hosts unreachable from the router on packet tracer

[OB1456]

i have a problem pinging hosts from the router , but i tried doing the opposite it works . i tried pingin the router from all the hosts it working . i used 2 switches layer 3 and a router 

[balaji.bandi]

check Host has FW, disable and test it.

[OB1456]

the FWs is disable for all of them , all ready checked .

[Martin L]

Try trace route; do u have same result as pinging? Check your ACLs; if u have none; then check IP and IP addressing; Ping is 2-way, so to and from should work; it is not possible to have one way working but not the other way without any filters like ACLs.

you can attach your PT file here but it must be in zip format

Regards, ML
**Please Rate All Helpful Responses **

[Flavio Miranda]

Hi @OB1456 

 Can you share the file so that I can take a look?

You need to zip the file first.

[OB1456]

ok

[Flavio Miranda · Accepted solution]

Hello @OB1456 

 A few points you need to fix.

The PCs need to have the gateway on the same network as the PC´s IP address. On the PC below, as the IP address is 192.168.50.2, the gateway need to be 192.168.50.1, which is the interface vlan on the switch.

The same thing for this PC

And this PC.

Actually, this is true for all PCs. They need to have the gateway on the same network as they have IP on.

Another point:

You are using the vlan 100 as transit network between Layer3 switch and router. But you can not use the same IP address on both devices. As you used 172.168.0.1 on the switch,  you need to change the IP address on the router to 172.168.0.2

 The same for network 192.168.1.x. You used 192.168.1.1 on the switch, need to use 192.168.1.2 on the router.

You can see the logs below informing you about this mistake.

Switch1#%IP-4-DUPADDR: Duplicate address 192.168.1.1 on Vlan100, sourced by 0001.6405.C901

Last thing you need to tell the switch where  to find the networks they dont have on it.

On switch Switch2

you need to run

ip route 0.0.0.0 0.0.0.0 172.168.0.2

And on switch Switch1 you need to run

ip route 0.0.0.0 0.0.0.0 192.168.1.2

And you need to instruct the routers how to find the networks.

ip route 192.168.0.0 255.255.0.0 192.168.1.1

ip route 172.168.0.0 255.255.0.0 172.168.0.1

Now, you can ping from PC on the left to the PC on the right and vice-versa.

You can test with the file I am attaching.

[OB1456]

Thanks for your help !!

[Flavio Miranda]

You are welcome @OB1456  if need any assistance with the lab, let me know

[OB1456]

Just one thing, if I want to let specific devices reach for devices I want them to reach to. In a way  where not all vlans can communicate with each others. Hope you understand .

[Flavio Miranda]

I got it.  Which vlan you want to block and which one to permit?

[OB1456]

All the 3 vlans on the right could communicate to 192.168.50.1 but only 2 of them could communicate with 192.168.20.1 . And in the other side (left) they should only coomunicate with each others .

[Flavio Miranda]

Hi @OB1456 

 Sorry but I dont follow you here. There is no IP add 192.168.20.1.  And if the vlan on the left can communicate only between each other, they will not communicate with vlan on the right.

[OB1456]

i want them just to receive from the pcs on the right , like the communication be from one way not bothways  .