03-24-2014 08:12 PM - edited 03-07-2019 06:50 PM
Hello,
I must be missing something I just don't know what.
I setup a home lap to practice some things and here's what I have done.
cisco 2950 Router 1841
setup 2 vlans on my switch 100 and 200 and trunking on port 24, I put interface 1 in vlan 100 just as acccess port.
On the router I subinterface fa0/0 to 0.100 and 0.200 gave both IP addresses and subnet mask corresponding to 100 and 200 on switch
setup 802.1q with the corresponding vlan info. Now for my issue I gave my laptop a valid IP address for vlan 100 and can ping switch and gateway. I cannot ping vlan's 200 subinterface on the router and don't know why. I have enabled IP routing on router and from the switch I can ping both subinterfaces. Everything is up, up when I look at the routing table it sees both networks as connected. Shouldn't I be able to ping from my laptop sitting on vlan 100 to the subinterface gateway of vlan 200 on my router?
Thanks,
03-24-2014 10:52 PM
03-25-2014 04:40 PM
Jose-neto,
Here is my router and switch config. Probably missing something simple I hope....
Current configuration : 1391 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname DC_Lab_Router
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Nzt9$civoCMg7LBCAWLTZIzLCZ.
!
no aaa new-model
ip cef
!
!
!
!
ip domain name test.com
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
!
ip ssh version 2
!
!
!
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.100
encapsulation dot1Q 100
ip address 10.63.21.1 255.255.255.0
!
interface FastEthernet0/0.200
encapsulation dot1Q 200
ip address 10.151.21.1 255.255.255.0
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
ip forward-protocol nd
!
!
ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
banner login ^C***********************
You may not enter without permission!!!
***************************^C
banner motd ^C************
Hello you are not welcome with out permission!!
******************************^C
!
line con 0
password 7 13061E010803
logging synchronous
line aux 0
line vty 0 4
password 7 1511021F0725
login local
transport input ssh
line vty 5 15
password 7 1511021F0725
login local
transport input ssh
!
scheduler allocate 20000 1000
end
Switch
!
hostname DC_Test_Switch
!
enable secret 5 $1$XbXW$I9dWtP8CHKRPM1jAgN4Kb0
!
ip subnet-zero
!
ip domain-name test.com
ip ssh time-out 120
ip ssh authentication-retries 3
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport access vlan 100
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 200
switchport mode access
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
description uplink to DC_Lab_Router
switchport trunk allowed vlan 100,200
switchport mode trunk
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 10.63.21.6 255.255.255.0
no ip route-cache
!
interface Vlan200
ip address 10.151.21.6 255.255.255.0
no ip route-cache
shutdown
!
ip default-gateway 10.63.21.1
ip http server
banner login ^C**************
Unauthorized access is denied****************^C
banner motd ^C
You cannot enter....^C
!
line con 0
password cisco
logging synchronous
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
03-25-2014 04:46 PM
thought I would add this.
DC_Lab_Router#show ip rou
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
10.0.0.0/24 is subnetted, 3 subnets
C 10.1.1.0 is directly connected, Loopback1
C 10.63.21.0 is directly connected, FastEthernet0/0.100
C 10.151.21.0 is directly connected, FastEthernet0/0.200
03-25-2014 05:31 PM
this is from the switch
Port Mode Encapsulation Status Native vlan
Fa0/24 on 802.1q trunking 500
Port Vlans allowed on trunk
Fa0/24 100,200
Port Vlans allowed and active in management domain
Fa0/24 100,200
Port Vlans in spanning tree forwarding state and not pruned
03-26-2014 02:51 AM
Hi
Just a thought, have You set Your default-gateway in the laptop to 10.63.21.1
/Mikael
03-26-2014 05:11 AM
Hello,
Yes, when I put my laptop in either vlan I make sure to give it a valid address in that vlan and give it the correct gateway either 10.63.21.1 or 10.151.21.1. I went through the documentation for the switch last night and didn't see anything I might have missed. I cannot find anything really good for a 1841 with my version but believe I have everything correct.
03-26-2014 05:23 AM
Looking at your configs it all seems fine.
Can you ping the loopback on the router from a PC in vlan 100 ?
Jon
03-26-2014 06:23 AM
Jon,
I'm at work currently, and will try this when I get home. I'm glad to get at least one person saying everything looks good as I have been beating my head against a wall. I'm trying to go through labs in preparing for the test and didn't want to move on until I solved this but maybe it's an IOS issue.
Derek
03-26-2014 03:24 PM
Jon,
I cannot ping the loopback from either vlan 100 or 200.
Derek
03-26-2014 03:35 PM
From the switch can you ping the loopback ?
Jon
03-26-2014 05:59 PM
No I cannot ping the loopback from the switch. I don't have very little experience setting up network designs. I just picked that address to be a Class A with the same mask as my other interfaces.
03-26-2014 06:07 PM
Can you post a "sh vlan brief" from the switch ?
Jon
03-26-2014 07:07 PM
sure.
DC_Test_Switch#sho vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6
Fa0/7, Fa0/8, Fa0/9, Fa0/10
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23
100 DATA active Fa0/1
200 Sales active Fa0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
DC_Test_Switch#
I do want to make something clear at least for my sake. I don't have two pc's hooked up to my lap I'm just changing the IP of my laptop but I still should be able to ping the interface of the router that sits in the other vlan if this was working properly correct?
03-26-2014 07:11 PM
I should of added when I'm testing I am making sure my for ex. when my pc is plugged nto Fa0.1 I give myself a 10.63.21.5/24 with the gateway of 10.63.21.1.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide