Cisco 1921 not passing traffic 0/0 to 0/1

[jszymenderski]

Hi guys. 

My problem is with my new 1921 router. 

GE0/0 192.168.0.253 255.255.255.0 

GE0/1 192.168.1.253 255.255.255.0

2 PCs directly connected

to 0/0 192.168.0.1

to 0/1 192.168.1.1

Both side can't comunicate each other. I can ping router interface. From router console i can ping both machines, but cannot ping from one pc to other. It is my first cisco console manage router. Maybe i've made something wrong. is there any monitor to check online packets. 

I've checked same conf on cisco packet tracer (router 1941)  and everything works fine. 

There is no access-lists yet. 

Config 

Current configuration : 1173 bytes
!
! Last configuration change at 22:38:00 UTC Thu Apr 12 2018
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
cts logging verbose
!
!
license udi pid CISCO1921/K9 sn FCZ2210B0GG
!
!
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.0.253 255.255.255.0
ip virtual-reassembly in
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.253 255.255.255.0
ip virtual-reassembly in
duplex auto
speed auto
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
!
!
!
control-plane
!
!
!
line con 0
password *********
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
login
transport input none
!
scheduler allocate 20000 1000
!
end

--routing
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
a - application route
+ - replicated route, % - next hop override

Gateway of last resort is not set

192.168.0.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.0.0/24 is directly connected, GigabitEthernet0/0
L 192.168.0.253/32 is directly connected, GigabitEthernet0/0
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/1
L 192.168.1.253/32 is directly connected, GigabitEthernet0/1

Thanks a lot 

[Francesco Molino]

Hi

What's the default gateway for each pc?

From PC in subnet 192.168.0.0/24, do you ping the router interface 192.168.1.253? And vice versa from a pc in suggest 192.168.1.0/24 pinging router interface 192.168.0.253?

[jszymenderski]

Hellow

PC1 GW 192.168.0.253

PC2 GW 192.168.1.253

Yes I can ping both router interfaces from both pc's

[Francesco Molino]

Ok then if PC1 can ping 192.168.1.253, this means that routing is working.
Can you do traceroute from PC1 to PC2? Can you also verify if PC2 and PC1 has no software firewall enabled.
And also, you can run wireshark on PC2 while pinging from PC1 and see if icmp packets are coming in.

[jszymenderski]

Hi

Router IP TRAFIC INTERFACE during ping. 

13 no route ?

GigabitEthernet0/0 IP-IF statistics :
Rcvd: 16 total, 1086 total_bytes
0 format errors, 0 hop count exceeded
0 bad header, 13 no route
0 bad destination, 0 not a router
0 no protocol, 0 truncated
0 forwarded
0 fragments, 0 total reassembled
0 reassembly timeouts, 0 reassembly failures
0 discards, 3 delivers
Sent: 13 total, 728 total_bytes 0 discards
13 generated, 0 forwarded
0 fragmented into, 0 fragments, 0 failed
Mcast: 0 received, 0 received bytes
0 sent, 0 sent bytes
Bcast: 5 received, 0 sent

Firewall excluded (both ip's reposnding from routers console)

There is no icmp packets in wireshark when pinging from PC to PC

I think that problem is with packets forwarding, so maybe arp table is incorect, maybe no acl or empy access-list is deny by default. I have no idea. 

[jszymenderski]

I've added gateway (ip route 0.0.0.0 0.0.0.0 "adress" metric)

PC with same network as gateway is passing, the other one has no internet access. 

[Francesco Molino · Accepted solution]

After a troubleshooting session, the issue was Windows firewall.
You'll need to add rule on the firewall to allow those 2 subnets to communicate each others

[jszymenderski]

I'm realy greatful for your help and i admire you profesionalism
Take care
Jakub

[Francesco Molino]

Thank you! You're very welcome.