Solved: Problem with routing catalyst 3750 - Page 3

ComputerArt · ‎10-18-2010

Switch#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#interface Vlan2
Switch(config-if)#ip address 10.1.2.1 255.255.255.0
Switch(config-if)#no shutdown

Switch(config)#interface FastEthernet 0/1
Switch(config-if)#no switchport
Switch(config-if)#ip address 200.1.1.1 255.255.255.0
Switch(config-if)#no shutdown

Switch(config)#ip route 0.0.0.0 0.0.0.0 200.1.1.2

The ip 20.1.1.2 is not pingabile.

How can I ping 20.1.1.2 and a possible DNS server with ip 20.1.1.10?

ComputerArt · ‎10-19-2010

Perhaps there is some hidden ACL that blocks traffic?
If I use 10.10.10.138 to go on the internet because I do not ping.
Why can not I access the web page http://10.10.10.138?

Switch#ping ip 10.10.10.138 source 10.10.10.80

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.138, timeout is 2 seconds:
Packet sent with a source address of 10.10.10.80
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms
Switch#ping ip 10.10.10.138 source 192.168.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.138, timeout is 2 seconds:
Packet sent with a source address of 192.168.0.1
.....
Success rate is 0 percent (0/5)
Switch#ping ip www.google.it source 192.168.0.1

Translating "www.google.it"...domain server (255.255.255.255) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 209.85.135.99, timeout is 2 seconds:
Packet sent with a source address of 192.168.0.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 109/112/118 ms

Jon Marshall · ‎10-19-2010

ComputerArt wrote:

Perhaps there is some hidden ACL that blocks traffic?
If I use 10.10.10.138 to go on the internet because I do not ping.
Why can not I access the web page http://10.10.10.138?

Switch#ping ip 10.10.10.138 source 10.10.10.80

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.138, timeout is 2 seconds:
Packet sent with a source address of 10.10.10.80
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms
Switch#ping ip 10.10.10.138 source 192.168.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.138, timeout is 2 seconds:
Packet sent with a source address of 192.168.0.1
.....
Success rate is 0 percent (0/5)
Switch#ping ip www.google.it source 192.168.0.1

Translating "www.google.it"...domain server (255.255.255.255) [OK]

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 209.85.135.99, timeout is 2 seconds:
Packet sent with a source address of 192.168.0.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 109/112/118 ms

I suspect as you say there is something on the router that is blocking the packets coming back. If you can ping an internet address from 192.168.0.1 then the default router has a route back to the 192.168.0.x network or else that ping would not work.

Jon

akhbinda · ‎10-19-2010

Hello Claudio,

So what all we have seen so far is that there is definetly a route back to 192.168.0.x network on the public router, however it seems there is some ACL that could be blocing the pings.

The best way to troubleshoot what the exact root cause is now (also, conidering the fact that you do not have access to the public router) is to CONFIGURE A SPAN on the switch to take packet captures on any of the 192.168.0.x machines using wireshark. This will show us a complete picture and details.

Kindlu use following link to configure local span :

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/configuration/guide/swspan.html

Regards

/Akhil

ComputerArt · ‎10-20-2010

What should I look for wireshark?

akhbinda · ‎10-21-2010

Hello Claudio,

Indeed. Yes, Wireshark on a machine which is connected on destination port of a local span session.

Regards

/Akhil

ComputerArt · ‎10-21-2010

Here is the file with the data acquired.

ComputerArt · ‎10-21-2010

Hello Akhil,

I managed to get into the router 10.10.10.138, I set route 192.168.0.0 255.255.255.0 10.10.10.80 and now everything works.

this is right?
There are packages that bounce between the switch and the router?

If I had not had access to the router?

Thank you all
Claudio.

louis.tenga · ‎10-21-2010

Claudio,

I'm glad it worked. I am also glad I did not steer you wrong. Please be sure to rate my response

ComputerArt · ‎10-25-2010

Hello, I have one more question.
you can enable NAT on Catalyst 3750?

Thanks
Claudio.

Jon Marshall · ‎10-19-2010

Claudio

Can you provide the output of an "ipconfig /all" from 10.10.10.1 ? It looks to me like it doesn't have a default-gateway set.

Jon

ComputerArt · ‎10-19-2010

IPCONFIG MY DNS SERVER

C:\Documents and Settings\Administrator>ipconfig /all

Configurazione IP di Windows

   Nome host . . . . . . . . . . . . . . : sr01
   Suffisso DNS primario . . . . . . . . : cart.local
   Tipo nodo . . . . . . . . . . . . . . : Broadcast
   Routing IP abilitato . . . . . . . . : Sì
   Proxy WINS abilitato . . . . . . . . : Sì
   Elenco di ricerca suffissi DNS. . . . : cart.local

Scheda Ethernet Connessione alla rete locale (LAN):

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : HP NC105i PCIe Gigabit Server Adapter

   Indirizzo fisico. . . . . . . . . . . : 00-21-5A-2F-D8-E1
   DHCP abilitato. . . . . . . . . . . . : No
   Indirizzo IP. . . . . . . . . . . . . : 10.10.10.1
   Subnet mask . . . . . . . . . . . . . : 255.255.255.0
   Gateway predefinito . . . . . . . . . : 10.10.10.138
   Server DNS . . . . . . . . . . . . . : 127.0.0.1

PING from CISCO 3750

Switch>
Switch>en
Switch#ping 10.10.10.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms
Switch#ping 10.0.0.250

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.250, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms

Switch#ping 192.168.0.10

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.10, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

akhbinda · ‎10-19-2010

Hello Claudio,

Thanks. Can you please do following from 3750 switch :

ping ip 10.10.10.138 source 192.168.0.1

Regards

/Akhil

ComputerArt wrote:

IPCONFIG MY DNS SERVER

C:\Documents and Settings\Administrator>ipconfig /all

Configurazione IP di Windows

   Nome host . . . . . . . . . . . . . . : sr01
   Suffisso DNS primario . . . . . . . . : cart.local
   Tipo nodo . . . . . . . . . . . . . . : Broadcast
   Routing IP abilitato . . . . . . . . : Sì
   Proxy WINS abilitato . . . . . . . . : Sì
   Elenco di ricerca suffissi DNS. . . . : cart.local

Scheda Ethernet Connessione alla rete locale (LAN):

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : HP NC105i PCIe Gigabit Server Adapter

   Indirizzo fisico. . . . . . . . . . . : 00-21-5A-2F-D8-E1
   DHCP abilitato. . . . . . . . . . . . : No
   Indirizzo IP. . . . . . . . . . . . . : 10.10.10.1
   Subnet mask . . . . . . . . . . . . . : 255.255.255.0
   Gateway predefinito . . . . . . . . . : 10.10.10.138
   Server DNS . . . . . . . . . . . . . : 127.0.0.1

PING from CISCO 3750

Switch>
Switch>en
Switch#ping 10.10.10.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms
Switch#ping 10.0.0.250

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.250, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms

Switch#ping 192.168.0.10

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.10, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

ComputerArt · ‎10-19-2010

Switch#ping 10.10.10.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms

Switch#
Switch#ping 10.10.10.138

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.138, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/9 ms

akhbinda · ‎10-19-2010

No No..you need to use following command on the switch and share output :

ping ip 10.10.10.138 source 192.168.0.1

Regards

/Akhil