04-11-2013 01:28 AM - edited 03-07-2019 12:45 PM
hi everyone is there any one would like to help me
i got following situation
how to share router one fastethernet port (e.g fa0/0) with different network addresses(e.g 192.168.1.1 and 192.168.2.1 and 192.168.3.1) when using them as a gateway using RIP or static routing?
any one please help me..
Solved! Go to Solution.
04-11-2013 01:35 AM
Hi, See below a link for configuring a router on a stick.
Don't forget to rate all posts that are helpful.
Cheers
Sean
04-11-2013 01:35 AM
Hi, See below a link for configuring a router on a stick.
Don't forget to rate all posts that are helpful.
Cheers
Sean
04-11-2013 09:16 AM
thanks Sean.
i have another question related to the same situtation.
with the help of router on stick all the vlan can ping eathother.
but what if i dont want them to ping eachther but still they can ping outside the network..?
04-11-2013 10:35 AM
Hello Muhammad,
With router on a stick you will create three subinterfaces on router, on each of this subinterface you have to apply ACL which will deny local communication and allow communication to internet.
In your case:
ip access-list extended LAN_ACL
deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255
permit ip 192.168.0.0 0.0.255.255 any
int Fa0/0.1
ip access-group LAN_ACL in
int Fa0/0.2
ip access-group LAN_ACL in
int Fa0/0.2
ip access-group LAN_ACL in
Best Regards
Please rate all helpful posts and close solved questions
04-11-2013 01:41 PM
thanks blau grana
but sorry to say that does not work, by implementing above commands no pinging inside the network as well as outside the network..
04-11-2013 03:16 PM
Can you please post output of these command:
#show ip int brief
#show ip route
#show ip access LAN_ACL
Best Regards
Please rate all helpful posts and close solved questions
04-12-2013 07:52 AM
Router#show ip int brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 unassigned YES unset up up
FastEthernet0/0.10 192.168.1.254 YES manual up up
FastEthernet0/0.20 192.168.2.254 YES manual up up
FastEthernet0/0.30 192.168.3.254 YES manual up up
FastEthernet0/1 unassigned YES unset administratively down down
Serial0/2/0 200.1.1.1 YES manual up up
Serial0/2/1 unassigned YES unset administratively down down
Vlan1 unassigned YES unset administratively down down
Router#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
C 192.168.1.0/24 is directly connected, FastEthernet0/0.10
C 192.168.2.0/24 is directly connected, FastEthernet0/0.20
C 192.168.3.0/24 is directly connected, FastEthernet0/0.30
R 192.168.4.0/24 [120/2] via 200.1.1.2, 00:00:21, Serial0/2/0
C 200.1.1.0/24 is directly connected, Serial0/2/0
R 200.1.2.0/24 [120/1] via 200.1.1.2, 00:00:21, Serial0/2/0
R 200.1.3.0/24 [120/1] via 200.1.1.2, 00:00:21, Serial0/2/0
Router#show ip access LAN_ACL
Extended IP access list LAN_ACL
deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255 (3 match(es))
permit ip 192.168.0.0 0.0.255.255 any
04-12-2013 10:58 AM
Everything looks OK. Problem will be that you will be not able to reach 192.168.4.0 network, because this network is known via WAN interface [RIP route] and ACL wil deny this communication. Other networks 200.1.2.0/24 and 200.1.3.0/24 should be accessible.
Can you confirm this?
Best Regards
Please rate all helpful posts and close solved questions
04-12-2013 01:41 PM
yes they are well and fine .. my ACL needs changes now
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide