cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
958
Views
0
Helpful
25
Replies

3550 Routing between Vlans

the_crooked_toe
Level 1
Level 1

I am having difficulty routing between vlans 192.168.13.0/24 and 10.20.201/24. I have read some cisco pages on correct configuration but I can't route between the two. Any help is greatly appreciated. Attached below is the config

!

version 12.1

no service pad

service timestamps debug uptime

service timestamps log datetime

no service password-encryption

service sequence-numbers

!

hostname LexSwitch_0.13-2

!

enable secret xxxx

!

ip subnet-zero

ip routing

!

spanning-tree extend system-id

!

!

!

interface GigabitEthernet0/1

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/2

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/3

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/4

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/5

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/6

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/7

description ============ 3640 Router to P2P =============

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/8

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/9

description ============ 2821 Router to TWT ==============

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/10

no ip address

spanning-tree portfast

!

interface GigabitEthernet0/11

switchport trunk encapsulation dot1q

switchport mode trunk

no ip address

!

interface GigabitEthernet0/12

switchport trunk encapsulation dot1q

switchport mode trunk

no ip address

!

interface Vlan1

ip address 192.168.13.204 255.255.255.0

!

interface Vlan201

ip address 10.20.201.1 255.255.255.0

!

ip classless

ip http server

!

!

line con 0

line vty 0 4

password removed

login

line vty 5 15

password removed

login

!

end

25 Replies 25

Jon Marshall
Hall of Fame
Hall of Fame

Can you post output of

"sh ip int br"

"sh vlan"

Also have you assigned the devices into their relevant vlans ?

Jon

LexSwitch_0.13-2#sh ip int brief

Interface IP-Address OK? Method Status Protocol

Vlan1 192.168.13.204 YES NVRAM up up

Vlan201 10.20.201.1 YES manual up up

GigabitEthernet0/1 unassigned YES unset down down

GigabitEthernet0/2 unassigned YES unset down down

GigabitEthernet0/3 unassigned YES unset up up

GigabitEthernet0/4 unassigned YES unset up up

GigabitEthernet0/5 unassigned YES unset up up

GigabitEthernet0/6 unassigned YES unset up up

GigabitEthernet0/7 unassigned YES unset up up

GigabitEthernet0/8 unassigned YES unset up up

GigabitEthernet0/9 unassigned YES unset up up

GigabitEthernet0/10 unassigned YES unset up up

GigabitEthernet0/11 unassigned YES unset up up

GigabitEthernet0/12 unassigned YES unset up up

LexSwitch_0.13-2#sh vlan

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active Gi0/1, Gi0/2, Gi0/3, Gi0/4

Gi0/5, Gi0/6, Gi0/7, Gi0/8

Gi0/9, Gi0/10, Gi0/12

201 VLAN0201 active

1002 fddi-default active

1003 token-ring-default active

1004 fddinet-default active

1005 trnet-default active

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2

---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------

1 enet 100001 1500 - - - - - 1002 1003

201 enet 100201 1500 - - - - - 0 0

1002 fddi 101002 1500 - - - - - 1 1003

1003 tr 101003 1500 1005 0 - - srb 1 1002

1004 fdnet 101004 1500 - - 1 ibm - 0 0

1005 trnet 101005 1500 - - 1 ibm - 0 0

Okay, so when you say you have an issue routing what are the symptoms ie. do you have 2 PC's one in vlan 1 and one in vlan 201 and you are trying to ping between them ?

Jon

i can't ping the interface 10.201.20.1 when i'm sitting on vlan 1. if i put a port on vlan 201 i can't get anywhere on the network. I'm currently connected directly to the switch on Gi0/3, but i can't ping int vlan 201

Have you set the correct default-gateway on the device on vlan 1 ?

the default gateway is showing as 192.168.13.1, which is our Cisco 2821 Router.

Okay, is that the default-gateway you want ? If so you need to make sure your 2821 router knows how to get to the 10.20.201.0/24 network. You can do this by either running a routing protocol between the 3550 and the 2821 or adding this route to the 2821

ip route 10.20.201.0 255.255.255.0 192.168.13.204

OR

change the default-gateway on your device to vlan 1 interface on switch ie. 192.168.13.204

Jon

on 3550 ive tried doing:

router eigrp 101

network 10.20.201.0

on 2821:

router eigrp 101

network 192.168.13.0

and still not achieving any results

You also need to add the network statement on 3550 for 192.168.13.0 network or you won't form a neigborship ie.

router eigrp 101

network 10.20.201.0

network 192.168.13.0

Jon

its getting closer!

So after that last change I can ping int vlan 201 from vlan1. now here is where it's not working. As I said before, I need this traffic coming from vlan 201 going over teh 3640 router

I have changed the DHCP scope to use router 192.168.13.3 (3640) router.

i try putting in ip route 10.20.201.0 255.255.255.0 192.168.13.3 on the 2821 router and its failing to find the switch

Sorry, i'm a bit confused. Can you expand a bit on what you need exactly in terms of routing from what to what.

Jon

ok sorry for bailing out yesterday. I was under time constraints for leaving the office, so I have to pick it up again today.

Here is what I am trying to accomplish.

i HAVE 2 routers in place.

2621 that is used for MPLS.

3640 that is directly connected to a router back in our central office that is a failover for MPLS

I want to send traffic from VLAN 201 over the 3640 router.

All other traffic MUST go out the 2821.

At this point all traffic is hitting the 2821 and working just as it should. I tried redirecting traffic for vlan 201 to the 3640, but the 3640 is not able to find the switch.

Sorry to be confusing but does that make any more sense?

the_crooked_toe
Level 1
Level 1

also note.

When I do a 'sh ip route'

it shows both interfaces as connected

Richard Burts
Hall of Fame
Hall of Fame

Kendrick

I have looked at what you posted and have a couple of questions to ask which might hopefully lead us toward a solution to your problem:

- I note that all of the access ports on the switch (including both ports with the description that indicates that they connect to routers) are in the default vlan 1. I do not see any particular issues with the configuration of interfaces vlan 1 and vlan 2. Is vlan 2 coming into the switch on one of the interfaces configured as a trunk port?

- can you tell us a bit more about the topology of this network? there appear to be 2 trunk ports. What is connected on the trunk ports? What VLANs are configured on the devices on the trunks?

- also it appears that there are 2 routers connected to the switch. They are both on access ports in vlan 1. Are they trying to do any routing? (it would be a problem if they are trying to route those subnets but are only connected on an access port)

- ip routing is enabled on the switch. So it should be doing routing between those 2 VLANs. But there is no default route or any routing information about addresses not within those 2 subnets. So it could not route to anything outside of those 2 subnets. Was that intended?

- is it possible that the devices (PCs or whatever) connected to the switch ports do not have the correct default gateway configured? That would explain why they could not access any address in the other VLAN, which might look like it was a routing issue?

HTH

Rick

HTH

Rick
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco