01-23-2014 12:13 PM - edited 03-07-2019 05:45 PM
hello,
i have 2 lans 192.168.17.x and 10.10.255.x
i configured 1841 router with fe0 192.168.17.2 and fe1 10.10.255.1
fe0 is connected to a switch1 and fe1 to switch2
i have 2 issues.
1.
i have pc connected on the 192.168.17.x network and i can ping to 192.168.17.2 but not 10.10.255.1. i think i need to configre route for this but not sure.
2.
i only want some ip hosts from 192.168.17.x to communicate to 10.10.255.x network and want to know how i can do this?
ex. ip 192.168.17.5 - 192.168.17.10 to communicate to 10.10.255.x hosts.
i hope i can get help on this.
01-23-2014 12:43 PM
1. The router knows how to get to both destinations since they're locally connected, so you don't need routes. What you will need is default routes on the host that you are pinging from/to. They'll need to know where to send their traffic that they can't resolve for. Make sure the firewalls are turned off on both PCs as well.
2. You'll need either acls, zbfw, or cbac configured to block those hosts. The easiest is going to be acls. You'll permit hosts to talk to the 10.10.255.x hosts and then deny the rest like:
access-list 100 permit ip host 192.168.17.5 10.10.255.0 0.0.0.255
access-list 100 permit ip host 192.168.17.6 10.10.255.0.0.0.0 255
access-list 100 deny ip any 10.10.255.0 0.0.0.255
access-list 100 permit ip any any
Then you would apply the acl to the interface that is for the 192.168.17.0/24 subnet:
int f0
ip access-group 100 in
HTH,
John
*** Please rate all useful posts ***
01-24-2014 03:08 PM
John, thanks for the info so with this i can ping from my host thats on 192.168.17.5 to the fe1 10.10.255.1 and i get reply but i cant ping any host thats on the 10.10.255.x network. do i need to specify any route?
my ip route info.
Gateway of last resort is not set
10.0.0.0/24 is subnetted, 1 subnets
C 10.10.255.0 is directly connected, FastEthernet0/1
C 192.168.17.0/24 is directly connected, FastEthernet0/0
01-25-2014 05:29 AM
Hello,
As John said, router has full information about subnets, no routing needs to be configured.
You said that you are able to ping Fa1 interface from host x.17.5, that is good.
1. check botch interfaces if some ACL is not configured, post outputs from
- show run int Fa0/0
- show run int Fa0/1
2. you said that any host from 10.10.255.0 subnet is not reachable. Can you check if hosts on this subnets have configured default gateway correctly?
Best Regards
Please rate all helpful posts and close solved questions
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: