Cisco 1841 with HWIC-4ESW - routing issues

[joel.goudreau]

I have a 1841 with a HWIC-4ESW installed and I'm having problems getting data to route to/from the 4ESW.  My issue is pretty much like this old thread: https://supportforums.cisco.com/discussion/10919631/how-enable-routing-between-hwic-4esw-and-onboard-fe-cisco-1841-router

So, I'll start with a very basic setup I'd like to acheive and see if anyone can give advice.  For reference sake, I'm not Cisco certified or anything, so my knowlege is pretty much first hand experience as I have issues.

FA0/0 - static IP 192.168.0.2 255.255.255.0 - used for internet access

FA0/1 - not in use

FA0/0/0-3 - used in Vlan 100

Vlan 100 - static IP 192.168.100.1 255.255.255.0

From a host in 192.168.0.0 I can ping both 192.168.0.2 and 192.168.100.1, but I cannot ping any hosts on the 192.168.100.0 network.

From a host in 192.168.100.0 I can ping both 192.168.0.2 and 192.168.100.1, but I cannot ping any hosts in the 192.168.0.0 network.

I've tried numerous suggestions from threads I've read, but nothing seems to jive for me.

Does anyone have a suggestion on how this could work?

Thanks for any suggestions, just trying to get this setup working in my home lab.

Joel

[Julio E. Moisa]

Hi

As I know you should create the SVI's and configure the IP addresses under them and assign the vlans to these ports. 

Could you please provide the configuration?

[joel.goudreau]

Thanks for the prompt reply!  Here's the basic config (just basically as I described, I haven't bothered to set hostname/domain or passwords etc. yet)

Current configuration : 1535 bytes
!
! Last configuration change at 22:53:41 UTC Wed Feb 15 2017
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!

no aaa new-model
!
dot11 syslog
ip source-route
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
crypto pki token default removal timeout 0
!
redundancy
!

interface FastEthernet0/0
description "Link to ISP"
ip address 192.168.0.2 255.255.255.0
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface FastEthernet0/1
description "Disabled"
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/0/0
switchport access vlan 100
no ip address
!
interface FastEthernet0/0/1
switchport access vlan 100
no ip address
!         
interface FastEthernet0/0/2
switchport access vlan 100
no ip address
!
interface FastEthernet0/0/3
switchport access vlan 100
no ip address
!

interface Vlan1
no ip address
!
interface Vlan100
description "Local LAN"
ip address 192.168.100.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list LAN_NAT interface FastEthernet0/0 overload
!
ip access-list standard LAN_NAT
permit 192.168.100.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
transport input all
!
scheduler allocate 20000 1000
end

[Julio E. Moisa]

Hi, your config looks fine, do you have a topology? Also you could try to use router in a stick, delete the SVI and use a sub-interface. But I would like to take a look to the topology first. 

I assuming that the vlan 100 was created previously using vlan database command, right?

[joel.goudreau]

I'll put a topology together for you momentarily, but for the vlan, it was created in global config mode (looking around, vlan database mode is being depreciated).

Thanks again!

Joel

[joel.goudreau]

I've attached a basic topology diagram.  Really quite basic, just setting up a separate network for a home lab.  I'd like to be able to hit the servers from the desktop PC (192.168.0.10).  At this time I can ping 192.168.0.1, 192.168.0.2 and 192.168.100.1 from the desktop PC, but not any of the servers.  The servers can ping 192.168.100.1 and 192.168.0.2. I'm sure I'm just missing something stupid..

Thanks!!

Joel

[Julio E. Moisa]

Thank you,

have you disabled the firewall on the servers or any antivirus? are the servers able to ping each other? just to discard