03-26-2006 06:09 PM - edited 03-03-2019 02:29 AM
Dear Netpro.
I've 2 vlans which is VLAN 10 and VLAN 20.
VLAN 10 (10.10.10.1)and VLAN 20 (20.20.20.1). From Vlan 10 i can ping to Vlan 20, but from Vlan 20 cant ping to Vlan 10. routing is all routed.
does anyone got any idea ?
Regards,
Jack
03-26-2006 06:23 PM
Jack
When you talk about being able to ping and not being able to ping are you talking about pinging from the router or from end stations connected in each vlan? And are you pinging to the address of the router interfaces or to addresses of end stations.
Most of the time when I see symptoms like you describe I find that it is misconfiguration, most often on some end stations. I suggest that you check both the router interfaces (make sure that each interface has a correct address and a correct subnet mask) and the interfaces on the end stations (check that they have correct address, have correct subnet mask, and most importantly make sure that the default gateway configured in the router interface of the correct vlan). Probably the most common mistake that I find is an incorrect default gateway on the end station. And the next most common mistake is a subnet mask on the end station that does not match the router mask.
Let us know what you find. And if the problem is not solved yet then let us know a bit more about your situation.
HTH
Rick
03-26-2006 06:57 PM
Hi Rick,
i agreed with you, most of the time is the subnet mask and default gateway key in wrongly, but i have checked and confirmed no problem at all. the funniest thing is within the range (10.10.10.1 - .254) some of the ip can ping to vlan 20 (20.20.20.x).
Regards,
Jack
03-26-2006 07:09 PM
Jack
Can you confirm that you are doing the ping from end stations in the 10.10.10.x network? And can you help me understand whether the ping destination is end stations in the 20.20.20.x network or is the router interfaces in the VLANs?
If some of the addresses in 10.10.10.x can successfully ping to VLAN20, then I think it is not likely to be a problem on the router/switch configuration. But it might be helpful if you would post the configuration of the VLAN interfaces so that we can see them.
HTH
Rick
03-26-2006 06:24 PM
Hi Jack,
Can you confirm that there aren't any access-lists applied on your VLAN interfaces ?
Paresh
03-26-2006 09:54 PM
Hi Paresh,
Yes, i am confirm i didnt put any access-list.
Hi Rick,
the configuration as below.
interface Vlan10
description vlan10
ip address 10.10.10.252 255.255.255.0
ip helper-address x.x.x.x
ip helper-address y.y.y.y
ip helper-address z.z.z.z
no ip redirects
no ip proxy-arp
ip pim query-interval 3
ip pim sparse-mode
no ip route-cache cef
ip igmp query-interval 30
ip cgmp
standby 10 ip 10.10.10.254
standby 10 priority 105
standby 10 authentication yahoo
end
interface Vlan20
description vlan20
ip address 20.20.20.252 255.255.255.0
ip helper-address x.x.x.x
ip helper-address y.y.y.y
ip helper-address z.z.z.z
no ip redirects
no ip proxy-arp
ip pim query-interval 3
ip pim sparse-mode
no ip route-cache cef
ip igmp query-interval 30
ip cgmp
standby 10 ip 20.20.20.254
standby 10 priority 105
standby 10 authentication yahoo
end
Regards,
Jack
03-26-2006 09:59 PM
Jack,
Check some local firewalls on the systeml like symantec firewall and also the windows XP's internal firewall.
It seems to be a simple config and should work fine. If you are able to ping some hosts in that Vlan and you are sure about the ip/netmask and could be the local firewall issue.
regards,
-amit singh
03-26-2006 10:02 PM
Hi Amit ,
Thanks for reply. yes i have checked all before i sent to netpro.no firewall, no access-list , subnet mask and default gateway are correct.
Regards,
Jack
03-26-2006 10:02 PM
Hi Jack,
You might want to try and enable 'ip proxy-arp' on these interfaces in case there is an issue with the subnet masks you've configured on your hosts... this is not a long-term fix but it may work in the short term ...
Paresh
03-26-2006 10:34 PM
Hi Paresh,
i agreed with what u said, but i just curious about currently i am using "no ip proxy-arp" on these interfaces. and some of the ip is working but some of them is not. for instance :vlan10 - 10.10.10.15 (Static ip address). can ping to vlan20 (20.20.20.10), but from the vlan20 can't ping to this static ip address.
Regards,
Jack
03-27-2006 05:49 AM
Jack
It may help to have some specifics like this. You say that 10.10.10.15 can ping 20.20.20.10. I am not clear whether you are saying that 20.20.20.10 can not ping 10.10.10.15 or is it some other address in 20.20.20.x that can not ping to 10.10.10.15. Can you clarify?
HTH
Rick
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: