I have installed a new LAN using a 3550 switch as a central router to route between 3 different VLAN's. The client nodes can ping each other both in their own VLAN's and across other VLAN's, so inter VLAN routing works. My problem is I cannot route out to the internet from any client node in any VLAN. The outward bound Int on FA0/1 is 10.1.1.1 which is connected to our firewall internal Int of 10.1.1.5. I've added a static route of 0.0.0.0 0.0.0.0 10.1.1.5.
I've traced IP route from the 3550 out to the internet via our firewall which works, but when I attempt a tracert from a client it fails after reaching it's own VLAN default-gateway eg.
H:\>tracert 10.1.1.5
Tracing route to 10.1.1.5 over a maximum of 30 hops
1 <10 ms <10 ms <10 ms 10.3.1.1
2 * * * Request timed out.
3 * * ^C
attached are the config of the 3550 and a 2950c. I cannot see why this isn't working? Can anyone see what I'm missing? Help!
3550
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 3550_MasterSwitch
!
enable secret 5 <removed>
!
ip subnet-zero
ip routing
ip dhcp relay information option
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
!
interface FastEthernet0/1
description 'To Internet_Firewall'
no switchport
ip address 10.1.1.1 255.255.255.0
!
interface FastEthernet0/2
description 'Link to Switch_A Server room'
switchport access vlan 2
switchport trunk encapsulation dot1q
switchport mode trunk
no ip address
duplex full
!
interface FastEthernet0/3
description 'Link to Switch_B Willows'
switchport access vlan 2
switchport trunk encapsulation dot1q
switchport mode trunk
no ip address
duplex full
!
interface FastEthernet0/4
description 'Link to Switch_C Aspen'
switchport access vlan 2
switchport trunk encapsulation dot1q
switchport mode trunk
no ip address
duplex full
!
interface FastEthernet0/5
description 'Link to Switch_D Accomodation Block'
switchport access vlan 2
switchport trunk encapsulation dot1q
switchport mode trunk
no ip address
duplex full
!
interface FastEthernet0/6
no ip address
!
interface FastEthernet0/7
no ip address
!
<output supressed>
interface FastEthernet0/24
no ip address
!
interface GigabitEthernet0/1
no ip address
!
interface GigabitEthernet0/2
no ip address
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
description 'Course_Developement_VLAN'
ip address 10.2.1.1 255.255.255.0
!
interface Vlan3
description 'Tech_Support_VLAN'
ip address 10.3.1.1 255.255.255.0
ip helper-address 10.2.1.4
!
interface Vlan4
description 'NCALT_VLAN'
ip address 10.4.1.1 255.255.255.0
ip helper-address 10.2.1.4
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.1.5
ip http server
!
!
banner motd ^C
Tech Support access only
^C
!
line con 0
password <removed>
login
line vty 0 4
password <removed>
login
line vty 5 15
login
!
end
2950c
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Switch_A
!
enable secret xxxxx
!
ip subnet-zero
!
spanning-tree extend system-id
!
!
interface FastEthernet0/1
switchport access vlan 2
no ip address
duplex full
speed 100
storm-control broadcast level 50.00
!
spanning-tree portfast
!
interface FastEthernet0/2
switchport access vlan 2
no ip address
duplex full
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
interface FastEthernet0/3
switchport access vlan 2
no ip address
duplex full
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 2
!
duplex full
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 2
no ip address
duplex full
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 2
no ip address
duplex full
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
!
!
interface FastEthernet0/7
switchport access vlan 2
no ip address
duplex full
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 2
no ip address
duplex full
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 2
no ip address
!
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 2
no ip address
duplex full
speed 100
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 3
no ip address
speed 10
storm-control broadcast level 50.00
storm-control action shutdown
spanning-tree portfast
!
<output Suppressed>
interface FastEthernet0/25
description 'Trunk link to 3550_MasterSwitch'
no ip address
!
interface FastEthernet0/26
no ip address
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan2
ip address 10.2.1.2 255.255.255.0
no ip route-cache
!
ip default-gateway 10.2.1.1
ip http server
!
!
line con 0
login
line vty 0 4
password <removed>
login
line vty 5 15
login
!
end
