation of you make it better.

[Sam31 · Accepted solution]

First of all, I want to thank you for all the help you provided. It helped and made me think. 
I finally found the issue and please don't laugh at me, but yes, I am a dum-dum.
What I was doing wrong was this.
Cisco Router gets its internet and everything from the other router through GE0/0. That is its external port where it gets its 192.168.1.10 IP.
On GE0/1 where I connected the switch, I set the IP as 192.168.2.10. 
It should have been 192.168.2.1 instead. that was the entire mistake and now I can ping the internet from the switch as well.

Here is how I did it

FOR ROUTER

CiscoRouter>en
CiscoRouter#interface GigabitEthernet0/0
^
% Invalid input detected at '^' marker.

CiscoRouter#config t
Enter configuration commands, one per line. End with CNTL/Z.
CiscoRouter(config)#interface GigabitEthernet0/0
CiscoRouter(config-if)#ip address 192.168.1.10 255.255.255.0
CiscoRouter(config-if)#ip nat outside
CiscoRouter(config-if)#
*Jun 2 17:11:43.507: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to up
CiscoRouter(config-if)#!
CiscoRouter(config-if)#end
CiscoRouter#
*Jun 2 17:12:01.015: %SYS-5-CONFIG_I: Configured from console by consoleconf t
Enter configuration commands, one per line. End with CNTL/Z.
CiscoRouter(config)#interface GigabitEthernet0/1
CiscoRouter(config-if)#ip address 192.168.2.1 255.255.255.0
CiscoRouter(config-if)#ip nat inside
CiscoRouter(config-if)#exit
CiscoRouter(config)#$de source list 1 interface GigabitEthernet0/0 overload
CiscoRouter(config)#access-list 1 permit 192.168.2.0 0.0.0.255
CiscoRouter(config)#ip route 0.0.0.0 0.0.0.0 192.168.1.1
CiscoRouter(config)#access-list 100 permit ip 192.168.2.0 0.0.0.255 any
CiscoRouter(config)#ip routing
CiscoRouter(config)#exit
CiscoRouter#p
*Jun 2 17:13:47.251: %SYS-5-CONFIG_I: Configured from console by consoleing 192.168.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
CiscoRouter#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
CiscoRouter#ping 192.168.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
CiscoRouter#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/16/20 ms
CiscoRouter#

FOR SWITCH:

CiscoLowerSwitch>en
CiscoLowerSwitch#ping 192.168.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
CiscoLowerSwitch#ping 192.168.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
CiscoLowerSwitch#ping 192.168.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
CiscoLowerSwitch#8.8.8.8
Trying 8.8.8.8 ...
% Connection timed out; remote host not responding

CiscoLowerSwitch#
CiscoLowerSwitch#
CiscoLowerSwitch#ping 8.8.8.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/18/20 ms
CiscoLowerSwitch#

AGAIN! THANK YOU! and yes, I will take any type of exercise you can throw at me whenever you have time and I am still serious about saying cheers with a coffee or something. When people need help, every piece of information is priceless
Therefore for me and my issue, I can say this is SOLVED.