Solved: C2800 w/ HWIC-4esw - connecting and configuring

mages_mark · ‎02-10-2009

We have installed a HWIC-4esw on a remote C2800 router.

Currently the router has a configuration to allow 1 pc and 1 phone on the native C2800 L2 ports. We would like to add an additional phone and PC in that location, and the easiest way "seems" to be to configure it similar to the document at

http://www.cisco.com/en/US/products/hw/modules/ps2797/products_configuration_example09186a00808066b8.shtml

adding the devices in separate vlans on the L3 ports.

The 2800 is connected to our campus via a PTP T1 on serial 0/1

The configuration seems pretty straightforward, but I am having difficulties with it.

Should I be able to ping a VLAN interface created on this router?

commands -

vlan 151

int vlan 151

ip address 10.51.x.x 255.255.255.0

int range fa0/3/0-3

switch access vlan 151

I can't ping the int, and there is no route in the table such as

10.51.x.x connected via VLAN151

The vlan is listed under Show vlan-switch, and ports assigned to it show up correctly, but no devices that connect to it can go anywhere.

Thanks

IOS version 12.4.22T

Edison Ortiz · ‎02-11-2009

As you noted, the only way to bring up a SVI (Switch Virtual Interface) is to have a switchport that is member of that Vlan in up/up status.

You can also bring up that SVI if you had a trunk switchport and allowing that Vlan in the trunk, not the case here but I thought you should know.

Now, the inability to ping anything beyond the gateway could be due to the lack of subnet advertising via a dynamic routing protocol.

While the router has a static default route towards 10.81.1.xx, does that network knows how to get back to 10.51.x.x?

The problem seems to be at the remote end.

HTH,

__

Edison.

View solution in original post

Edison Ortiz · ‎02-10-2009

Please post the output from the following commands:

show vlan-switch

show ip int brief

show int status

HTH,

__

Edison.

mages_mark · ‎02-11-2009

sh vlan-switch

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active

151 Data active Fa0/3/0, Fa0/3/1, Fa0/3/2

Fa0/3/3

1002 fddi-default act/unsup

1003 token-ring-default act/unsup

1004 fddinet-default act/unsup

1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2

---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------

1 enet 100001 1500 - - - - - 1002 1003

151 enet 100151 1500 - - - - - 0 0

1002 fddi 101002 1500 - - - - - 1 1003

1003 tr 101003 1500 1005 0 - - srb 1 1002

1004 fdnet 101004 1500 - - 1 ibm - 0 0

1005 trnet 101005 1500 - - 1 ibm - 0 0

sh ip int brief

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 10.50.X.X YES NVRAM up up

FastEthernet0/1 unassigned YES NVRAM up up

FastEthernet0/1.5 10.200.XXX.1 YES NVRAM up up

FastEthernet0/1.6 unassigned YES NVRAM deleted down

FastEthernet0/3/0 unassigned YES unset down down

FastEthernet0/3/1 unassigned YES unset up down

FastEthernet0/3/2 unassigned YES unset up down

FastEthernet0/3/3 unassigned YES unset up down

Serial0/1/0 10.81.1.XX YES NVRAM up up

Vlan1 unassigned YES NVRAM up down

Vlan151 10.51.X.X YES manual up down

SSLVPN-VIF0 unassigned NO unset up up

Sh int status

Port Name Status Vlan Duplex Speed Type

Fa0/3/0 notconnect 151 auto auto 10/100BaseTX

Fa0/3/1 notconnect 151 auto auto 10/100BaseTX

Fa0/3/2 notconnect 151 auto auto 10/100BaseTX

Fa0/3/3 notconnect 151 auto auto 10/100BaseTX

10.81.1.X is the T1 uplink back to our campus

10.50 is the pc on a native port

10.200 is the phone on a dot1q trunked subinterface of the native port.

And nothing is currently connected to the ESW mod.

The vlan has been enabled.

The only way to ping the 10.51.X.X vlan interface is to plug into one of the vlan'd ports. If I plug a machine into 0/3/0 I can ping 10.51.X.X, but can't get beyond the gateway. I cannot ping 10.51.X.X from any of the other interfaces on the router.

Somewhere the routing is screwed up....

Gateway of last resort is 10.81.1.XX to network 0.0.0.0

10.0.0.0/8 is variably subnetted, 3 subnets, 3 masks

C 10.200.XXX.0/24 is directly connected, FastEthernet0/1.5

C 10.50.X.X/16 is directly connected, FastEthernet0/0

C 10.81.1.XX/28 is directly connected, Serial0/1/0

S* 0.0.0.0/0 [1/0] via 10.81.1.XX

Edison Ortiz · ‎02-11-2009

As you noted, the only way to bring up a SVI (Switch Virtual Interface) is to have a switchport that is member of that Vlan in up/up status.

You can also bring up that SVI if you had a trunk switchport and allowing that Vlan in the trunk, not the case here but I thought you should know.

Now, the inability to ping anything beyond the gateway could be due to the lack of subnet advertising via a dynamic routing protocol.

While the router has a static default route towards 10.81.1.xx, does that network knows how to get back to 10.51.x.x?

The problem seems to be at the remote end.

HTH,

__

Edison.

mages_mark · ‎02-11-2009

Yeah - the problem at the remote end appears to be the guy that I was working with.

The data vlan works perfectly. That did throw me, in that the vlan interface is inactive unless there is an active port on that vlan. I was fixated on the serial / T1 being a factor in this somehow and totally discounted human error.

Thanks!

Edison Ortiz · ‎02-11-2009

I'm glad I was able to help.

Please remember to rate helpful posts

__

Edison.

paolo bevilacqua · ‎02-11-2009

Hi, the next issue you might face, is that unless you configure "switchport mode trunk", you will have no connectivity to the phone and PC in separate VLANs. That is, the default of "switchport mode access", does not work with this product.

mlitka · ‎02-10-2009

Try doing a 'no shut' on the VLAN interface. Chances are it defaulted to administratively shutdown.