«

WIN2KSERVER---Hub---USRouter---Switch---DSRouter---Hub---Workstation

We have setup 2 small LANs on an existing network, one
upstairs(USRouter) and one downstairs(DSRouter). USRouter has
192.168.3.0/24 inside and static 10.200.1.28 on WAN. DSRouter has
192.168.9.0/24 inside and static 10.200.1.29 on WAN. Both routers are
Cisco 851s.
We have put static routes in each router to opposite router's 192
network:
ip route 192.168.3.0 255.255.255.0 10.200.1.28
ip route 192.168.9.0 255.255.255.0 10.200.1.29
We can ping from DSRouter to WIN2KSERVER, but not from Workstation.
Firewalls have been disabled on all devices to troubleshoot.
Workstation cannot get to WINServer. Both routers have very simple
config., basically out of the box. Both are NATing. Is there an ACL or
something that we are missing? Any help is appreciated. Thanks, Dave.

Hi Dave,

You may wish to investigate the Cisco 851 Config Wizard:

http://www.ifm.net.nz/cookbooks/800-isr-wizard.html

Hope this helps.

Brad Reese
Cisco Router Port Matrix
http://www.bradreese.com/cisco-router-port-matrix.htm

<> wrote in message
news: ps.com...
> WIN2KSERVER---Hub---USRouter---Switch---DSRouter---Hub---Workstation
>
> We have setup 2 small LANs on an existing network, one
> upstairs(USRouter) and one downstairs(DSRouter). USRouter has
> 192.168.3.0/24 inside and static 10.200.1.28 on WAN. DSRouter has
> 192.168.9.0/24 inside and static 10.200.1.29 on WAN. Both routers are
> Cisco 851s.
> We have put static routes in each router to opposite router's 192
> network:
> ip route 192.168.3.0 255.255.255.0 10.200.1.28
> ip route 192.168.9.0 255.255.255.0 10.200.1.29
> We can ping from DSRouter to WIN2KSERVER, but not from Workstation.
> Firewalls have been disabled on all devices to troubleshoot.
> Workstation cannot get to WINServer. Both routers have very simple
> config., basically out of the box. Both are NATing. Is there an ACL or
> something that we are missing? Any help is appreciated. Thanks, Dave.
>

An what route do the workstations have?

chris wrote:
> <> wrote in message
> news: ps.com...
> > WIN2KSERVER---Hub---USRouter---Switch---DSRouter---Hub---Workstation
> >
> > We have setup 2 small LANs on an existing network, one
> > upstairs(USRouter) and one downstairs(DSRouter). USRouter has
> > 192.168.3.0/24 inside and static 10.200.1.28 on WAN. DSRouter has
> > 192.168.9.0/24 inside and static 10.200.1.29 on WAN. Both routers are
> > Cisco 851s.
> > We have put static routes in each router to opposite router's 192
> > network:
> > ip route 192.168.3.0 255.255.255.0 10.200.1.28
> > ip route 192.168.9.0 255.255.255.0 10.200.1.29
> > We can ping from DSRouter to WIN2KSERVER, but not from Workstation.
> > Firewalls have been disabled on all devices to troubleshoot.
> > Workstation cannot get to WINServer. Both routers have very simple
> > config., basically out of the box. Both are NATing. Is there an ACL or
> > something that we are missing? Any help is appreciated. Thanks, Dave.

NAT?

Best post the whole (sanitised) config.

no usernames/passwords and changed public IP addresses.

I find

sh tech xxxx

where xxxx is a feature that you have but are not using e.g. ospf
is very handy since it limits the output of the sh tech but still
includes the config with some sanitisation.