Secondary LAN IP VS sous-interface

Hi all

I have a 1941 installed on a customer site with subnet required 10.0.0.0/16. WAN is via VPN MPLS.

someone can let me know if it is advisable to use secondary IP addresses or should I go with subinterface? What are the advantages and disadvantages of the use of one over the other.

always contemplating on the Installer (not yet in production) and must be reading your thoughts. Thanks in advance!

#sh worm

Cisco IOS software, software C1900 (C1900-UNIVERSALK9-M), Version 15.0 (1) M6, RELEASE SOFTWARE (fc1)

Technical support: http://www.cisco.com/techsupport

Copyright (c) 1986-2011 by Cisco Systems, Inc.

Updated Thursday, June 1, 11 15:31 by prod_rel_team

#sh run int g0/1

Building configuration...

Current configuration: 410 bytes

!

interface GigabitEthernet0/1

Description network client

the IP 10.0.0.1 255.255.255.0 secondary

IP 10.0.1.1 255.255.255.0 secondary

IP 10.0.2.1 255.255.255.0 secondary

10.0.3.1 IP address 255.255.255.0 secondary

10.0.4.1 IP address 255.255.255.0 secondary

10.0.5.1 IP address 255.255.255.0 secondary

IP 10.0.8.1 255.255.255.0

full duplex

Speed 100

No keepalive

Subinterfaces will also keep the traffic areas of separate broadcast which is another advantage. However, this means that you must apply additional configuration for relay emissions between the VLANS. For example, so that DHCP clients can communicate with a DHCP server in a VIRTUAL local network. Order support - ip address will send the most common, such as DHCP. Place it on the subinterface where DHCP clients reside and set address of assistance as the DHCP server. Google and I'm sure you will find many examples.

Subinterfaces are traffic with the VLAN ID tag, so I presume your connected devices are also capable of brand VLAN traffic. What devices you connect your interface GigabitEthernet0/1 of the router?

Tags: Cisco Support

Similar Questions

  • LAN on PIX 501 interface

    When I try to change the IP Address of the LAN interface (must be 192.168.5.1 (next year it will change to a 10.1.1.1) and when I change it says it can't change because of the subnet pool dhcp.) I tried to add a 192.168.5 dhcp pool, but it still will not let me change it. And when I try to change the initial DHCP pool, that it is said that he can't because of the interface of local network subnet.

    Sorry, I tried to make sure and you actually need to remove the address dhcpd range in order to change the IP address assigned to the interface as the interface from the DHCP server. Here's an example from my PIX:

    515 (config) #.

    515 (config) # ip add inside 192.168.1.1 255.255.255.0

    515 (config) #.

    515 (config) # sh dhcpd

    dhcpd address 192.168.1.10 - 192.168.1.50 inside

    dhcpd dns 192.168.1.100

    dhcpd wins 192.168.1.100

    dhcpd lease 3000

    dhcpd ping_timeout 750

    dhcpd allow inside

    515 (config) #.

    515 (config) #.

    515 (config) # ip add inside 10.1.1.1 255.255.255.0

    Address of the interface is not on the same subnet as DHCP pool

    515 (config) #.

    515 (config) #.

    515 (config) #.

    515 (config) # no dhcpd address 192.168.1.10 - 192.168.1.50 inside

    DHCPD disabled on interface inside because address pool is deleted

    515 (config) #.

    515 (config) #.

    515 (config) #.

    515 (config) # ip add inside 10.1.1.1 255.255.255.0

    515 (config) #.

    515 (config) # dhcpd add 10.1.1.10 - 10.1.1.50 inside

    515 (config) #.

    515 (config) #.

    515 (config) # dhcpd allow inside

    515 (config) #.

    515 (config) #.

    515 (config) #.

    515 (config) # sh dhcpd

    dhcpd address 10.1.1.10 - 10.1.1.50 inside

    dhcpd dns 192.168.1.100

    dhcpd wins 192.168.1.100

    dhcpd lease 3000

    dhcpd ping_timeout 750

    dhcpd allow inside

    515 (config) #.

    Scott

  • Main LAN port fails to connect to the internet when the secondary LAN is connected

    I work as a system administrator, we use windows server 2008r2 in a server with 2 ibm x3100m4 cards.1st lan port uses for external access and internet with a static ip address, second port uses for internal server and access the applications only, two ports connected to different internet connections. problem is windows take the second port for internet access, so the external accessibility does not work, when I unplug the second external cable works, I put the first port in the primary network, still its taking the second line for the internet, someone can help me solve this problem, I just want the first port for second internet access to access internal not for internet connectivity.

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.msdn.Microsoft.com/forums/en-us/home

  • Area basic FW: adding secondary address to an interface

    If you configure a secondary IP address on an interface - say int fa0/0 zone "inside" - who immediately come into effect for traffic on this subnet? I'll work on a network where they have installed too small a subnet on the inside and I would like to facilitate the migration by putting on a secondary IP address and let them renumber all their stuff etc. Then as the last brief step I'll nuke address main and primary school.

    Would this work? Thank you.

    Once u put the secondary it will enter into effict

    but I think for nating, you need to do to recharge

    or rstart sessions

    Good luck

  • How to set up a Lan to Lan VPN without using your external IP address?

    I have two 28 subnets A & B.

    My PIX and ASA outside interface addresses are both in A subnet.

    I am in the middle of a migration of the PIX to ASA and need to use the PIX outside of the address of the interface on the ASA for the last two remaining lan to lan VPN.

    I do like that because the sellers of these virtual private networks to connect to are huge dinosaurs IT and the aaages to get their sh * t tri... This means that I have to pass the IP address to my ASA, so I can't sentence have change for a new IP peer.

    I tried to figure out how to set a specific my counterpart VPN IP address but I can't figure out how...

    I even physically connected a second ethernet port and tried to give a similar IP in the same range, which it says it is not possible to have both outside the IP addresses on the same subnet.

    Hello

    It is not possible to have an IP address "secondary" on the physics/logic interface of a Cisco firewall.

    And as you've noticed, you cannot configure the same subnet on 2 different interface either.

    We are talking about such a large configuration that you want to just migrate from completely to the ASA PIX and make a switch during a maintenance window?

    Couldn't you just pass the ASAs 'outside' IP address address to that on the PIX and move the ASAs 'outside' of the PIX? Or not the ASAs "outside" IP address already some configured related to what makes this impossible?

    -Jouni

  • WRT54G v3.1 (firmware v4.21.1) is not route packets between interfaces

    I am at a loss, because it seems that I'm really close to having my small network of installation works, except my router linksys faithful does not seem to be interested in packages of brewing between the WAN and WLAN interfaces.

    Background:

    I just moved into a new House, AT & T U-verse is taking their sweet time thought of digging a trench, so I have no wired internet, but I have a phone with 4G support that I can use as a hotspot Wi - Fi (high-end and very limited functionality).

    My goal is to rebuild my local network (two servers by cable, half a dozen various wireless devices), using my WRT54G as the central routing for her component.

    Plan:

    1. install a wireless bridge that connects to the Wifi 4 G hotspot.

    2. connect ZyXel bridge to the WAN port on the WRT54G

    3. connect and other devices in LAN WRT54G and wireless interfaces.

    Results:

    1. I got a ZyXel WAP3205 to this effect, and it seems to work fine (when connected to PC, PC is to get internet access through it perfectly.)

    2 seems to work fine. the linksys router is able to obtain an IP address on DHCP 4G Wifi hotspot (the Zyxel will exercise a passthrough.) The admin/diagnosis tab let me DNS resolve/ping/traceroute arbitrary sites on the internet.

    3 is not happy. I am able to access the router admin page. I can ping the router from any of my devices to end IP addresses, but nothing goes further. I can not ping IP of 4G Wifi hotspot for example (but I do go in the WRT diagnostic tools)

    Details of config:

    -4G - Wifi hotspot is configured as a DHCP/Gateway server. His IP address is defined as 10.10.10.1, subnet 255.255.255.0, assignment of IP addresses between 10.10.10.2 - 10.10.10.254

    -WRT router is configured as a DHCP/Gateway server as well. Its local IP address is set as 192.168.1.1, subnet 255.255.255.0, IPs assignments between 192.168.1.2 - 192.168.1.51.

    -All the rest is to default settings. Mode of operation is the gateway, routing table is showing

    Destination LAN IP.  Subnet mask |  Entry door |  Hop count | Interface

    192.168.1.0. 255.255.255.0. 0.0.0.0. 0           | Wireless LAN &

    10.10.10.0 | 255.255.255.0. 0.0.0.0. 0           | WAN (Internet)

    0.0.0.0             | 0.0.0.0. 10.10.10.1. 0           | WAN (Internet)

    This seems reasonable.

    -Status/router tab displays an IP WAN address 10.10.10.172, subnet 255.255.255.0, gateway 10.10.10.1, DNS1 10.10.10.1, which looks very good as well.

    I tried to adjust various settings on the router (gateway in router mode switching, disable DHCP and manually configure IP addresses), but nothing seems to convince the router to start, you know, routing of packets autour.

    I hope I'm missing something stupid here, and I'll be grateful for any help and judgment on this.

    Thank you

    Henri

    * Edit: I should add, I use this little guy for years previous houses, and it has always worked, even if its WAN port was always plugged into a modem cable of some sort. So I don't think that the WRT54G is likely to be broken or defective.

    Sonuva...

    Apparently, the little box just need a fast walk. After a factory reset and set my wireless settings screw, it seems to work perfectly.

    Well, I think that I'm talking to myself now.

    Just for fun, here is the great link, I'll be sharing between devices 8 or 9:

    (which is through my whole setup, even if the speed is exactly the same thing with a direct link.)

  • How to distinguish the physical interface and logic (subinterface) interface to the Cisco router/Switch?

    Hi Expert,

    How to distinguish the physical interface and logic (subinterface) interface to the Cisco router/Switch? Can you please clarify a formal way for this so have?

    A physical interface is numbered with the same name of the interface when printing on the physical port. For example "GigabitEthernet 0/1" corresponds to port 1 of the 0 module (or the base unit).

    A logical interface can be a subinterface on a routed port and will have a point ("". "") preceding the number sous-interface (ex. GigabitEthernet 0/1.1). It can also be a loop or a virtual interface (on a router this could also include interfaces like the tunnel and virtual tunnel or VTI types). A switch may also have a VLAN logical interfaces (e.g. interface vlan 1) which are used as layer 3 virtual interfaces of type.

  • Cannot access a remote LAN with Cisco Client

    Hello

    IAM using an ASA 5505 and connect with the Cisco Client 5.0.02.0090. The Client connects to the Remote LAN and get an IP of the SAA.

    But I can't access the Remote LAN or ping the Interface of the ASA trainee.

    Can someone help me with this problem?

    If the client computer is in the same subnet as the other PC, then its dislikes a question ASA.

    Just make sure that the client computer is in the subnet, default gateway of 192.168.20.100 192.168.20./24 and connected to a switchport on vlan 1.

    Finally, check whether the DNS resolution works, or if you can browse the internet with the ip address.

  • ASA secondary IP address configuration

    Hi Experts,

    Is it possible to configure a secondary IP address in external interface? My need is... my client ISP's going to change. For the migration, so I need to connect to the external interface to the new ISP. If I can set a secondary IP address to the external interface, there is no downtime at all... I searched for this. But I did not have a valid solution. Could someone please help?

    concerning

    Vipin

    No, unfortunately ASA interface does not support the secondary IP address configuration as in router IOS.

    Unfortunately you will not be able to have zero to download when you change ISPS.

    Do not forget also to change the following:

    -ASA outside interface to the new ISP subnet

    -Default route for external interface

    -All the NAT will be replaced by the new addresses of the ISP

    -All the DNS resolution as appropriate to the new address ISP

    -All the ACL will be replaced by the new addresses of the ISP

    -Also notified all of your change of address ISP VPN peers.

  • Multiple WAN + several VLAN = hair loss

    Hello world

    We have a block of IP addresses of our ISP and I am using one for a network of comments, but I can not understand how to configure.

    X 2 (ending with 150 WAN IP address) should feed WAN X 0 (VLAN 1), and

    X 2 (ending with 151 WAN IP address) should feed WAN X 0: V2 (VLAN 2).

    I have already created the sous-interface side LAN and VLAN works very well internally.  I just need to know what NAT rules (or rules of firewall or sorcerers, etc.), I need to enter to the above plan work.

    Thank you!

    Hello

    Policy NAT below should help you accomplish what plan to do:

    Original source: X 0 subnet
    Translated source: X 2 (IP WAN ending by 150)
    Original destination: all
    Translated destination: Original
    Original service: no
    Translation service: Original
    The source Interface: X 0
    Destination interface: X 1

    Original source: X 0: subnet V2
    Translated source: X 2 (IP WAN ending with 151)
    Original destination: all
    Translated destination: Original
    Original service: no
    Translation service: Original
    The source Interface: X 0: V2
    Destination interface: X 1

    #IWork4Dell

  • Conditional NAT to subinterface that is the counterpart to site to site

    Hi all

    External interface of the ASA is the endpoint for remote access clients. RA clients receive 172.5.x.0 IPs. I created a subinterface in DMZ with the ip x.x.x.71. I will establish a site-to-site for this subinterface. It is...

    RA customers should be able to reach an IP address for a remote peer from site to site VPN based on subinterface. But the remote peer will not be 172.5.x.0 on their site. They want to see a real IP address. Here's what I thought

    Do a conditional NAT to network 172.5.x.0 for subinterface ip by the following addition. Subinterface has the security level of 3, and outside was 0.

    access-list 101 permit ip 255.255.255.0 172.5.x.0

    NAT (inside) 10 101 access list

    global interface (sous-interface) 10

    And I get

    WARNING: Link inside the nat in outermost interface declaration.

    WARNING: Keyword 'outside' is probably missing.

    Should I type

    NAT (outside) 5 172.5.x.0 255.255.255.0 outside

    Or should I chenge level of security outside 1 and subinterface to 0? What affects that would cause? Isn't it? How the split tunneling should work in the future.

    I used some packet-trace and watched a bunch of 172.5.x to lan remote but it doesn't through my conditional Nat. It will first of all through the route

    Route subinterface remotelan remotemask subintgateway

    So instead walk through the NAT condit, he walks through the external and I get

    6 on October 19, 2007 19:49:01 109025 172.5.x.88 x.175.x.193 permission denied (acl = SCSVPN01_restrict) to the user "testbayi" of 172.5.x.88/1499 to x.175.x.193/80 on the interface to the outside using TCP

    Any help is very appreciated

    I will not allow the same traffic to security

    Concerning

    First of all, you should try command "nat (outside) 5 172.5.x.0 255.255.255.0 out" and if it does not, you can change the security level on the outside at 1 and subinterface to 0. Another solution would be to set up crossed on the SAA.

  • Multiple DMZ on ASA 5520 connection to a Catalyst 3550

    I have ASA 5520 with 4 ports, I have 8 networks from the DMZ. As anyone configure an ASA 5520 for use with VLANS or sous-interfaces? How are you?

    I plan to use interfaces on the DMZ interface and assign a vlan to each interface of void. Should I configure dot1q trunking on the interface of the DMZ. If this isn't the case, I'll have to set it up on the switchport to my DMZ switch? or does each subinterface * Just Thinking out loud *.

    Thank you

    Hi there on the physical interface first you won't have any config except for nonstop and up.then interface create secondary interfaces on the same interface as int I0.1. set the security level and assign them to one vlan and IP to make them.after which connect a switchport port and configure the port a port trucnking cause all traffic vlan of the asa will elapse of this port.on the button to connect your servers and assign the port to their VLAN respective and configure gateways thie as the ip address of the vlan configured on the asa. That's all. Incase you need more information. write again. If I solved it your problem then pls note the post.

    Assane

  • Router and Switch cannot ping each other

    Hello

    I just build a lab at home.

    In my current lab, I have 2 SW and 3 the router.

    I have a problem, I do not know what Miss me in my config. My router cannot ping my SW.

    and I also want to change my LAN from VLAN 1 interface connection at 30 of VLAN... but when I configure the VLAN 30 he show me line is in PLACE but the Protocol is DOWN.

    Another question, if I want to create a VLAN with a different address, what should I do?

    for example

    VLAN 10 > 10.10.10.1

    VLAN 20 > 20.20.20.1
    etc...

    interface Vlan1 description LAN ip address 10.10.10.1 255.255.255.0 secondary ip address 30.30.30.1 255.255.255.0 secondary ip address 40.40.40.1 255.255.255.0 secondary ip address 20.20.20.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly dot1q tunneling ethertype 0x9100 hold-queue 100 out!
    Here's the conf for my RT. ROUTER > 877SW > 2950 24 WS
    CISCO_877#sh runBuilding configuration...
    
    Current configuration : 3468 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname CISCO_877!boot-start-markerboot-end-marker!enable secret 5 $1$.ISW$71jzJ0Or0nenXZd/8D8.x/!no aaa new-model!!dot11 syslogip cefno ip dhcp use vrf connectedip dhcp excluded-address 20.20.20.0 20.20.20.30!ip dhcp pool LAN network 20.20.20.0 255.255.255.0 domain-name SYS.local default-router 20.20.20.1  dns-server 202.123.2.6 202.123.2.11  lease 0 4!!!!!username admin privilege 15 secret 5 $1$A1V4$GR9sPtPVXDRoOiDKRtC1M1! ! archive log config hidekeys!!!!!interface ATM0 description (OUTSIDE)ADSL_WAN no ip address no ip redirects no ip unreachables no ip proxy-arp no atm ilmi-keepalive pvc 8/35  encapsulation aal5mux ppp dialer dialer pool-member 1 ! dsl operating-mode auto !interface FastEthernet0!interface FastEthernet1 dot1q tunneling ethertype 0x9100!interface FastEthernet2!interface FastEthernet3!interface Vlan1 description LAN ip address 20.20.20.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly dot1q tunneling ethertype 0x9100 hold-queue 100 out!interface Vlan30 description LAN no ip address no ip redirects no ip unreachables no ip proxy-arp shutdown hold-queue 100 out!interface Dialer0 description WAN_OUTSIDE ip address negotiated ip mtu 1498 ip nat outside ip virtual-reassembly max-reassemblies 1024 encapsulation ppp ip tcp adjust-mss 1400 dialer pool 1 dialer-group 1 no cdp enable ppp authentication chap callin ppp chap hostname [email protected]/*  */ ppp chap password 7 071C385F5C001D0403 ppp pap sent-username [email protected]/*  */ password 7 120A1C04000208053E ppp ipcp mask request ppp ipcp route default ppp ipcp address accept!ip default-gateway 20.20.20.1ip forward-protocol ndip route 0.0.0.0 0.0.0.0 Dialer0ip route 10.10.10.0 255.255.255.0 Vlan1!no ip http serverno ip http secure-serverip nat inside source list 110 interface Dialer0 overload!access-list 110 permit ip 20.20.20.0 0.0.0.255 anyaccess-list 110 permit ip 10.10.10.0 0.0.0.255 anyaccess-list 110 permit ip 30.30.30.0 0.0.0.255 anyaccess-list 110 permit ip 40.40.40.0 0.0.0.255 anyaccess-list 110 permit ip 50.50.50.0 0.0.0.255 anyaccess-list 110 permit ip 60.60.60.0 0.0.0.255 any!!!control-plane!banner motd ^C
    
    :'######::'##::::'##:'########::'######::'##::::'##:'##... ##: ##:::: ##: ##.....::'##... ##: ##:::: ##: ##:::..:: ##:::: ##: ##::::::: ##:::..:: ##:::: ##:. ######:: #########: ######:::. ######:: #########::..... ##: ##.... ##: ##...:::::..... ##: ##.... ##:'##::: ##: ##:::: ##: ##:::::::'##::: ##: ##:::: ##:. ######:: ##:::: ##: ########:. ######:: ##:::: ##::......:::..:::::..::........:::......:::..:::::..::
    
    ^C!line con 0 no modem enableline aux 0line vty 0 4 password 7 xxxx login!scheduler max-task-time 5000end
    
    CISCO_877#
    And this is for my SW
    CATALYST_2960_01#sh runBuilding configuration...
    
    Current configuration : 5166 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hostname CATALYST_2960_01!enable secret 5 $1$MGrN$PtHgL3KfH0vy7Mr1Fo0hF.!ip subnet-zero!ip ssh time-out 120ip ssh authentication-retries 3vtp mode transparent!!spanning-tree mode rapid-pvstno spanning-tree optimize bpdu transmissionspanning-tree extend system-idspanning-tree vlan 1-4093 priority 16384!!!!vlan 10 name ADSL!vlan 20 name GUEST!vlan 30 name MANAGEMENT!interface Port-channel1 switchport trunk allowed vlan 1,10,20,30 switchport mode trunk switchport nonegotiate spanning-tree cost 1!interface FastEthernet0/1 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/2 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/3 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/4 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/5 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/6 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/7 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/8 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/9 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/10 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/11 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/12 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/13 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/14 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/15 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/16 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/17 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/18 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/19 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/20 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/21 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/22 description SPARE switchport mode access switchport nonegotiate spanning-tree portfast spanning-tree bpduguard enable spanning-tree cost 1000!interface FastEthernet0/23 switchport trunk allowed vlan 1,10,20,30 switchport mode trunk switchport nonegotiate channel-group 1 mode active!interface FastEthernet0/24 switchport trunk allowed vlan 1,10,20,30 switchport mode trunk switchport nonegotiate channel-group 1 mode active!interface Vlan1 ip address 20.20.20.2 255.255.255.0 no ip route-cache!interface Vlan10 no ip address no ip route-cache shutdown!interface Vlan30 no ip address no ip route-cache shutdown!ip default-gateway 20.20.20.1ip http server!line con 0line vty 0 4 password 7 xxxx loginline vty 5 15 login!!end
    
    
    Thanks in advance.

    Eliane,

    Please remove the etherchannel port f0/24 of the switch configuration and store it in the trunk.

    interface FastEthernet0/24 switchport trunk allowed vlan 1,10,20,30 switchport mode trunk switchport nonegotiate channel-group 1 mode active  <<< Remove this 
    Configure f0 on the router as trunk I think has 877, a switchport which fe interfaces are a part of. To display the corresponding Lass on the router, that you need to configure the VLANS corresponding on the router, then only the Lass will be in a State of going / up otherwise it will be in a down state. See if that helps. Thank you, hyacinth
  • Router is not connecting to the modem so I can't get internet

    All right-_ - I tried a lot of things with this so I get irritated sorry. Here is my info I have a Linksys Wireless Router with SpeedBoost Firmware Version 7.2 WRT54GS (latest version). I'm trying to use it with a Sprint 645 series Modem. My IP address when you are connected to the router and the router connected to the Modem is 192.168.1.100 who my ISP said was ok to make it work. While it is just connected to my modem, it's the same thing except replace the 100 by 1. My ISP uses a measure of security where The Thing DHCP is 192.168.1.1 and so is the DNS server and default gateway and im not sure if this has something to do with it. I used the ping at a command prompt to make sure that I am connected to the router when its plugged up and it is. This is a new router. I have internet with Modem just perfectly. I tried to reset the router and that does not work-_-. I don't think it is important more because I tried to fix the many way people have told me and it didn't work, but I'll tell u in any case. When I put up the first router time I hung and lit everything at the beginning. Then I noticed that it says Run CD before to connect the cables... those who were not in the instructions but wtv... anyway resetting should have fixed or so I was told by other people on this forum. I use a laptop with Windows Vista, and I don't have access to a desktop computer in case I need a XD. I can connect to the router fine because I can access the Setup page... and I can connect wireless... The ONLY problem seems to be that the router will not connect to the Modem... for some reason of wtv-_ - I think that its because the entire security measure on the way to the DHCP and the DSN and the bridge are all 192.168.1.1, but that's just me. I'm sorry this is very long but I really want this problem-_ - I had this router for a month and becomes really annoying so please help . My ISP is Embarq. I ran the installation CD and I had all through the last step (standby router) after having connected the power supply to the wall for the router. Just, it is there forever and then says "error: 322 cannot find router or something like that." There are 3 steps to try to fix it. It says to make sure that the router is connected (it is), it is said also to make sure that u does not actually connect your old router, (I don't have a-_-) and then re-run Setup. and by the installer, I mean where u plug in all the cables in the right way. * sigh *.

    If you need anything else please ask.

    Your second post says "" ignore this "so I guess everyone thought that you set..."

    When you connect through your router that you have two instances of DHCP past... one is your DSL modem with router IP address on its WAN interface. The other is the router that gives your computer an IP address via the DHCP server on the router. The IP address of the modem gives your router is in the 192.168.1.0 network. Unfortunately, by default, the reange of Linksys routers LAN IP address is also in this range. For that to work, you must set your router 192.168.2.1 LAN ip, so that the LAN and WAN router interfaces are in different networks.

    To do this, unplug the DSL modem router, power it and your computer, and then connect the computer to the router by an ethernet cable. Turn on the router and the computer, and then go to 192.168.1.1. Change the LAN IP on router 192.168.2.1, save the configuration, and then restart the computer. Once the computer returns to the top, navigate to 192.168.2.1... you should be able to get to the router GUI configuration.

    Turn off the router and the DSL modem, connect the router to the modem via the Internet port using an ethernet cable, and then turn on the modem, then the router... you should be good to go...

  • Router seems several MAC addresses

    My WRT54G MAC address of the router (as written on the label on the bottom) ends with F5. LELA shows the address MAC LAN like ending by F5. It shows the addrerss WAN MAC as ending in F6. My ISP used the F6 key to connect to their network. I have a wireless internet radio which can detect the router as ending with F7.

    Why is this? How can I know who is the 'real' MAC address?

    Each network on the router interface must have a unique MAC address... router has 3 logical network interfaces, you discovered... one is the WAN interface, which is also associated with the physical interface that connects to your ISP. Another is the LAN interface that is associated with the network which is jumpered to 4 LAN ports (which are interfaces on the switch that is built into the router), and the last of them is the wireless interface, which is connected to the adapter wireless physical built into the router. The router keeps track of where each device that is connected by using of these devices unique MAC addresses and sends traffic to the necessary interface based on his knowledge of the combinations of IP addresses and MAC addresses.

    'Real' address of the router can be one of three, according to the network from which you look at the router. It seems, based on your post, that Linksys has taken the MAC address of the LAN interface of the document as the 'router MAC address '. All three are 'real '... MAC addresses

Maybe you are looking for

  • My admin pw no longer works, but I can't not change, how can be solved?

    My administrator password does not work for some reason, so I had a tech take it out... OK, up until my putter needed a restoration of systems, which has the admin pw back that still doesn't let me in... How can I take the password or change it?   Th

  • problem with update explore

    I apologize if this has already been discussed, but with 2 jobs, school and a family, I don't have hours to spend researching this issue.  If I had know that this update was going to cause problems and I would waste treat valuable time with him that

  • Download hp 15 notbook pc 15-g020se definition

    HP laptop PC 15 15-g020se

  • Not getting no sound on my Vista computer

    I have a compaq v5000 that I have upgraded xp to vista 32 bit from and now I can't get sound?  can anyone help thank you mw :D

  • M17x-R4, HDMI-IN no go, Windows 8

    System: m17x r4, Geforce 680 m, 120 Hz display, running 64-bit Windows 8 When I plug the HDMI cable from my ps3 on HDMI-IN port, the screen flickers then shows display ps3 perfectly for a fraction of a second before going black. I hit FN + F8 to go b