Hi everyone!
I have an IR829 that has two VLANs setup for wireless and wired clients. I can't access any wired vlans devices from the wireless vlan. Please help me diagnose the problem Thank you!
Tests
- From the router
I can ping all the devices from the router with different sources.
- From a wireless device [Successfully gets the 172.16.3.4 ip from DHCP]
I can ping both vlan gateways but can't ping the two devices on the VLAN10- WIRED (Weird I know haha )
Hi Georg,
I made the change and it seems to retain all the inter VLAN connectivity. I have internet on VLAN20 but VALN10 doesn't have internet now. Here's the test I did to verify.
Show ip route gives me this,
Could you identify any problem? Current configuration is below,
!
ip dhcp excluded-address 172.16.3.2
ip dhcp excluded-address 172.16.2.2
!
ip dhcp pool WIRELESS
network 172.16.3.0 255.255.255.0
default-router 172.16.3.1
dns-server 172.16.3.1
!
ip dhcp pool WIRED
network 172.16.2.0 255.255.255.0
default-router 172.16.2.1
dns-server 172.16.2.1
!
ip dhcp pool CC-Comp
host 172.16.2.50 255.255.255.0
client-identifier ff66.7b93.2a00.0200.00ab.11d6.4942.a591.f597.e8
!
!
!
ip domain name XXXXXX
ip host cabin.hm.local 172.16.2.50
ip host cabin.hm 172.16.2.50
ip name-server 8.8.8.8
ip name-server 8.8.4.4
ip multicast-routing
ip cef
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"
!
!
!
!
license udi pid IR829GW-LTE-LA-ZK9 sn FGL2602L191
!
!
username admin privilege 15 secret 5 $1$b61O$17XyZ4ikIK7qYzKF16c0H/
!
redundancy
!
!
!
!
controller Cellular 0
lte sim data-profile 1 attach-profile 1 slot 0
lte sim fast-switchover enable
no lte gps enable
lte modem link-recovery disable
!
!
!
!
!
!
!
!
!
interface Tunnel0
ip address 192.168.1.1 255.255.255.0
tunnel source GigabitEthernet0
tunnel destination dynamic
tunnel protection ipsec profile IPSEC_PROFILE
!
interface GigabitEthernet0
mac-address 00f9.74a9.395e
ip dhcp client hostname CC-ROUTER
ip address dhcp
ip nat outside
ip virtual-reassembly in
no ip route-cache
!
interface GigabitEthernet1
switchport access vlan 10
switchport mode access
no ip address
no mop enabled
!
interface GigabitEthernet2
switchport access vlan 10
switchport mode access
no ip address
no mop enabled
!
interface GigabitEthernet3
switchport access vlan 10
switchport mode access
no ip address
no mop enabled
!
interface GigabitEthernet4
switchport access vlan 10
switchport mode access
no ip address
no mop enabled
!
interface Wlan-GigabitEthernet0
description Internal AP
switchport mode trunk
no ip address
!
interface GigabitEthernet5
no ip address
shutdown
duplex auto
speed auto
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation slip
load-interval 60
dialer in-band
dialer idle-timeout 300
dialer string lte
dialer-group 1
ipv6 address autoconfig
async mode interactive
routing dynamic
!
interface Cellular1
no ip address
encapsulation slip
!
interface wlan-ap0
ip address 1.1.1.1 255.255.255.255
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
description WIRED
ip address 172.16.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip policy route-map NAT_WIRED
!
interface Vlan20
description WIRELESS
ip address 172.16.3.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip policy route-map NAT_WIRELESS
!
interface Async0
no ip address
encapsulation scada
shutdown
!
interface Async1
no ip address
encapsulation scada
shutdown
!
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip dns server
ip nat inside source route-map NAT_WIRED interface Cellular0 overload
ip nat inside source route-map NAT_WIRELESS interface GigabitEthernet0 overload
ip route 0.0.0.0 0.0.0.0 Cellular0
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0 dhcp
ip ssh version 2
!
ip access-list extended LIST_WIRED
permit ip 172.16.2.0 0.0.0.255 any
ip access-list extended LIST_WIRELESS
permit ip 172.16.3.0 0.0.0.255 any
!
ip sla 1
icmp-echo 172.16.11.1
timeout 10000
ip sla schedule 1 life forever start-time now
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipv6 permit
ipv6 ioam timestamp
!
route-map NAT_WIRELESS permit 10
match ip address LIST_WIRELESS
match interface GigabitEthernet0
!
route-map NAT_WIRELESS permit 20
!
route-map NAT_WIRED permit 10
match ip address LIST_WIRED
match interface Cellular0
!
route-map NAT_WIRED permit 20
!
!
!
!
!
control-plane
!
!
!
line con 0
exec-timeout 0 0
stopbits 1
line 1 2
stopbits 1
line 3
script dialer lte
modem InOut
no exec
transport preferred none
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
rxspeed 150000000
txspeed 50000000
line 4
no activation-character
no exec
transport preferred none
transport input all
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
line 8
no exec
transport preferred none
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
rxspeed 150000000
txspeed 50000000
line 1/3 1/6
transport preferred none
transport output none
stopbits 1
line vty 0 4
transport input ssh
!
no scheduler max-task-time
ntp server time.google.com
ntp server pool.ntp.org
no iox hdm-enable
iox client enable interface GigabitEthernet5
no iox recovery-enable
!
!
!
!
!
!
!
end
