cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
809
Views
5
Helpful
8
Replies

Inter-vlan routing issue on 3750

I have a catalyst switch c3750 which i want to do vlan with it. I have vlan 1 and 2 on it.

Vlan 1 ip addr 192.168.1.1/24

vlan 2 ip addr 192.168.2.1/24

And i tag each port to each vlan, port 1 and 2 precise.I then have host A ip addr to be 192.168.1.3 gateway 192.168.1.1 mask /24. Host B 192.168.2.3 gateway 192.168.2.1 mask/24.

The issue is that Host A can ping the default-gateway of host B ( 192.168.2.1) but can ping host B 192.168.2.3. But Host B can ping the default-gateway of host A(192.168.1.1) but can not ping host A 192.168.1.1

Pls help

8 Replies 8

Richard Burts
Hall of Fame
Hall of Fame

I wonder if there is a typo mistake in your post. You say:"The issue is that Host A can ping the default-gateway of host B ( 192.168.2.1) but can ping host B 192.168.2.3". If it is a problem it seems there should be a "not ping host B". Can you clarify.

I have looked at the config that you posted and it does not have any obvious problems. I can think of 2 possible explanations for the problem:

- there is a problem with the configuration of the PCs and either the address, the mask, or the default gateway is not configured as your post says that they are.

- or the PCs have an active firewall and the firewall is not allowing the ping.

HTH

Rick

HTH

Rick

Sorry for the error in the post.What am i mean was that the two host can ping the two vlan ip addr. But host A cannot ping host B. After ur post now i remove the firewall on both machine but the issue is the same. But the switch can ping both hosts.

I intended putting a router which i did but the situation remain the same. The ping is not bi-direction its one way.

( by config router-on-a-stick)

Please provide the IPCONFIG /ALL output from both hosts and go back to the 3750 inter-vlan design configuration.

__

Edison.

Edison Ortiz
Hall of Fame
Hall of Fame

The config posted looks good and per your description, the bi-directional ping should work.

Have you verified the workstations have any firewall disabled?

__

Edison.

The configuration of the router is doing just what the switch was doing when you had IP addresses and routing enabled on the switch. So I am not surprised that the situation continues, since I did not believe that the problem was on the switch.

I am not clear about an aspect of your post so I will ask a question: can the PC at 192.168.1.3 ping the interface at 192.168.2.1?

Another question: if you do extended ping (on the switch if the IP addresses are on the switch or on the router if the addresses have been moved to the router) and in the extended ping specify the source address as the address of the other vlan, does the ping work? (if you ping the 192.168.2.3 PC and specify the source address as 192.168.1.1 does the ping work?

HTH

Rick

HTH

Rick

The PC at 192.168.1.3 can ping the interface 192.168.2.1 and also the PC at 192.168.2.3 can ping the interface on 192.168.1.1.

NO. From PC 192.168.1.3 if i ping PC 192.168.2.3 it does not ping or work.

This is the ipconfig/all on both PC

IP Address. . . . . . . . . . . . : 192.168.1.3

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.1.1

and PCB

IP Address. . . . . . . . . . . . : 192.168.2.3

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.2.1

And all firewall is being disable

OLUWASEGUN,

Did you connect the switch to the router by using the trunk port?

Did you already have in the vlan database?

Please post a "show ip route" command on the router.

Toshi

Thanks

I did i connected the to the router on a truck port. I have vlan 2 encap on the router.

When i should ip route. it should that we have two direct connected which is vlan1 N VALN2.

NB. THE ISSUE IS THE ASA FIREWALL THAT IS BLOCKING THE PING ON ONE VLAN

Thanks to everybody..

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: