LAB scenario : Border router R1

[Habib Zakaria]

Hello there,

I have attached my lab. I created vlan 10 and 20 using a core switch and assigned the end workstation to their vlan ports. I am putting a border router and I want the laptops in vlan 10 and 20 to access the IP address 192.168.1.2.

The idea is to have the users access IP 10.50.20.2 that will translate it to access 192.168.1.2 which is connected to router R2 interface facing my router(R1).

I hope it makes any sense.

[Reza Sharifi]

Hi,

Since you already have a trunk between the 3560-24 and 2960-24, you can simply create a trunk on the 2960-24 facing the 1841 router and add vlan 10 and 20 to it.  Than on the router create to sub-interfaces for interface fa0/1

config t

interface fa0/1

no ip address

interface fa0/1.10

ip address 10.50.10.1 255.255.255.0

encapsulation dot1q 10

no sh

interface fa0/1.20

ip address 10.50.20.1 255.255.255.0

encapsulation dot1q 20

no sh

now you can remove 10.50.20.1 and 20.1 from the core switch.

In this case the router will route between vlan 10 and 20 and the 2 switches are just layer-2.

now you should be able to ping from each pc to its default gateway.

[Habib Zakaria]

Sorry, I can not do what you are asking me.

This is a campus network design.

The intent is to have those laptops vlan 10 and 20 access 192.168.1.2 which could be an IP that is used by FTP server.

What if R1 is replaced by PIX firewall or ASA will that work just for forwarding the traffic.

Thanks,

[Reza Sharifi]

The solution I provided you will give you access to 192.168.1.2 because r1 is connected to the other router (router-1) and all you need is 2 static routes on router-1 for vlan 10 and 20.

HTH

[Habib Zakaria]

Sorry, if this was an enterprise and the core is the main layer 3 switch i can not do that. These SVIs serve wide number of users and i can not remove them.

can I still do the router on stick in the router with out removing the SVI in the core ?

[Reza Sharifi]

If you want to use the core switch as layer-3 with SVIs for vlan 10 and 20, it will work fine, but than you need a /30 between the core switch and r1 and another /30 between r1 and router-1, which you already have. You than need static route from r1 to point to the core switch and also from router-1 to r1.  Or, you can use a routing protocol on all 3 devices.

HTH