Router can't ping switch

[John Cheetley]

Hi Team,
I had posted another discussion via https://supportforums.cisco.com/t5/lan-switching-and-routing/switch-router-and-vlans/m-p/3220877#M397458 but this is now closed off

Am trying to get the router to ping the switch to then progress and get registered phone to obtain IP address

Environment
Switch is 2900 XL series
Router is 2691 MPS having CUCM 7.2.1 (DHCP enabled for 192.168.20.0)
Switch IP 192.168.0.2 for vlan 1
7940 IP phone 10/100 port switch is connected to FA0/3
FA0/24 on switch is connected via trunk link to FA0/1 on 2691 MPS router (CUCM)
FA0/0 on MPS router is connected to ISP gateway router (192.168.20.1) via eth LAN3
(So above is effectively router on a stick with ISP gateway router) so 2 routers and 1 switch
MPS router can ping and tracert to ISP via FA0/0 so that is working

I have updated config with all suggestions however the router(192.168.20.2) that has CUCM 7.2.1 can't ping the switch (192.168.0.2) via the ping tool in CUCM but can ping/tracert the ISP
Gives..
PING 192.168.0.2 (192.168.0.2) 56(84) bytes of data.
From 192.168.20.3: icmp_seq=0 Redirect Network(New nexthop: 192.168.20.1)
From 192.168.20.3: icmp_seq=1 Redirect Network(New nexthop: 192.168.20.1)
From 192.168.20.3: icmp_seq=2 Redirect Network(New nexthop: 192.168.20.1)
From 192.168.20.3: icmp_seq=3 Redirect Network(New nexthop: 192.168.20.1)
From 192.168.20.3: icmp_seq=4 Redirect Network(New nexthop: 192.168.20.1)
--- 192.168.0.2 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 4003ms

Translated as follows
192.168.20.3 is the windows server 2008 that is running VMWare that CUCM is on
192.168.20.1 is the ISP gateway router

I don't see the swith IP in this output (maybe CUCM not see the switch)

I run sh ip route on 192.168.20.2 and below are the results.

CiscoCurious#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C 192.168.20.0/24 is directly connected, FastEthernet0/1.30
C 192.168.1.0/24 is directly connected, FastEthernet0/1.40
Question.
Shouldn't the switch IP 192.168.0.2 be showing in this display

However. When on the switch. I run show arp and shows CUCM IP and cisco phone connected to port 3 with mac address via SEP.

Please advise your thoughts. Thanks again

[Julio E. Moisa]

Hi

Could you please share the router configuration, do you have a interface with the IP 192.168.0.x/24 on the router, it should recognize the IP first as connected locally. It could be shutdown.

[John Cheetley]

Hi Julio, Thanks for the quick reply. Updated router config attached. This doesn't include the switch config. Very long day. Going to sleep.

[Julio E. Moisa]

Hi

If you have configured an Interface VLAN to manage the switch, for example:

Switch

vlan 10

interface vlan 10

description SWITCH-MANAGEMENT

ip address 192.168.0.2 255.255.255.0

You should have on the Router:

interface FastEthernet0/1.10
description SWITCH-MANAGEMENT
encapsulation dot1Q 10
ip address 192.168.0.1 255.255.255.0

no shutdown

[chrihussey]

On the router, I don't see a route for the 192.168.0.2. Is the switch directly connected to the switch on F0/1? If so,create an additional sub interface on the router in the same network and VLAN as the switch.

Hope this helps

[paul driver]

Hello

You has stated a couple of this i dont quite understand -

---

@John Cheetley wrote:

Hi Team,
I had posted another discussion via https://supportforums.cisco.com/t5/lan-switching-and-routing/switch-router-and-vlans/m-p/3220877#M397458 but this is now closed off

Am trying to get the router to ping the switch to then progress and get registered phone to obtain IP address

Environment
Switch is 2900 XL series
Router is 2691 MPS having CUCM 7.2.1 (DHCP enabled for 192.168.20.0)
Switch IP 192.168.0.2 for vlan 1
7940 IP phone 10/100 port switch is connected to FA0/3
FA0/24 on switch is connected via trunk link to FA0/1 on 2691 MPS router (CUCM)
FA0/0 on MPS router is connected to ISP gateway router (192.168.20.1) via eth LAN3
(So above is effectively router on a stick with ISP gateway router) so 2 routers and 1 switch
MPS router can ping and tracert to ISP via FA0/0 so that is working

I have updated config with all suggestions however the router(192.168.20.2) that has CUCM 7.2.1 can't ping the switch (192.168.0.2) via the ping tool in CUCM but can ping/tracert the ISP
Gives..
PING 192.168.0.2 (192.168.0.2) 56(84) bytes of data.
From 192.168.20.3: icmp_seq=0 Redirect Network(New nexthop: 192.168.20.1)
From 192.168.20.3: icmp_seq=1 Redirect Network(New nexthop: 192.168.20.1)
From 192.168.20.3: icmp_seq=2 Redirect Network(New nexthop: 192.168.20.1)
From 192.168.20.3: icmp_seq=3 Redirect Network(New nexthop: 192.168.20.1)
From 192.168.20.3: icmp_seq=4 Redirect Network(New nexthop: 192.168.20.1)
--- 192.168.0.2 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 4003ms

Translated as follows
192.168.20.3 is the windows server 2008 that is running VMWare that CUCM is on
192.168.20.1 is the ISP gateway router

I don't see the swith IP in this output (maybe CUCM not see the switch)

I run sh ip route on 192.168.20.2 and below are the results.

CiscoCurious#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C 192.168.20.0/24 is directly connected, FastEthernet0/1.30
C 192.168.1.0/24 is directly connected, FastEthernet0/1.40
Question.
Shouldn't the switch IP 192.168.0.2 be showing in this display

However. When on the switch. I run show arp and shows CUCM IP and cisco phone connected to port 3 with mac address via SEP.

Please advise your thoughts. Thanks again

---

Can you post a small topology on this setup please just to clarify

res
Paul

[John Cheetley]

Hi Paul,

Topology as requested.

[paul driver]

Hello

Try the example below, it should provide you with dhcp for both the data and voice vlans and allow data clients to be natted to the outside.

RTR1

Int fa0/0
Description link to ISP modem
ip address 192.168.20.2 255.255.255.252
ip nat outside

Int fa0/1
Description link to LAN Switch
no shut

int fa0/1.1
Description link to Data_vlan
encapsulation dot1q 1
ip address 192.168.0.1 255.255.255.0
ip nat inside

int fa0/1.10
Description link to Voice_Vlan
encapsulation dot1q 1
ip address 192.168.10.1 255.255.255.0

access-list 10 permit 192.168.0.0 0.0.0.255
ip nat inside source-list 10 interface fa0/0

ip dhcp pool Data_Voice
network 192.168.0.0 /24

network 192.168.10.0 255.255.255.0 secondary
override default-router 192.168.10.1
default-router 192.168.0.1
dns x.x.x.x
lease 0 8

ip dhcp excluded-address 192.168.0.1 192.168.0.10
ip dhcp excluded-address 192.168.10.1 192.168.0.10

ip route 0.0.0.0 0.0.0.0 fa0/0 192.168.20.1

Switch
int vlan 1
ip address 192.168.0.2 255.255.255.0

no shut

vlan 1
Name Data
exit

vlan 10
name voice
exit

int fa0/24
description to RTR
switchport trunk enapsulation dot1q

switchport mode trunk

int fa0/3
switchport host
switchport voice vlan 10

res
Paul

[John Cheetley]

Hi Paul,

Sorry about long delay in my response to you.

I have updated all of your changes

Now unfortunately I have lost access to CUCM which was on 192.168.20.2 on fa0/1.30

This was also under ip nat inside

The changes you advised have placed above ip on fa0/0 and is now under ip nat outside

I have lost access to CUCM 7.1.2 unfortunately and the DHCP that was on this for 192.168.20.x range

So I presume I will have to either change CUCM ip address to 192.168.10.1 and IP range that the phones will pick up and option 150 too

[John Cheetley]

Hi Paul,

Sorry about long delay in my response to you.

I have updated all of your changes

Now unfortunately I have lost access to CUCM which was on 192.168.20.2 on fa0/1.30

This was under ip nat inside

The changes you advised have placed above ip on fa0/0 and is now under ip nat outside

I have lost access to CUCM 7.1.2 unfortunately and the DHCP that was on this for 192.168.20.x range

So I presume I will have to either change CUCM ip address to 192.168.10.1 and IP range that the phones will pick up and option 150 too

[paul driver]

Hello

I maybe be missing something  here -The config provided was for the rtr not the ISP modem, but now you saying dhcp is on the ISP modem and also CUCM?
In you topology diagram you didn't have sub-interfaces on the ISP link?

Do you really require NAT at all or is the ISP providing this , If the answer is NO then remove the NAT.

So if you DONT need DHCP or NAT then remove them form the RTR configuration and make sure the ISP modem is aware of you internal subnets so it can  provide DHCP and NAT

res
Paul

[John Cheetley]

Config is for router. ISP provides public IP for ISP gateway modem. I have DHCP on modem for 192.168.20.X range. I was going to enable DHCP on CUCM for same range but no point have 2 DHCP's.

I have enabled NAT and have renamed fa0/1.1 to 10.2 and fa0/1.10 as 20.2

Enabled option 150 for ip 192.168.20.2

And given fa0/0 ip of 30.2 

That has given me back the CUCM gui

Going to update switch ip to 192.168.10.2

And create vlan on switch. Then let u know.

The previous excluded DHCP IP's were the wrong ones. That has now been updated to 192.168.20.X range

[John Cheetley · Accepted solution]

Hi Paul,

Sorry about delay. The server that interconnects to the router has a failed Power Supply Unit. Have to let you know when I get new PSU.