I can access Internet in VLAN2(outside),but can;t do it in VLAN1

[qingfeng-hu]

Hi,

the Gateway is a PIX,assigned to VLAN2,all other port in VLAN1,follow is my configure;

and I can't connect two 3550 same time,otherwise the PING will fail.

!*************************** GLOBAL ***************************

ip route 0.0.0.0 0.0.0.0 10.0.1.1 1

!************************* INTERFACE *************************

interface ethernet-1

description "pix-1"

bridge vlan 2

phy 100Mbits-FD

interface ethernet-2

description "sw1-1"

phy 100Mbits-FD

interface ethernet-3

description "sw2-1"

!************************** CIRCUIT **************************

circuit VLAN1

ip address 10.0.2.1 255.255.255.0

circuit VLAN2

ip address 10.0.1.2 255.255.255.0

:end

thank and with regards.

[Gilles Dufour]

what do you mean by same time ?

If only 1 3550 is connected it works ok ?

Where do you connect it ? vlan 1 ?

What's the 3550 interface config ?

Did you disable spanning-tree ?

What's the arp table on all the devices when it does not work ?

Gilles.

[qingfeng-hu]

I have already resolve it. set the 3550 interface mode to access,because if CSS connect to two 3550,the interface will become trunk mode.

Either two CSS and two 3550 connect to VLAN1,each CSS connect to each 3550's interface fa0/1 and fa0/2,3550 connect by two cross cable(int fa0/11,fa0/12)

the spanning-tree is enable.

but I still don't know why

[Gilles Dufour · Accepted solution]

I don't think the interface will become trunk if connected to CSS.

However, we spanning-tree enable, a port can become blocking.

Once again, without the interface config of the 3550 it is hard to say.

Gilles.