I have a basic trouble in setting up TFTP server. I need to upgrade the IOS on 2960G cat switch. First I have downloaded the tftp server on my laptop then I assigned an IP address manually in my laptop as 10.1.1.1 with subnet mask 255.255.255.0 leaving deafult gateway address as none. Then I moved to the 2960G switch and created a new interface vlan10 then assigned the IP address as 10.1.1.10 with subnet mask as 255.255.255.0. Next I used interface gig0/1 interface and said switchport access vlan 10, duplex and speed setting set as auto. I am able to ping from host towards the vlan ip address 10.1.1.10 but from switch i m unable to ping. I ran debug icmp and debug ip packet command but nothing was traced what the issue is. The interface status shows up up and vlan interface status shows up up, i checked the windows firwall settings, its in off state. I think there is something minor error I am doing. Can anyone help me out in finding the solution.
I followed the above procedure to upgrade the IOS from my laptop, please let me know if there is any other way that I can upload the IOS image.
Solved! Go to Solution.
Try giving an ip address to the switch with default gateway and vlan.
switch(config)#ip add x.x.x.x 255.255.255.0
switch(config)#ip add vlan x
I think , you need management interface on the switch in case of 2960, experts here can also comment.
Most likely your laptop has firewall set. Please disable Windows/other
firewall on the laptop and try again. It should work.
Hope this helps.
I already disable the windows firewall settings in my laptop as commented earlier.
let me try with default gateway ip address
Do you have any Anti-virus software installed on the laptop? Also, if you
have a second interface (like wireless) disable it and try.
strange that the 2960G can't ping the laptop but the laptop can ping the 2960G.
Are you sure you don't have that ip address 10.1.1.10 configured on the laptop as well by mistake either on the loopback or on another interface or as a secondary ip on your laptop int. ipconfig /all should tell you but you probably checked that out already.
can you post the ipconfig /all
and the output from the 2960 of
sh ip int brief
also the config of the 2960 shouldn't hurt. Makes no sense why you can't ping the laptop from the switch, from the post seems you did everything correct in regards to your layer 2 2960 switch.
Well I don't have any other subnet configured in my laptop, even i tried to used the different subnet 192.168.10.10 with subnet mask 255.255.255.0 but the result is same. I am attaching the config file of the switch with ping statistics and sh ip int brief status. Also I am attaching my laptop statistics file in which you will find the ipconfig /all and ping statistics.
Awaiting for your response.
No I am not able to telnet into the switch.
Yes Symantec antivirus protection is enabled in my laptop. I cannot turned it off because its enterprise edition and centrally managed.
I am able to ping to the 3750 switch. I have uploaded the IOS from my laptop on 3750 switch without any issues. But when I am trying with 2950 I have this issue.
Please try configuring an ip address to vlan 1 , have a default gateway configured on a global configuration mode. then assign a port to vlan 1. also , mention default gateway on you laptop. I have read a few documents from cisco and for a 2960 each of them is suggesting to have a management interface configured on the vlan 1.
Doesn't seem like there is anything wrong with the confis on your switch.
Also you don't need to have vlan1 configured with and ip address or no shutdown mode just to be able to setup this type of configuration, its not like you have a trunk configured and sending vtp updates etc... I recommend using the ping extended commands on your 2960, perhaps the 2960 is trying to use a different interface as the source (even though i only see one ip address configured on your 2960 but its worth a shot) So lets make sure ping is using the correct interface with ip 192.168.10.10 on the CLI of the 2960 just type "ping" and hit enter you will be prompted with a few questions and answer them as follows
Target IP address: 192.168.10.11
Repeat count :
Datagram size :
Timeout in seconds :
Extended commands [n]: y
Source address or interface: 192.168.10.10
Type of service :
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Hopefully you would get some replies...
if not I recommend
1) changing cables (straight through cable)
2) changing ports
since everything looks fine on the switch and laptop base on your attachments.
oh yeah one more thing,
if the laptop is really pinging the 2960 we should see the laptop mac address on the 2960 mac-address-table.
so you should from the laptop ping 192.168.10.10
then on the switch do a
you should see the laptops's mac address coming from gi0/1
if its not there then your laptop is pinging something else ???
or you can also verify from the laptop
you can do a
on your laptop and you should see the Mac address that was given to vlan99 a
sh int vlan99
should tell you the mac address assigned.
once again this is all based on the configuration files you provided as attachments.
As one of the previous writers noted, you do not have a default gateway for the 2960
that needs to be first.
I'm assuming that it is connected to the 3750. If so you may need an IP helper address
for tftp to work,
see the atttached link.
The 2960 doesn't need a default gateway. He is running a tftp service off his laptop wich is directly connected to the 2960 so that he could upgrade the ios. The 2960 and laptop are on the same subnet.
How about this: Delete all config of the 2960G switch reboot and do this:
1. PC IP address is 184.108.40.206, subnet mask 255.0.0.0
2. Switch VLAN 1 IP address 220.127.116.11 (or any number other than 1), subnet mask 255.0.0.0. "no shut".
Copy IOS from PC to switch.
This is the process I use every time (and all the time) when I upgrade the IOS before deployment.
Thank you so much for your valuable suggestions. I have figured it out the solution to the problem. I checked all your possibilities as suggested, it was really helpful to trace out the solution. My Checkpoint-VPN secure client was running behind in my laptop due to that reason I was unable to ping from switch to my laptop.
I have upgraded the IOS on the switch and deployed the config on all of them. Thank GOD it was on time and I have to put it into production by the end of the day. Now everything is ready.
Once again thanks to all for coperating.
More to come. !!!!!!!!