Default Route configuration ?


Recommended Posts

I have Cisco routers 2600, and want to make it as default route for Internal LAN,

Basically the Scenario is very simple as describe in the picture below !

jqp5v9zs6GwJs.jpg

I have configured all the interfaces accordingly and define the route as required, but the problem is, I cannot ping to any one (Internet) from LAN A or LAN B, here is the basic configuration which i set,

Now the question is, what I am missing ?

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname RouterA

!

boot-start-marker

boot-end-marker

!

enable secret 5 $1$0NJN$TPK4LnfXxaQqbmBobaPqG1

enable password xyz

!

no network-clock-participate slot 1

no network-clock-participate wic 0

no aaa new-model

ip subnet-zero

ip cef

!

!

ip name-server 172.168.16.2

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

interface FastEthernet0/0

ip address 192.168.15.1 255.255.255.0

speed auto

full-duplex

!

interface FastEthernet0/1

ip address 172.168.16.18 255.255.255.248

duplex auto

speed auto

!

ip http server

ip classless

ip route 0.0.0.0 0.0.0.0 172.168.16.15

ip route 192.168.15.0 255.255.255.0 172.168.16.15

!

!

!

snmp-server community public RO

snmp-server enable traps tty

!

!

!

!

!

!

line con 0

line aux 0

line vty 0 4

password cisco

login

!

!

end

P.S, Public IP's shown here are fake, not real.

I've also tried to set IP default gateway.

Suggestions ?

Link to comment
Share on other sites

ok then since we don't have both sides or know what equipment...lets just think about this for a minute.

lets assume for a minute that 172.168.16.15 is a router connected to the internet nothing more. How does this device know how to connect to 200.150.160.10 and how does 200.150.160.10 trust the traffic from 172.168.16.15? Oh, it doesn't...probably due to them being gateway devices that have firewalls built into them that stop random traffic from entering via nat. Setup a vpn tunnel between point A and point B to get this working properly or get a one of the following, frame relay, point to point t1, or some sort of dedicated Ethernet service from the telco with bgp.

OK Silly Me, i was trying to route the private IP's into Public network ! lol

Now figured it out, Need to configure VPN :)

Good job. You figured it out prior to me hitting post.

Link to comment
Share on other sites

You might also want to run "service password-encryption" which will encrypt your passwords within the startup/run-config.

Link to comment
Share on other sites

You might also want to run "service password-encryption" which will encrypt your passwords within the startup/run-config.

Thanks for suggestion :)

Link to comment
Share on other sites

This topic is now closed to further replies.