Can't get access to the Internet from VLAN2

[StaismanS]

Here is my setup: I have switch SF300 with two VLANS

VLAN1 - IP 192.168.1.1 also swtch's IP

VLAN2 - IP 192.168.2.1

I have cisco router for WAN -  IP 192.168.1.19

in the switch  SF300 i have default route 0.0.0.0/0 to 192.168.1.19

in the router i have route looks like 192.168.2.0 to next hope 192.168.1.1

on the Hosts i have their IPs and GW setup as their VLAN's IPs

VLAN 1  is working perfect, i can ping everything and Internet working fine

VLAN2 is having problems, I can ping router, and hosts in VLAN1 BUT i dont have an Internet !!!  when i do tracert google.com it stops on my router:

looks like this:

1     1ms     6ms     6ms     192.168.2.1

2     1ms     1ms     1ms     192.168.1.19

3     *          *          *          request times out

Were is problem ??????

[StaismanS]

Anybody?

[qumartin]

What is the model of router do you have? If you are getting to the router that means the switch is working correctly. Problem seems to be at the router.

Thanks

Quendale

[StaismanS]

The router is Cisco 1841, I know this is strange because HOSTs in VLAN1 isworking fine, have internet and everything.

VLAN2 hosts can ping .19 but don't have the Internet...

Also I have firewall after router, could firewall block my VLAN2 because it has different IP range?

Also note that my router has no DHCP anabled...... maybe I need to add some NATing?

[Mark^ · Accepted solution]

I'm just going to take a stab at this and hopfully be of some help.

If your firewall has a static route setup for the 192.168.1.0/255.255.255.0 network using your 1841 as the gateway, you might want to try editing that route to be 192.168.0.0/255.255.0.0 OR adding another static route.

[marcin]

Problem for sure is with router and probably with NAT's ACL or ACL on LAN interface. Paste "sh access-list" and "sh ip route" and part of NAT configuration

[StaismanS]

Ok here is my routing list, I dont have any NAT config or any ACL's

the 42.0 route is for another network from other place which is working fine also.....

192.168.1.5 is my firewall ....

I added 192.168.2.0 to the RIP networks but didnt help

If your firewall has a static route setup for the 192.168.1.0/255.255.255.0 network using your 1841 as the gateway, you might want to try editing that route to be 192.168.0.0/255.255.0.0 OR adding another static route.

WORKING, I added new route looks like 192.168.2.0/255.255.255.0 to  192.168.1.19  and it is working !!!!!