Thank you very much Mr.Marvin, yes i copied the IOS to the second router using ftp. I Installed SDM to both host(router & computer). some commands do work perfectly except for VPN. but in CLI, VPN config is working fine. ... View more

Hello,      Thats true, you need to include the dns server on your global config mode and dhcp statement as well. regards, Francis  ... View more

Thanks for this grean info. ... View more

Thanks Sir, Here's my new configuration, but no luck. Current configuration : 2266 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname Switch ! ! ! ! ip dhcp excluded-address 77.110.87.113 77.110.87.114 ip dhcp excluded-address 192.168.1.1 192.168.1.10 ! ip dhcp pool VLAN1 network 192.168.1.0 255.255.255.0 default-router 192.168.1.2 ip dhcp pool VLAN10 network 77.110.87.112 255.255.255.240 default-router 77.110.87.113 dns-server 4.2.2.2 ip routing ! ! ! spanning-tree mode rapid-pvst ! ! ! ! interface FastEthernet0/1 description CONNECTION TO ROUTER 1841 switchport trunk encapsulation dot1q switchport mode access ! interface FastEthernet0/2 switchport mode access ! interface FastEthernet0/3 switchport access vlan 10 switchport mode access ! interface Vlan1 ip address 192.168.1.2 255.255.255.0 ! interface Vlan10 ip address 77.110.87.113 255.255.255.240 ip helper-address 192.168.1.1 ! router rip ---------------------------------------------------------------> is there a problem if i use rip in my layer 3 switch? version 2 network 77.0.0.0 network 192.168.1.0 ! ip classless ip route 0.0.0.0 0.0.0.0 192.168.1.1 ! end thanks in advance ... View more

Thanks a lot Sir Chandrakant,           I did what you've said but when i ping 192.168.1.1 which is the router, from vlan 10(77.110.87.114), there's no reply.           but when i ping 192.168.1.2 and the rest of the clients in vlan 1 from VLAN10 it is replying. what else do i need to add to my layer 3 switch so that my vlan 10 will reach the WAN. thanks in advance, Francis ... View more

Hello Sir, Joseph and Chandrakant, Here's the router Configuration in packet tracer. i dont know what am doing , just be patience with me coz im just a beginner. Current configuration : 643 bytes ! version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname Router ! ! ! ! spanning-tree mode pvst ! ! ! ! interface FastEthernet0/0 ip address 192.168.1.1 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/0/0 ip address 10.1.1.2 255.255.255.252 ! ! router rip version 2 network 10.0.0.0 network 77.0.0.0 ! ip classless ip route 0.0.0.0 0.0.0.0 10.1.1.1 ! ! ! ! ! ! ! line con 0 line vty 0 4 login ! ! ! end And here's my layer 3 switch configuration. Current configuration : 2322 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname Switch ! ! ! ! ip dhcp excluded-address 77.110.87.113 77.110.87.114 ip dhcp excluded-address 192.168.1.1 192.168.1.10 ! ip dhcp pool VLAN10 network 77.110.87.112 255.255.255.240 default-router 77.110.87.113 dns-server 213.165.32.134 ip dhcp pool VLAN1 network 192.168.1.0 255.255.255.0 default-router 192.168.1.1 dns-server 192.168.1.1 ip routing ! ! ! ! ! ! ! ! ! ! spanning-tree mode rapid-pvst ! ! ! ! interface FastEthernet0/1 description CONNECTION TO ROUTER 1841 switchport mode trunk ! interface FastEthernet0/2 - assigned to vlan 1 switchport mode access ! interface FastEthernet0/3 - assigned to vlan 10 switchport access vlan 10   ip helper-address 192.168.1.2 switchport mode access ! ! interface Vlan1 ip address 192.168.1.2 255.255.255.0 ! interface Vlan10 ip address 77.110.87.113 255.255.255.240 ip helper-address 192.168.1.2 ! router rip version 2 network 77.0.0.0 network 192.168.1.0 ! ip classless ip route 192.168.1.0 255.255.255.0 192.168.1.1 ! ! ! ! ! ! ! line con 0 line vty 0 4 login ! ! ! end I want VLAN 10 to connect to the internet and vlan1 locally. but both VLANs should share files and printers. thanks in advance francis ... View more

thanks for the reply SIr, exactly what you're thinking would do.             if  your topology could accomplish my goal then let it be. but i want 77.110.87.112/28 will connect to the internet and 192.168.1.0/24 wont. Q: do i need to create an access list in 1841 to permit /28 network for WAN and deny /24 network? if so. what are the proper statement that i would type. thanks in advance francis ... View more

thank you very much for the reply Sir Joseph. by the way 1841 router is connected trough 3G modem to ISP using P2P encapsulation. 77.110.87.112/28 network => is hosted in 1841 cisco router which is connected to 3COM unmanagable switch. 192.168.1.0/24 -  is assigned to clients mannually configured. it means this is hosted only by switches.           if this clients uses the ip address of the above users the conflict in IP is appearing and the network gets down. thats why i want to subnet the network ang implement a good system. so that if the users in /24 network uses the ip's of /28. there's no harm to the network. thanks in advance Francis ... View more