Thank Edison for your answer. Question with this conf, all customer have 25 percent of the bandwidth, but if there are bandwith not use, it will be redistributed to other clients ? ... View more

Ufuk, thank you for your assistance. I add the following command on my router. ip access-list extended inside_nat0_outbound permit ip 192.168.40.0 0.0.0.255 192.168.2.0 0.0.0.255 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255 but now I have some problem to adjust the nat inside commande from ASA to my config. I add this line ip nat inside source list inside_nat0_outbound interface FastEthernet0 overload But always the same the problem the network 192.168.40.0 or 192.168.1.0 cannot ping the client network 192.168.2.0. ... View more

I try the following thing. 1 - When the client si connected, the client reveive an IP address 192.168.2.x but no gataway, it's normal? The client arrive to ping all IP in inside network 192.168.40.x and in 192.168.1.x 2 -From inside, the network 192.168.40.x or 192.168.1.0 cannot ping the network client in 192.168.2.x Someone have an idea? Thank you ... View more

Hello Jennifer, Thank you for your assistance.Find under an extract of my configuration username alizesclientvpn password 0 xxxxx ! ! ! ! ! crypto isakmp policy 3 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group alizesvpn key yyyyyyyyyy dns 41.x.x.x domain wr pool vpnpool acl 102 ! ! crypto ipsec transform-set myset esp-3des esp-md5-hmac ! crypto dynamic-map dynmap 10 set transform-set myset reverse-route ! ! crypto map clientmap client authentication list userauthen crypto map clientmap isakmp authorization list groupauthor crypto map clientmap client configuration address respond crypto map clientmap 10 ipsec-isakmp dynamic dynmap ! ! ! ! interface FastEthernet0 ip address dhcp ip nat outside speed auto crypto map clientmap ip local pool vpnpool 192.168.2.10 192.168.2.20 ip nat pool POOL-NAT 41.x.x.x 41.x.x.x netmask 255.255.255.0 type rotary ip nat inside source list 100 interface FastEthernet0 overload ip nat inside destination list 100 pool POOL-NAT ip nat inside destination list 102 pool sip ip classless ip route 0.0.0.0 0.0.0.0 41.205.79.1 ! ! ! ! access-list 102 permit ip 192.168.40.0 0.0.0.255 192.168.2.0 0.0.0.255 access-list 102 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255 ! ! ! ! ... View more

Todd, many and many thank again. I have add these two route on the 3560 ip route 10.10.10.12 255.255.255.255 192.168.1.13 ip route 10.10.10.13 255.255.255.255 192.168.1.13 Now, everything works perfectly. ... View more

Thank you for this explanation, I begin to understand. I don't want to enable the RIP on the 3560, I prefer to use a static route and I have a problem with that. If I'm not saying stupidity, loopback0 10.10.10.1/32 on 3560 is directly connected the loopback0 10.10.10.13/32 of Alcatel 6850 (SWITCH13), I can understand that is not possible from 3560 to ping the loopback 10.10.10.12/32 of Alcatel 6850 (SWITCH12) but why I can not ping the loopback0 10.10.10.13/32 directly connected? If I add a static route on the 3560 which gateway? 10.10.10.13? This address is not reachable. ... View more

I try to explain the topology of my network CISCO 3560 (backbone)-> Alcatel 6850 (SWITCH13)-> Alcatel 6850 (SWITCH12) There are a trunk with 802.1q encapsulation between 3560 and Alcatel 6850 (SWITCH13) and the RIP protocol between Alcatel 6850 (SWITCH13) and Alcatel 6850 (SWITCH12) From Alcatel 6850 (SWITCH13) can ping all vlan on the 3560 but not the loopback interface. Loopback0 : 10.10.10.1/32 on 3560 Loopback0: 10.10.10.13/32 on Alcatel 6850 (SWITCH13) CISCO backbone#show ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP        D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area        N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2        E1 - OSPF external type 1, E2 - OSPF external type 2        i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2        ia - IS-IS inter area, * - candidate default, U - per-user static route        o - ODR, P - periodic downloaded static route Gateway of last resort is not set      10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C       10.1.1.0/24 is directly connected, Vlan101 C       10.10.10.1/32 is directly connected, Loopback0 C    192.168.1.0/24 is directly connected, Vlan1 C    192.168.100.0/24 is directly connected, Vlan100 backbone# Alcatel SWITCH13-> show ip route + = Equal cost multipath routes * = BFD Enabled static route Total 6 routes   Dest Address      Subnet Mask       Gateway Addr      Age       Protocol ------------------+-----------------+-----------------+---------+-----------   10.1.12.0         255.255.255.0       10.1.12.13          26d 5h  LOCAL   10.10.10.12       255.255.255.255     192.168.1.12      05:15:08  RIP   10.10.10.13       255.255.255.255     10.10.10.13       04:42:57  LOCAL   127.0.0.1         255.255.255.255     127.0.0.1           35d10h  LOCAL   192.168.1.0       255.255.255.0       192.168.1.13        27d 1h  LOCAL   192.168.13.0      255.255.255.0       192.168.13.13       26d 5h  LOCAL The CISCO 3560 is directly connected by a trunk on the Alcatel 6850 (SWITCH13), I can ping all vlan but the loopback, it's a routing problem? ... View more

Sorry, I don't understand your reply. 3560 is layer 3 swith like the Alcatel switch (L2+ which can do routing like RIP/static route and other). To join the loopback from the Alcatel switch it's necessary that the 3560 is layer 3? ... View more