Thank you
This worked. Apart from the last line, it does not allow specifying
negotiation.
However I also realise that I can access the router through the vlan IP
addresses only when I am connected using the original router subnet, in
this case 10.10.0.0
When I change to another vlan subnet, say if I change my computer ip to
172.16.0.10 I can't access the router on 172.16.0.1(ip address for vlan 172
on the router)
But I can access 172.16.0.1 when my computer ip is 10.10.0.xx
See configuration bellow
*YH-Cisco-Router>enPassword: YH-Cisco-Router#sh runnBuilding
configuration...Current configuration : 7697 bytes!! Last configuration
change at 13:06:58 UTC Mon Jul 19 2021 by admin!version 16.12service
timestamps debug datetime msecservice timestamps log datetime msecservice
password-encryptionservice call-homeplatform qfp utilization monitor load
80no platform punt-keepalive disable-kernel-core!hostname
YH-Cisco-Router!boot-start-markerboot system flash
bootflash:isr4200-universalk9_ias.16.12.05.SPA_3.binboot-end-marker!!enable
secret 9
$14$8cDL$8iLnp7LytZU3aU$Bbp8OTbegeD0f4PegFuivFN0fT0CcauqekVe7bqzdlU! --More--
aaa new-model --More-- ! --More-- ! --More--
aaa authentication login default local --More-- ! --More--
! --More-- aaa login success-track-conf-time 1 --More--
! --More-- ! --More-- ! --More-- ! --More--
aaa session-id common --More-- clock timezone UTC 3 0 --More--
call-home --More-- contact-email-addr support@aircomit.com
--More-- contract-id "204167269" --More--
phone-number "+256704251030 " --More-- sender from
support@aircomit.com --More-- sender
reply-to support@aircomit.com --More--
source-interface GigabitEthernet0/0/0 --More-- street-address
"Kampala" --More-- profile "YH" --More-- destination
transport-method http --More-- destination address http
http://aircomit.com/yh --More--
destination address email support@aircomit.com
--More-- ! --More-- ! --More-- ip nbar
http-services --More-- ! --More-- ip dhcp excluded-address
10.10.0.1 10.10.0.100 --More-- ! --More-- ip dhcp pool
YH-LAN --More-- network 10.10.0.0 255.255.0.0 --More--
default-router 10.10.0.1 --More-- dns-server 8.8.8.8 --More--
! --More-- ! --More-- ! --More-- login
on-success log --More-- ! --More-- ! --More--
crypto pki trustpoint TP-self-signed-4009722129 --More-- enrollment
selfsigned --More-- subject-name
cn=IOS-Self-Signed-Certificate-4009722129 --More-- revocation-check
none --More-- rsakeypair TP-self-signed-4009722129 --More--
! --More-- crypto pki trustpoint SLA-TrustPoint --More--
enrollment pkcs12 --More-- revocation-check crl --More--
! --More-- ! --More-- crypto pki certificate chain
TP-self-signed-4009722129 --More-- quit --More-- crypto
pki certificate chain SLA-TrustPoint --More-- certificate ca
01 --More-- quit --More-- ! --More-- crypto pki
certificate pool --More-- cabundle nvram:ios_core.p7b --More--
! --More-- ! --More-- no license feature
hseck9 --More-- license udi pid ISR4221/K9 sn FGL2518LU5C --More--
memory free low-watermark processor 69237 --More--
! --More-- diagnostic bootup level minimal --More--
! --More-- spanning-tree extend system-id --More--
! --More-- username YH privilege 15 password 7
013E1F267F02155C701B --More-- username admin secret 9
$9$3.wD2F.H3lQK4.$SQuAdZUCcXSd1bHs2tZVhF1UW2GKebLAca9cUwacJ8o --More--
! --More-- redundancy --More-- mode none --More--
interface GigabitEthernet0/0/0 --More-- description
YH_Internet --More-- ip address 41.222.0.133
255.255.255.248 --More-- ip nbar protocol-discovery --More--
ip nat outside --More-- negotiation auto --More--
! --More-- interface GigabitEthernet0/0/1 --More--
description YH_LAN --More-- ip address 10.10.0.1
255.255.0.0 --More-- ip nbar protocol-discovery --More-- ip
nat inside --More-- media-type rj45 --More-- negotiation
auto --More-- ! --More-- interface
GigabitEthernet0/0/1.10 --More-- description vlan 10 --More--
encapsulation dot1Q 10 --More-- ip address 10.1.0.1
255.255.0.0 --More-- ip nbar protocol-discovery --More-- ip
nat inside --More-- ! --More-- interface
GigabitEthernet0/0/1.172 --More-- description vlan 172 --More--
encapsulation dot1Q 172 --More-- ip address 172.16.0.1
255.255.0.0 --More-- ip nbar protocol-discovery --More-- ip
nat inside --More-- ! --More-- ip forward-protocol
nd --More-- ip ftp source-interface GigabitEthernet0/0/1 --More--
ip http server --More-- ip http authentication local --More--
ip http secure-server --More-- ip http client
source-interface GigabitEthernet0/0/0 --More-- ip tftp
source-interface GigabitEthernet0/0/1 --More-- ip nat inside source
list 1 interface GigabitEthernet0/0/0 overload --More-- ip route
0.0.0.0 0.0.0.0 41.222.0.129 --More-- ! --More-- ! --More--
! --More-- ip access-list standard 1 --More-- 10
permit 10.10.0.0 0.0.255.255 --More-- ! --More-- ! --More--
! --More-- ! --More-- ! --More-- ! --More--
control-plane --More-- ! --More-- banner login
^CYumbe Hospital^C --More-- ! --More-- line con 0 --More--
transport input none --More-- stopbits 1 --More--
line aux 0 --More-- stopbits 1 --More-- line vty 0
4 --More-- password 7 0961572B3D0C04415A5B --More--
transport input ssh --More-- ! --More-- ntp server
time.google.com prefer --More-- ! --More--
! --More-- ! --More-- ! --More-- event
manager applet 1626339866715storeShowTech --More-- event none sync
no maxrun 31536000 --More-- action 001 cli command
"enable" --More-- action 002 cli command "traceroute 41.222.0.132
source GigabitEthernet0/0/1" --More-- action 003 file open TECHFILE
bootflash:1626339866715sh_tech.txt w+ --More-- action 004 file puts
TECHFILE "$_cli_result" --More-- action 005 file close
TECHFILE --More-- !*
--More-- end
--More--
YH-Cisco-Router#
YH-Cisco-Router#
YH-Cisco-Router#
YH-Cisco-Router#
