06-02-2009 06:04 AM - edited 03-06-2019 06:03 AM
I have a catalyst switch c3750 which i want to do vlan with it. I have vlan 1 and 2 on it.
Vlan 1 ip addr 192.168.1.1/24
vlan 2 ip addr 192.168.2.1/24
And i tag each port to each vlan, port 1 and 2 precise.I then have host A ip addr to be 192.168.1.3 gateway 192.168.1.1 mask /24. Host B 192.168.2.3 gateway 192.168.2.1 mask/24.
The issue is that Host A can ping the default-gateway of host B ( 192.168.2.1) but can ping host B 192.168.2.3. But Host B can ping the default-gateway of host A(192.168.1.1) but can not ping host A 192.168.1.1
Pls help
06-02-2009 06:21 AM
I wonder if there is a typo mistake in your post. You say:"The issue is that Host A can ping the default-gateway of host B ( 192.168.2.1) but can ping host B 192.168.2.3". If it is a problem it seems there should be a "not ping host B". Can you clarify.
I have looked at the config that you posted and it does not have any obvious problems. I can think of 2 possible explanations for the problem:
- there is a problem with the configuration of the PCs and either the address, the mask, or the default gateway is not configured as your post says that they are.
- or the PCs have an active firewall and the firewall is not allowing the ping.
HTH
Rick
06-02-2009 07:40 AM
Sorry for the error in the post.What am i mean was that the two host can ping the two vlan ip addr. But host A cannot ping host B. After ur post now i remove the firewall on both machine but the issue is the same. But the switch can ping both hosts.
I intended putting a router which i did but the situation remain the same. The ping is not bi-direction its one way.
( by config router-on-a-stick)
06-02-2009 08:43 AM
Please provide the IPCONFIG /ALL output from both hosts and go back to the 3750 inter-vlan design configuration.
__
Edison.
06-02-2009 06:34 AM
The config posted looks good and per your description, the bi-directional ping should work.
Have you verified the workstations have any firewall disabled?
__
Edison.
06-02-2009 08:45 AM
The configuration of the router is doing just what the switch was doing when you had IP addresses and routing enabled on the switch. So I am not surprised that the situation continues, since I did not believe that the problem was on the switch.
I am not clear about an aspect of your post so I will ask a question: can the PC at 192.168.1.3 ping the interface at 192.168.2.1?
Another question: if you do extended ping (on the switch if the IP addresses are on the switch or on the router if the addresses have been moved to the router) and in the extended ping specify the source address as the address of the other vlan, does the ping work? (if you ping the 192.168.2.3 PC and specify the source address as 192.168.1.1 does the ping work?
HTH
Rick
06-03-2009 12:42 AM
The PC at 192.168.1.3 can ping the interface 192.168.2.1 and also the PC at 192.168.2.3 can ping the interface on 192.168.1.1.
NO. From PC 192.168.1.3 if i ping PC 192.168.2.3 it does not ping or work.
This is the ipconfig/all on both PC
IP Address. . . . . . . . . . . . : 192.168.1.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
and PCB
IP Address. . . . . . . . . . . . : 192.168.2.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.1
And all firewall is being disable
06-15-2009 05:39 AM
OLUWASEGUN,
Did you connect the switch to the router by using the trunk port?
Did you already have
Please post a "show ip route" command on the router.
Toshi
06-19-2009 05:05 AM
Thanks
I did i connected the to the router on a truck port. I have vlan 2 encap on the router.
When i should ip route. it should that we have two direct connected which is vlan1 N VALN2.
NB. THE ISSUE IS THE ASA FIREWALL THAT IS BLOCKING THE PING ON ONE VLAN
Thanks to everybody..
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide