Unable to ping other VLAN

[Tees8353]

Hi i'm new to networking and have a problem, It seems that I'm unable to ping another host on a different VLAN on the other side of the router, SITE A vlan returns rto while pinging SITE B vlan, while B returns with destination host unreachable, but they are able to ping each other only if they are within the same switch for example Finance can ping IT, but Finance cannot ping neither Sales nor Tax, I used router on a stick for my intervlan routing. R1 can ping R2 and vice versa, I included the snapshot of my topology and configurations down below. Any help is a greatly appreciated.

Spoiler

R1 CONFIG: 
hostname R1
!
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.254 255.255.255.0
!
interface GigabitEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.254 255.255.255.0
!
interface Vlan1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 192.168.0.0 0.0.255.255 area 0
!
router rip
version 2
network 10.0.0.0
network 172.16.0.0
network 192.168.0.0
no auto-summary
!
ip classless

Spoiler

S1 CONFIG
hostname S1
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/24
switchport trunk allowed vlan 2-4
switchport mode trunk
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
shutdown
!
interface Vlan2
mac-address 0060.4795.9701
no ip address
!
interface Vlan3
mac-address 0060.4795.9702
no ip address

Spoiler

R2 config
hostname R2
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address 172.16.2.254 255.255.255.0
!
interface FastEthernet0/0.3
encapsulation dot1Q 3
ip address 172.16.3.254 255.255.255.0
!
interface FastEthernet0/0.4
encapsulation dot1Q 4
ip address 10.0.0.254 255.255.255.0
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
ip address 172.16.1.1 255.255.255.0
shutdown
!
router ospf 1
log-adjacency-changes
network 172.16.0.0 0.0.255.255 area 0
!
router rip
version 2
network 10.0.0.0
network 172.16.0.0
network 192.168.0.0
no auto-summary
!
ip classless

Spoiler

S2 config
hostname S2
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport trunk allowed vlan 2-4
switchport mode trunk
!
interface Vlan1
ip address 172.16.1.1 255.255.255.0
shutdown
!
interface Vlan2
mac-address 0050.0f0b.8a01
no ip address
!
interface Vlan4
mac-address 0050.0f0b.8a02
ip address 10.0.0.2 255.255.255.0

[Mark Malone]

Hi
why is there OSPF and RIP running , i dont see any redistribution here between IGPs , if the end goal is just to get them to talk adverse them all under same protocol and remove the other 1, you wont find RIP in many real world deployments anymore if this is a LAB for training OSPF is more prevalent out there

also an IP is only required ona layer12 switch from reach ability requirements remotely and MGMT , switch 2 is also located in the middel of a layer 2 switch running multiple vlans , so if an L3 connection was to form between both routers over that switch all vlans must be allowed

valn 1 also ghas same IP on s2 and r2 this will cause duplicated IP alerts

[Tees8353]

---

@Mark Malone wrote:
Hi
why is there OSPF and RIP running , i dont see any redistribution here between IGPs , if the end goal is just to get them to talk adverse them all under same protocol and remove the other 1, you wont find RIP in many real world deployments anymore if this is a LAB for training OSPF is more prevalent out there

also an IP is only required ona layer12 switch from reach ability requirements remotely and MGMT , switch 2 is also located in the middel of a layer 2 switch running multiple vlans , so if an L3 connection was to form between both routers over that switch all vlans must be allowed

valn 1 also ghas same IP on s2 and r2 this will cause duplicated IP alerts

---

I dont know why it says it was, but i checked router r2 again, vlan 1 on it has no ip address, only on s2, and i added ip default gateway on s2 to point to r2 f0/0.3, i also removed rip and adversite every subnets on an ospf, it does work, all vlan can talk to each other now, but then I was supposed to only use ospf to route on the same site (lan) just in case maybe they are going to add another router sin there in the future and to use rip instead to route from site A to site b and vice versa.

[Tees8353]

---

@Mark Malone wrote:
Hi
why is there OSPF and RIP running , i dont see any redistribution here between IGPs , if the end goal is just to get them to talk adverse them all under same protocol and remove the other 1, you wont find RIP in many real world deployments anymore if this is a LAB for training OSPF is more prevalent out there

also an IP is only required ona layer12 switch from reach ability requirements remotely and MGMT , switch 2 is also located in the middel of a layer 2 switch running multiple vlans , so if an L3 connection was to form between both routers over that switch all vlans must be allowed

valn 1 also ghas same IP on s2 and r2 this will cause duplicated IP alerts

---

I have no idea why it says it was, but I checked my r2 again and its vlan 1 has no ip address, anyway I added default gateway for S2 to point to f0/0.4 on R2, removed rip and advertise every subnet on just an OSPF, it does work every vlan can now talk to each other, however, i was supposed to only use ospf protocol for lan only, like only in the same site maybe the site is going to add another routers in the future, and to use RIP instead to connect from Site A to Site B and vice versa, any idea how to do that? I used redistribute ospf 1 on router rip but im not really sure whether the routers still use an ospf or rip.

[Mark Malone · Accepted solution]

Hi
so it works based on certain rules of how routes are added to the table put into the actual routing tabel when you ahve 2 different IGPs , so OSPF is always 110 AD while, if redistributed OSPF would win and be added to teh table , this you can confirm yourself with show ip route x.x.x.x/x it will state what the IGP is

This explains AD
https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/15986-admin-distance.html

This explains route selection very important with multiple protocols and varying routes
https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/8651-21.html

These would be the values associated with routes , example EIGRP si generally 90 but when redistributed it becomes and External route so its value becomes 170 so OSPF would win , if that makes sense , it comes into play when there are multiple IGPs in play , by the way redistribution you need to be careful with , if multiple points of redistribution you can cause a loop depending on setup , the routing output will always tell you why it was chosen but you just have to look at a few parameters in the output

Personally if training avoid multiple IGs until you understand each of them and how they operate and there values for now.
OSPF would be the better choice protocol in general due to salability and the link state base it operates on , RIP has severe limitations especially on WAN side thats why its deprecated nearly and would not be used on a WAN , in general OSPF or EIGRP would be redistributed ingto BGP or ometimes IS-IS ,but mostly BGP when breaking out to the real world


Connected interface 0
Static route 1
Enhanced Interior Gateway Routing Protocol (EIGRP) summary route 5
External Border Gateway Protocol (BGP) 20
Internal EIGRP 90
IGRP 100
OSPF 110
Intermediate System-to-Intermediate System (IS-IS) 115
Routing Information Protocol (RIP) 120
Exterior Gateway Protocol (EGP) 140
On Demand Routing (ODR) 160
External EIGRP 170
Internal BGP 200
Unknown* 255