02-17-2025 08:57 AM
I run a networking lab at a University. We are introducing routers, IP subnetting, and routing this week. There are two switches connected to a single router (FE0/0 and FE0/1, respectively). I am attaching the workstation IP address configs, and router show ip interface brief and show ip route outputs. The workstations can ping their local router port (default gateway), the remote router port, but not any devices beyond the remote router port. There are no ACLs established. I believe there is something simple I am missing, but cannot put my finger on it.
Thank you,
Brian
Solved! Go to Solution.
02-17-2025 11:29 AM
If re-verifying the PC doesn't show us anything new, I have another idea on how to test the connectivity. It involves using the switches to test the connectivity between LANs.
First configure an IP address on interface Vlan1:
Sw1-1:
interface Vlan1
ip address 192.168.1.101 255.255.255
Sw3-1:
interface Vlan1
ip address 192.168.11.101 255.255.255
Make sure Sw3-1 has also configured ip default-gateway 192.168.11.1
Now from the switch Sw1-1 console/vty perform a ping to the other switch Vlan1 interface:
Sw1-1#ping 192.168.11.101
02-17-2025 09:16 AM
02-17-2025 09:16 AM
Hello @Brian AD ,
check windows firewall on the PCs your configuration looks like good and local subnet can be pinged from both
Hope to help
Giuseppe
02-17-2025 09:19 AM
Because our lab environment is air-gapped, I have Windows firewall turned off.
02-17-2025 09:22 AM
Enable ip routing in global configuration mode with the command ip routing
02-17-2025 09:26 AM
No change.
02-17-2025 09:28 AM
Hello @liviu.gheorghe ,
I had thought about this point too. But the output the OP provided looks that of a router with ip routing enabled there is a line gateway of last resort not set. if ip routing is disabled show ip route should show only the IP default gateway.
Hope to help
Giuseppe
02-17-2025 09:37 AM
Hello @Giuseppe Larosa , thank you for pointing that out - you are right.
Should be something in the switch configuration.
@Brian AD , can you share the switch configs with us?
02-17-2025 09:43 AM
02-17-2025 09:31 AM
PC1-SW1-R-SW2-PC2
PC1 and PC2 must config with GW point to R interface.
SW must config with access not trunk port.
MHM
02-17-2025 09:45 AM
This packet tacer lab?
If yes' share lab here' I can help with this lab but sure other have free time to help ypu.
....sorry for some delay in reply I am busy....
MHM
02-17-2025 09:46 AM
No, physical hardware.
02-17-2025 09:48 AM
I have removed all VLAN information (except default VLAN1), including IP Addresses. Still not working.
02-17-2025 09:32 AM
Would any kind of security setting cause this? I did enable SSH and telnet access (so had to create an RSA key), but it does not seem like that should influence basic routing.
02-17-2025 09:56 AM
More likely the connectivity issue is due to some VLAN or trunking configuration in the switches attached to the router ports.
A look at the switches configurations will clarify this.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide