2621xm internet help

[LPFreak1283]

Hi all! I am new to this forum and hope for some help here. I am working on a project for school and can't figure out how to get internet connectivity. Here is what my setup looks like:

http://users.adelphia.net/~jbaumgart/_private/Drawing1.jpg

On the 2621xm router, I have set the f0/1 interface to be a dhcp client and retrieve a ip address from the linksys router that connects to the rest of the school network. I have routes set up to go to the correct places and before we connected the firewall, i could ping the linksys router's gateway, but could not connect to the internet. I do not have the updated config files at home with me, but I will get them today so you all can look at them.

Also, from the 2621xm router, I can ping the f0/0 interface ip on the 2621 router and 10.2.0.1 of the LAN, but cannot ping the rest of the servers (10.2.0.2,10.2.0.4,10.2.0.5). Any help on that? Thanks alot!

 

[JOAMON]

Gonna need to see the configs for both routers.

 

[LPFreak1283]

Here is the first router, connected to the internet and a second router and switch:

!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname router1
!
boot-start-marker
boot-end-marker
!
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
no ip domain lookup
no ftp-server write-enable
!
!
!
!
interface FastEthernet0/0
description connected to cisco 2950 catalyst switch
ip address 172.16.0.2 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0
description connected to router2
ip address 192.168.254.2 255.255.255.252
clockrate 56000
!
interface FastEthernet0/1
description connected to Internet
ip address dhcp hostname Campus.ittesi.com
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router rip
version 2
passive-interface FastEthernet0/1
network 172.16.0.0
network 192.168.1.0
network 192.168.254.0
no auto-summary
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
no ip http server
!
access-list 1 permit 192.168.254.0 0.0.0.3
access-list 1 permit 10.2.0.0 0.0.255.255
snmp-server community public RO
snmp-server enable traps tty
!
line con 0
line aux 0
line vty 0 4
!
!
!
end

Here is the second router connected to the internal network and the first router:


!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Router2
!
boot-start-marker
boot-end-marker
!
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip icmp redirect host
ip cef
!
!
!
no ip domain lookup
ip multicast-routing
no ftp-server write-enable
!
!
!
!
interface FastEthernet0/0
description connected to EthernetLAN
ip address 10.2.0.10 255.255.0.0
duplex auto
speed auto
!
interface Serial0/0
description connected to Router1
ip address 192.168.254.1 255.255.255.252
ip information-reply
ip irdp
!
interface Serial0/1
no ip address
shutdown
!
router rip
version 2
network 10.0.0.0
network 192.168.254.0
no auto-summary
!
ip classless
no ip http server
!
snmp-server community public RO
snmp-server enable traps tty
!
line con 0
line aux 0
line vty 0 4
!
!
!
end

 

[rburke]

Can you run a "show ip route" on both routers and see if they are advertising their routes correctly?

 

[JOAMON]

Router 1 has a problem on f0/0
ip address 172.16.0.2 255.255.255.252
This will only allow 2 ip addresses on this segment.
.2 for the router and probably .1 on the switch.

That will place the servers on a different subnet.

 

[JOAMON]

Also...
Have you input the ip routing information into the linksys for the returning traffic. The linksys is blind to your networks as the interface connected to it is passive. It probably does not know were to send anything.

 

[JOAMON]

Do you need these on router 2?
ip icmp redirect host
ip multicast-routing
If no specific reason I would suggest removing them.

 

[LPFreak1283]

Router 1 has a problem on f0/0
ip address 172.16.0.2 255.255.255.252
This will only allow 2 ip addresses on this segment.
.2 for the router and probably .1 on the switch.

That will place the servers on a different subnet."

The swtich is just there because we didn't have a crossover cable to run from our firewall to router1. So we just connected the router to the switch, then the firewall to the switch. So f0/0 gets 172.16.0.2 and the firewall gets 172.16.0.1. That setup will probably change.

The real sh*tty part here is that we have 3 router racks at school. Each with 5 routers and 2 switches. 2 of those router racks got destroyed by some 4th quarter student wiping the IOS out of them. So for the time being, we don't have routers to work with so I don't know when I'll be able to get back to this. Thanks for the help anyways!

 

[rburke]

I agree with JOAMON that you need to make sure the Linksys has the routes to the 192.168.254.0/30, 172.16.0.0/30, and 10.2.0.0/16 subnets. Also if you are cannont ping the 10.2.0.x servers from the 2621XM then there is an issue with your routing. Doing a "show ip route" will confirm if the routes are being advertised correctly.