So I have two routers connected via rollover cable (fa) on subnet 192.168.254.0 /30 I have to separate lans on either side on VLAN 10 (marketing )     fa0/0>>Router0 "Westside Marketing Lan" PC2 and PC1 CAN ping each-other and their default gateway successfully. (they can also ping the outside interface of Router1         East side Marketing lan PC5 and PC8 CAN ping each-other and their default gateway successfully. BUT, they can not ping the 'Global Inside' or Outside interface of Router0   I have them both set up pretty similar as for as PAT goes but I don't understand how the LAN on the West-side can ping the across the rollover cable (connecting Router0 to Router1).. to router1's 'global inside' interface (fa0/0 - ip: 192.168.254.2 ) BUT Nobody on the Marketing (vlan 10) lan on the East-Side can ping the 'Inside Global' interface of Router0 ( inter: fa0/1, IP: 192.168.254.1/30)    They conditions for PAT look perfect mirror images to me :/     ( I don't use the nat pool.. ^)   Here, I have some redundant 'ip nat inside' declarations but, I added those on the main interfaces (Router1's 0/1, in particular) when using the 'ip nat inside' command wasn't working on the East side when used on the subinterface, but it was working on the West side. I just kinda flailed and threw 'ip nat inside' everywhere it wasn't.      So the question is why, given the above configurations, can I ping the 'global inside interface, of Router1, from the "West-side" lan. But I can't ping the 'Global inside interface' of Router0 (ip : 192.168.254.1 /30), from the "East-side" lan (PC8 and PC5)?    ... View more

I have the following topology :     I have an ethernet connection to another route out the opposite-side port of my LAN where I have the two vlans configured (VLAN, 10 (Marketing) and 20 (Sales)) Before I set up the following ACL and the following commands to supposedly set up PAT, I was able to successfully ping the DG of each vlans sub interface on both hosts.     Now I can't send packets to default gateaway and I don't know why I even just slapped on a 'permit any' command on the acl.. I assume it has something to do with the ranges I set in my "NAT address pool"?   As always, super appreciative of any help or advice you can offer. I'm sure, it's a fundamental misunderstanding of PAT. I'll attach the file any-who. Help at your most ideal convenience!!! ... View more

Greetings! so this is a very loaded question in my mind but a pretty straight forward aim: I am trying to setup a DHCP pool PER VLAN   I have the following topology:     So I have two switches that have a trunk connection (and from Switch2 to Router0, I have a trunk connection as well). And all vlans are allowed over on both.  I was a little confused at the difference between a native and the default vlan1 when I set it up, so my vlan 1 has PC3 and PC0 on it but also, out of consequence, PC6 and PC7. I wanted to treat these as normal-"public"-default clients who interact on the open broadcast domain with no special demarcation.   I created a DHCP pool on router1, called 'NewNative' and it has been successfully giving out IP addresses to PC6, PC3, PC0 and PC7. I don't really want it giving ip addresses to VLAN1 (PC3 and PC0). I suppose that their is no way to move all my interfaces lodged in vlan1 over to VLAN 30  ( the Native VLAN, that I manually set between switch0 and switch2) and just let that be the new default. It doesn't matter that much.. Just not sure how to mimic good practice. My main problem is that I'm struggling with subinterfaces. I created subinterfaces on router0 ( ex. 'fa0/1.2' was set for vlan 2. I gave it an ip address of 192.168.2.1 )  How do I set up a new DHCP pool within router0, and get PC2 to DORA successfully? Like what am I missing? So that when I click 'dynamic' on PC2, it will send a broadcast that will travel to switch2, and end up on interface fa0/1.2 to the router, so that the router knows which DHCP pool to give out from? In fact, what would I have to say to the router to make my "VLAN2DHCP-pool", interface specific even?       ... View more

(router0 is off to the left, "off switch1" ) PC2 down at the bottom is on network 192.168.0.0  (connected to dg, 192.168.0.1 (router0) PC4 is connected to router2 ( default gateway, being global address 192.168.3.1 )   My question is why can't I ping PC2 with PC4, and how do I need to configure the relative NAT outside/ inside addresses on the routers in between ( Router1 and Router2) in order to accomplish this feat.  Currently, I can ping (FROM PC4) my both outside and inside addresses configured on Router2 (respectively, 192.168.3.1 and 192.168.1.1 ) with full replies. I can't ping the addresses on Router1 ( outside / serial facing, address: 192.168.3.2 and downstream-facing: 192.168.0.2 ) So naturally, I can't get a packet from PC4 (subnet: 192.168.1.0; to PC2, subnet: 192.168.0.0 )   The nat configuration on Router2 (inside subnet of, 192.168.1.0 ):     The NAT Configuration on Router1 (between subnet 192.168.3.2 / and subnet 192.168.0.0 [where my LAN I want to ping and PC2 are] - I just realized writing this out that seems I'm going between a serial connection, it might be pertinant to have been schooled on how to configure 'Outside Local' and ' Outside'.. if so I might be ahead of myself here because that is definitely not required to know for ICND1 haha. But, assuming I remedied this by substituting interface se0/0 for a Fast Ethernet connection. Do I still have to have this 3rd/ "extra" subnet of 192.168.3.0 to create a gateway (x.x.3.1) between the routers 1 and 2, even on a fast Ethernet connection? That's a mouthful. I might take this post in a second, though. It just helps me think to at least sound things out publicly  >.< ... View more