Cisco - 1721&Cat 2950 - Router on a stick Problem

[rothbard123]

I cant figure out what is wrong with my router on a stick config.

SWITCH VER
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA10a, RELEASE SOFTWAR
Image text-base: 0x80010000, data-base: 0x80570000
ROM: Bootstrap program is C2950 boot loader
System image file is "flash:/c2950-i6q4l2-mz.121-22.EA10a.bin"
cisco WS-C2950-24 (RC32300) processor (revision S0) with 20957K bytes of memory
==============
---config removed---
!
interface FastEthernet0/1
switchport access vlan 4
!
interface FastEthernet0/2
switchport access vlan 2
!
---config removed---
!
interface FastEthernet0/9
switchport trunk native vlan 2
switchport mode trunk
!
++++++++++
ROUTER VER
Cisco IOS Software, C1700 Software (C1700-IPBASEK9-M), Version 12.4(25b), RELEASE SOFTWARE (fc1)Cisco 1721 (MPC860P) processor (revision 0x500) with 58606K/6930K bytes of memory.
Processor board ID FOC09500SS1 (2147951769), with hardware revision 0000
=====
ROUTER CONFIG

interface FastEthernet0
no ip address
speed auto
!
interface FastEthernet0.2
encapsulation dot1Q 2 native
ip address 172.12.2.1 255.255.255.0
!
interface FastEthernet0.4
encapsulation dot1Q 4
ip address 172.12.4.1 255.255.255.0
!
============

HOST/LAPTOP 1 on switch f0/1
172.12.4.4
255.255.255.0
172.12.4.1

HOST/LAPTOP 2 on switch f0/2
172.12.2.4
255.255.255.0
172.12.2.1

=====
HOST 1 can ping 172.12.2.1 and 172.12.4.1
HOST 1 can NOT ping 172.12.2.4

HOST 2 can ping 172.12.2.1 and 172.12.4.1
HOST 2 can NOT ping 172.12.4.4

---

Could anyone provide any adivce on how to allow host 1 to ping host 2?

If you need more info please ask.

Thank you so much in advice!!

 

[burtsbees]

How about a complete sh run from both router and switch? So far you're missing

1."ip default-gateway" in the switch
2.Native VLAN SVI ip address (which is only important if you want to remotely manage the switch, I.E. telnet).

switch(config)#ip default-gateway 172.12.2.1

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[vipergg]

Turn off the software firewalls on both clients ...

 

[Viconsul]

Without posting the full config of both the router and the switch it is difficult to find any errors in the config. But it is stated that PC1 can ping its gateway and the remote gateway for the other vlan and PC2 can do the same, therefore the initial thought will be that routing is ok. Please check the firewall settings on your hosts as stated above.

 

[burtsbees]

1.Make sure both of your vlans are in the vlan database...
switch#vlan database
switch(vlan)#sh

and/or

switch#sh vlan brief

2.All of your settings look correct, but in playing around you may have accidentally deleted a vlan out of the database, though it still shows in the start and running configs.

3.You actually don't need to define a native vlan. The fact that you are, I was simply pointing out that I thought your intent was to also manage the switch. The ip address I posted is wrong---it's actually supposed to be something between 172.12.2.3-172.12.2.254

4.I completely agree with Vic and Viper---if the vlans all show up in vlan database and show vlan, then turn the firewalls off on the laptops.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[Cluebird]

Do what vipergg and brut says. Turn off the firewalls on the hosts so they can respond to pings.

Your testing shows inter-vlan routing is working just fine. The hosts aren't responding.