1841 Router Layer 2 routing

I have 4 layer 2 ports on my router. I would like to connect them to my different vlan segments on my switch or directly to server boxes. I can't seem to be able to route the traffic from those boxes out. The router sees the interfaces as up, but I can't seem to do anything with routing the data.
Here is my config:
boot-start-marker
boot-end-marker
username xxxxxx password 0 xxxxxx
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
ip dhcp pool group1
network 10.1.10.0 255.255.255.0
dns-server 208.x.x.x.x.37.246 4.2.2.2
default-router 10.1.10.1 255.0.0.0
ip name-server 64.56.37.246
vpdn enable
vpdn logging
vpdn logging user
vpdn-template
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
no ftp-server write-enable
interface FastEthernet0/0
ip address 10.1.10.1 255.255.0.0
ip nat inside
duplex auto
speed auto
no keepalive
interface FastEthernet0/1
ip address xxxxx secondary
ip address xxxxx
ip nat outside
duplex auto
speed auto
no keepalive
interface FastEthernet0/0/0
no ip address
ip access-group 102 in
ip access-group 102 out
interface FastEthernet0/0/1
no ip address
shutdown
interface FastEthernet0/0/2
no ip address
shutdown
no keepalive
interface FastEthernet0/0/3
no ip address
shutdown
interface Vlan1
no ip address
router eigrp 2
network 10.3.0.0 0.0.255.255
ip local pool group2 10.1.11.1 10.1.11.254
ip default-gateway xxxxx
ip classless
ip route 0.0.0.0 0.0.0.0 xxxxx
no ip http server
ip nat inside source list 102 interface FastEthernet0/1 overload
ip nat inside source static udp xxxxx 8767 10.3.10.250 8767 extendable
access-list 102 permit ip 10.1.0.0 0.0.255.255 any
access-list 102 permit tcp 10.1.0.0 0.0.255.255 any
access-list 102 permit tcp any eq domain any
access-list 102 permit udp 10.1.0.0 0.0.255.255 any
access-list 102 permit ip 10.3.0.0 0.0.255.255 any
access-list 102 permit udp 10.3.0.0 0.0.255.255 any
control-plane
line con 0
password xxxxx
logging synchronous
login
line aux 0
line vty 0 4
password xxxxx
logging synchronous
login
end
I want to route the 10.3.0.0 network out fa0/1 secondary ip.
Thanks for the help,

Thanks for the reply.
The 10.3.0.0 network in which the servers are staticly set on. Since they are connected to layer 2 ports I can't set an ip on the port.
Fa0/1 is my connection to the internet. The ip and secondary ip are 2 public ips I have. No matter how I route the 10.3 network I still can't get out.
The server ip information is:
IP: 10.3.10.250
Mask: 255.255.0.0
Gate: 10.3.10.1 <-- I have also tried setting this for the ip on fa0/1.

Similar Messages

ChaRM: transport layer/routes used by ChaRM

Hi!
We have very complex trasport system settings and would like to implement ChaRM with parallel usage of transports in non-ChaRM environment.
We have a lot of transport routes (between DEV:100 and QAS:100) (e.g. SAP, ZDEV, ZFAD, ZGFA, YDAS).
How can we split the transport routes for ChaRM and transport routes for transports without ChaRM?
Which transport routes will be used with ChaRM?
Thank you very much!

Hi
as already mentioned in one of my replies to your last thread, ChaRM always (and only) uses the standard transport layer (route) per client.
This one and all other ones can be used for non-ChaRM transports. This is standard TMS functionality.
But you have to check if the "ChaRM check" in your project configuration accepts your TMS settings. Maybe the other transport layers/routes make waves. Then you have to change them...
regards
Andreas

Routes and Routes Determination

Hello All,
I m basically a technical person and i m doing recording for routes and routes determination.
I am facing one problem.
while executing transaction 0vtc in one system , while saving data its asking for transport request.
and when i execute the same transaction in IDES system , and when i save data it does not ask for the transport request.
Is there any config for that?
Please help me out...its required asap..
thanks,
jigs
Helpful ans will be rewarded.

Hi
not sure if this would help. but going through some of the older posts here, here's something I gathered:-
++++++++++++++++++++++
It also depends on the client settings, which is done by the BASIS guys. If the client settings are done in such a way that system should not generate requests then it will not generate a request.
If the system is created as a Sandbox then also system will not ask for a request.
using the T codes SE01 where all the list can be viewed , then select the task or transport request click on the trucj button .
+++++++++++++++++++++
hope it's a start

Difference between Routing & Rate Routing

Hi All,
can anyone tell me difference between Routing & Rate Routing? can we use routing for REM? if no, then what will be the effect?
Thanks,
Rinky

Hi Rinky ,
Routing and rate routing are task list in broad manner .
standard task list: Describes the worksteps necessary to produce a material or perform an activity without reference to an order.( that means they are created without reference to order )
Essential objects of a task list are header, operations, material component allocations, production resources/tools and inspection characteristics.
Together with specific dates and quantities, task list data forms an important part of the order.
The following task list types exist in the R/3 System:
routing
reference operation set
rate routing
reference rate routing
inspection plan
maintenance task list
standard network
master recipe
Routing is created with ca01 and rate routing by ca21 .
Routing is used in discrete manufacuting and rate routing in repetitive .
Rate routing generally has only one operation and prod line instead of work centers and operations in routings .
Both routings can be used for scheduling , cosing and capacity planning .
Hope this was helpful answer !
Neal
Edited by: Neal Gibson on Jun 30, 2008 11:46 AM

Routing & rate routing

hello everyone,
myself rekha bamgude,i want to know difference between routing & rate routing?

Hi rekha to get a quick (or any) response, create your new discussion in a space related to your query. This way it will be visible to topic experts who will then see and reply to it.
Please move this thread to the relevant forum Enterprise Resource Planning (SAP ERP)
as you mention
i want to know difference between routing & rate routing?
Many times we told this word (Search before you post ).
please see this thread for more details.
Difference between routing and rate routing
poorna

Routes and route groups expanded

Is there any way to force the routes and route groups to show un-expanded when I click on the Routes/Groups tab in switch executive? I have many and it is difficult to navigate when they are all expanded.
kph

Hi kphite,
At this time, there is no method to force the collapse of the routes and route groups. However, thank you for this product suggestion. Just so you know, we have previously considered the implementation of such a feature and agree that this functionality would be beneficial. We do have it in our plans for future revisions of NI Switch Executive.
Thanks again!
Chad Erickson
Switch Product Support Engineer
NI - USA

Router to Router Dialer VPN

one of my router is configured with site to site vpn, I want this router to establish a dialer vpn from a remote router,
Remote router will be configured as dialer vpn as there is no Live IP available in remote site, I dont want to configure it as Site to site vpn,
Please refer some docuement to achive this goal,

Hi Karsten -
I'm afraid I cannot use the EasyVPN feature at all.
The vendor informs me that there is another IPSec VPN tunnel which connects back to their office to provide other capabilities.
So I have to use L2L IPSec -- and do it with a dynamic IP from the router side, to a fixed IP on the ASA side.
Is it possible to build the tunnel-group on the ASA side so that it doesn't require a known IP for the remote side of the tunnel?
I'm using DefaultL2L tunnel group (on the ASA) at the moment to terminate the VPN when the router is using the satellite connection via FA90/1, with a fixed IP address.
But the DefaultL2L group doesn't have the IP of the router -- yet it works...
The same VPN config, used from the FA0/0 interface of the router with the same crypto map
just gives the traditional "No match, deleting SA" message..
I can see the router trying to establish the VPN, but it's just not able to negotiate, and the only reason I could think of was that the FA0/0 interface had a DHCP address instead of a static IP.
Strange that it works OK with the ASA's DefaultL2L tunnel group, with no mention of the router's FA0/1 static IP, yet the FA0/0 with a dynamic IP won't work.
We did just hook up the satellite and used FA0/1 to test it -- vpn came up instantly...

Router to Router VPN with Overlapping internal networks

Hello Experts,
One quick question. How do I configure a Router to Router VPN with overlapping internal networks???
Both of my internal networks have ip address of 192.168.10.0 and 192.168.10.0
Any link or config will be appreciated. I've been looking but no luck.
Thanks,
Randall

Randall,
Please refer the below URL for configuration details:
Configuring an IPSec Tunnel Between Routers with Duplicate LAN Subnets
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800b07ed.shtml
Let me know if it helps.
Regards,
Arul
** Please rate all helpful posts **

Router-to-Router VPN Security

Hi there,
Should we worry about the the security on router-to-router VPN over internet (IPSec) ?
We have two offices.
Office A has Cisco 2811 router (internal, private) and ASA 5510 firewall.
Office B has Cisco 2821 router (internal, private) and ASA 5505 firewall.
Office B has private subnets that extend to 7 hops away. (running RIP)
If we want to set up a site-to-stie VPN between these two offices, should we set it up on ASA's or routers?
If we set up VPN on routers, does that mean we need to connect one interface to the internet on each router and suffer from Internet attacks?
How do we defend our routers then?
Thanks in advance!
-Andrew

Hi,
when it comes to site to site vpn I usually prefer routers. Whith a little bit of tweaking NAT and routing you should be able to operate a public address on the routers even if they are behind the firewall.
The advantage of IOS based VPN is e.g. the possibility of routing protocols through the VPN tunnels which would give another level of resiliency. Configure tunnel interfaces on the routers with a tunnel mode IPsec and a tunnel protection profile. You can then run e.g. EIGRP to find a possible alternate path if one of the tunnels fails. Its much easier than anything I can think of on the ASA.
Rgds, MiKa

ISR router EIGRP Route Tag

Hi,
Wondering any one has successfully set route tag for EIGRP routes?
What I am trying to achieve here is to set route tag for the summary routes of the connected interfaces and subnets of some other connected interfaces.
Let's say an ISR router R1 with IOS 15.1(4)M3 has three interfaces running with EIGRP.
Interface Gi0/0
ip add 172.16.0.1/24
summary-add 172.16.0.0/16
Interface Gi0/1
ip add 172.16.1.1/24
summary-add 172.16.0.0/16
Interface Gi0/2
ip add 192.168.2.1/24
I am having difficulty to set route tag for summary add 172.16.0.0/16 and 192.168.2.0/24 before they get advertised to another router.
Any idea please?
Thanks
Cedar

Duplicate posts.
Go here: https://supportforums.cisco.com/discussion/12256521/isr-router-eigrp-route-tag

How to verify the routes from router when Polycom device Initiates traffic

Hi,
Could anyone please assist me in finding out the routes when Polycom device initiated traffic towards the BCS global.
1) polycom equipemnt is connected to the Internal Lan of the customer and its traversing through Router,
I checked though Ip accounting when the user initiates the traffic. (polycom device ip is x.x.x.10 and BCS global network is aa.aa.aa.0). When i checked IP accounting i found the destination ip is x.x.x.10 and source ip is aa.aa.aa.205 when user initiates traffic from Polycom device.
2) I also found the static route in router for BCS global network (aa.aa.aa.0) but when I tried to trace route to IP address (aa.aa.aa.205) the output shows:
1. * * *
2. * * *
10) * * *
Could anyone please assist me is there any other any other way to find out the routes.

Thanks, this did it for me. The verification from rommon was ok and I guess I can trust the rom even when not comparing the information with cisco webpage.

Access Layer Routing

Hello everyone,
We're running on a collapsed core network design and I'm looking to move routing down to the access layer. I've attached a sample diagram of a small portion of the overall network to give you an idea of how things are connected. Currently, all routing, ACLs, multicast, etc. is being handled in the core. I would like to move as much of this down to the access layer as possible. The problem I'm faced with is our phone system (non-Cisco). We have two PBXs that are not running in an HA configuration and are in their own VLANs with routing between them. We have phones that are registered to both PBXs that are physically located throughout our campus. I'm afraid that if I move routing down to the access layer, I'm gonna lose communications between the phones and the VoIP system since traditional routing won't allow me to have the same subnet in two different locations for the same infrastructure. The only thing I can think of is possibly establishing EIGRP neighbors for the phone network and then NAT'ing the phones behind their gateway. Can someone shed some light on some real-world workable solutions?
Thanks!
TLock

I have just typed out probably the longest answer I have ever done and this stupid website just errored on me and I lost it :-)
So basically you make the uplinks trunks and for each access switch you need two new vlans unique to that switch ie. you cannot reuse these vlans on other access switches.
You then emulate point to point links using SVIs to peer on instead of L3 routed links.
On the trunk link you only allow the new vlans + the VOIP vlan eg. access switch connects to core1 and core2. New vlans are 3 & 4.
Create new vlans on access switch and vlan 3 on core 1, vlan 4 on core 2 plus the corresponding SVIs. You only need two useable IPs per vlan. So -
uplink to core 1 -> allowed vlans = vlan 3 + VOIP vlan
uplink to core2 -> allowed vlans = vlan 4 + VOIP vlan
Then you peer with a dynamic routing protocol between access switch and the core switches using the SVI IPs.
All vlans (except the VOIP vlan) are routed locally and for remote subnets they use the new vlans as transit.
Key thing is to only allow the vlans that need to be allowed on the trunk links and basically you have emulated using point to point links but using SVIs.
The main downside is you need two new vlans per access switch. This means a lot of new vlans on the core where you may hit STP issues if you are running a variant of PVST. Note I'm assuming all core switches will be L3 interconnected so STP isn't doing anything except for the VOIP vlan but it should still be running.
The VOIP vlan would have to be routed in the core. Which means if you want HSRP for it you need to run separate L2 links between the switches (in addition to the L3 links). The L2 links would be access ports in the VOIP vlan.
Finally, and this applies even if you had L3 routed links ie. you didn't need to span the VOIP vlan across multiple switches, you are not necessarily going to get the best use of your uplinks because you have three core switches eg.
ESW02 connects to CSW01 and CSW02
ESW05 connects to CSW02 and CSW03
that means for subnets on ESW05, ESW02 is always going to see CSW02 as the best path because it is a shorter number of hops away.
You could play with the metric to influence this but it is not ideal ie. if you only had two core switches this would not be a problem and each access switch would see equal cost paths.
But I suspect you cannot simply go down to two core switches.
Let me know what you think ie. queries, doubts, just don't like the idea :-)
Jon

How to hide trace route layer 3 hop?

My set up is MPLS router--- Internet edge-------ISP
I am advertising public ip prefix from MPLS to internet edge and then to ISP
when i trace route from internet to the public prefix i advertised, i am seeing the MPLS private IP which is expected.
Basically i wanted to hide this from the trace route results i.e, when the user tries to trace route to the public ip from the internet he should NOT see the private ip at all. "no icmp unreahcable" might give a * result in the trace route last hop but i wanted hide it .. is it possible?

Hi,
Traceroutes takes into account the TTL value, be it MPLS packet or IP packet.
on the edge of the IP & MPLS network , TTL field get copied from one to another & the traceroute works properly. But "no mpls ip propagate-ttl" can diable this automatic copying the TTL value field. Hence, your traceroute will drop on edge/boundary, this generally done by ISP to hide their ip address from the traceroute path.
mpls ip propagate-ttl
To control the generation of the time-to-live (TTL) field in the Multiprotocol Label Switching (MPLS) header when labels are first added to an IP packet, use the mpls ip propagate-ttl command in global configuration mode. To use a fixed TTL value (255) for the first label of the IP packet, use the no form of this command.
mpls ip propagate-ttl
no mpls ip propagate-ttl [forwarded | local]
The Traceroute Command in MPLS
http://www.cisco.com/c/en/us/support/docs/multiprotocol-label-switching-mpls/mpls/26585-mpls-traceroute.html
- Ashok
Please rate the post or mark as correct answer as it will help others looking for similar information

How to count number of default routes in routing table

Is there a way for java to count the number of default routes in the routing table?

Hi Sathish,
If you are using table mean surely you are binding the table to some model like JSON model. You can bind the checked value of the column with the checkbox in the template. So while checking you can directly check the property by taking the reference from the model. Navigate through all the objects in the model and check the property you wanted.
This is the logic I have used to get the checked property form the table column. My table id is "tableId" and it is being binded with "/tableModelData" of json model.
var myModel = sap.ui.getCore().getElementById("tableId").getModel().getProperty("/tableModelData");
for(var i= 0 ; i< myModel.length ; i++)
var singleObject = myModel [i];
if(singleObject.checked == true){
your logic.

Yoga 2 11 drops signal on Airport router - change router settings?

i have spent several hours with Lenovo tech supports (all perfectly friendly), trying to fix the issue of the Yoga 2 11 consistently dropping the wifi connection at my workplace. Two important considerations:
* It's not entirely on the Yoga, as it does not have this issue with home wifi, coffee shop wifi, etc.
* And several other PC and Mac desktop and laptops have no trouble with the workplace wifi. The problem is definitely the way that the Yoga interacts with the Airport router.
Lenovo tech support has made numerous changes to my drivers, system settings, and so on, but cannot fix the problem. The next solution is to return the Yoga to factory settings -- a solution I'm convinced will not work as I've already returned one laptop to Best Buy for the same problem. In other words, two Yogas, directly out of the box (presumably with factory settings), had this issue.
My question is -- is there possibly a way I can change the Airport router settings (or set up a new network entirely) that might be more compatible with the Yoga 2 11 with Intel Wireless-N 7260 card? If I can't get the Yoga to talk to the router, maybe the router can be changed to talk to the Yoga.

Which model AirPort Base Station do you have?
To determine that open AirPort Utility, select your base station, then position your cursor over the base station's name. Reply with the text shown adjacent to "model".

1841 Router Layer 2 routing

Similar Messages

Maybe you are looking for