10-10-2008 11:38 AM - edited 03-06-2019 01:52 AM
I am having difficulty routing between vlans 192.168.13.0/24 and 10.20.201/24. I have read some cisco pages on correct configuration but I can't route between the two. Any help is greatly appreciated. Attached below is the config
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log datetime
no service password-encryption
service sequence-numbers
!
hostname LexSwitch_0.13-2
!
enable secret xxxx
!
ip subnet-zero
ip routing
!
spanning-tree extend system-id
!
!
!
interface GigabitEthernet0/1
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/2
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/3
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/4
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/5
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/6
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/7
description ============ 3640 Router to P2P =============
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/8
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/9
description ============ 2821 Router to TWT ==============
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/10
no ip address
spanning-tree portfast
!
interface GigabitEthernet0/11
switchport trunk encapsulation dot1q
switchport mode trunk
no ip address
!
interface GigabitEthernet0/12
switchport trunk encapsulation dot1q
switchport mode trunk
no ip address
!
interface Vlan1
ip address 192.168.13.204 255.255.255.0
!
interface Vlan201
ip address 10.20.201.1 255.255.255.0
!
ip classless
ip http server
!
!
line con 0
line vty 0 4
password removed
login
line vty 5 15
password removed
login
!
end
10-10-2008 11:41 AM
Can you post output of
"sh ip int br"
"sh vlan"
Also have you assigned the devices into their relevant vlans ?
Jon
10-10-2008 11:45 AM
LexSwitch_0.13-2#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Vlan1 192.168.13.204 YES NVRAM up up
Vlan201 10.20.201.1 YES manual up up
GigabitEthernet0/1 unassigned YES unset down down
GigabitEthernet0/2 unassigned YES unset down down
GigabitEthernet0/3 unassigned YES unset up up
GigabitEthernet0/4 unassigned YES unset up up
GigabitEthernet0/5 unassigned YES unset up up
GigabitEthernet0/6 unassigned YES unset up up
GigabitEthernet0/7 unassigned YES unset up up
GigabitEthernet0/8 unassigned YES unset up up
GigabitEthernet0/9 unassigned YES unset up up
GigabitEthernet0/10 unassigned YES unset up up
GigabitEthernet0/11 unassigned YES unset up up
GigabitEthernet0/12 unassigned YES unset up up
LexSwitch_0.13-2#sh vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi0/1, Gi0/2, Gi0/3, Gi0/4
Gi0/5, Gi0/6, Gi0/7, Gi0/8
Gi0/9, Gi0/10, Gi0/12
201 VLAN0201 active
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 1002 1003
201 enet 100201 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 1 1003
1003 tr 101003 1500 1005 0 - - srb 1 1002
1004 fdnet 101004 1500 - - 1 ibm - 0 0
1005 trnet 101005 1500 - - 1 ibm - 0 0
10-10-2008 11:47 AM
Okay, so when you say you have an issue routing what are the symptoms ie. do you have 2 PC's one in vlan 1 and one in vlan 201 and you are trying to ping between them ?
Jon
10-10-2008 11:50 AM
i can't ping the interface 10.201.20.1 when i'm sitting on vlan 1. if i put a port on vlan 201 i can't get anywhere on the network. I'm currently connected directly to the switch on Gi0/3, but i can't ping int vlan 201
10-10-2008 11:53 AM
Have you set the correct default-gateway on the device on vlan 1 ?
10-10-2008 11:56 AM
the default gateway is showing as 192.168.13.1, which is our Cisco 2821 Router.
10-10-2008 12:03 PM
Okay, is that the default-gateway you want ? If so you need to make sure your 2821 router knows how to get to the 10.20.201.0/24 network. You can do this by either running a routing protocol between the 3550 and the 2821 or adding this route to the 2821
ip route 10.20.201.0 255.255.255.0 192.168.13.204
OR
change the default-gateway on your device to vlan 1 interface on switch ie. 192.168.13.204
Jon
10-10-2008 12:24 PM
on 3550 ive tried doing:
router eigrp 101
network 10.20.201.0
on 2821:
router eigrp 101
network 192.168.13.0
and still not achieving any results
10-10-2008 12:30 PM
You also need to add the network statement on 3550 for 192.168.13.0 network or you won't form a neigborship ie.
router eigrp 101
network 10.20.201.0
network 192.168.13.0
Jon
10-10-2008 12:45 PM
its getting closer!
So after that last change I can ping int vlan 201 from vlan1. now here is where it's not working. As I said before, I need this traffic coming from vlan 201 going over teh 3640 router
I have changed the DHCP scope to use router 192.168.13.3 (3640) router.
i try putting in ip route 10.20.201.0 255.255.255.0 192.168.13.3 on the 2821 router and its failing to find the switch
10-10-2008 12:48 PM
Sorry, i'm a bit confused. Can you expand a bit on what you need exactly in terms of routing from what to what.
Jon
10-11-2008 07:47 AM
ok sorry for bailing out yesterday. I was under time constraints for leaving the office, so I have to pick it up again today.
Here is what I am trying to accomplish.
i HAVE 2 routers in place.
2621 that is used for MPLS.
3640 that is directly connected to a router back in our central office that is a failover for MPLS
I want to send traffic from VLAN 201 over the 3640 router.
All other traffic MUST go out the 2821.
At this point all traffic is hitting the 2821 and working just as it should. I tried redirecting traffic for vlan 201 to the 3640, but the 3640 is not able to find the switch.
Sorry to be confusing but does that make any more sense?
10-10-2008 11:43 AM
also note.
When I do a 'sh ip route'
it shows both interfaces as connected
10-10-2008 12:03 PM
Kendrick
I have looked at what you posted and have a couple of questions to ask which might hopefully lead us toward a solution to your problem:
- I note that all of the access ports on the switch (including both ports with the description that indicates that they connect to routers) are in the default vlan 1. I do not see any particular issues with the configuration of interfaces vlan 1 and vlan 2. Is vlan 2 coming into the switch on one of the interfaces configured as a trunk port?
- can you tell us a bit more about the topology of this network? there appear to be 2 trunk ports. What is connected on the trunk ports? What VLANs are configured on the devices on the trunks?
- also it appears that there are 2 routers connected to the switch. They are both on access ports in vlan 1. Are they trying to do any routing? (it would be a problem if they are trying to route those subnets but are only connected on an access port)
- ip routing is enabled on the switch. So it should be doing routing between those 2 VLANs. But there is no default route or any routing information about addresses not within those 2 subnets. So it could not route to anything outside of those 2 subnets. Was that intended?
- is it possible that the devices (PCs or whatever) connected to the switch ports do not have the correct default gateway configured? That would explain why they could not access any address in the other VLAN, which might look like it was a routing issue?
HTH
Rick
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: