Ping from SVI another subnet - unroutable error

[Ivan Mamka]

Hello,

Trying to ping another IP from SVI on a switch. Have a default gateway set and "ip routing" enabled but switch says "unroutable".

Full switch config attached. CML version 2.4.1.

Thanks in advance!

[NetworkDave]

@Ivan Mamka,

Your provided output of "show ip int br" only displays vlan100. Did you configure an SVI for vlan200?

----------------------------------------------------------------------------------------------------
Remember to mark helpful posts and mark the correct answer as a solution; It helps other users with similar questions.

[Ivan Mamka]

I don't see packets are going out of the switch on a link while capturing, also errors "unroutable" shown. So, I don't think problem is on a second switch. But yes, SVI for vlan200 is present on a second switch.

[Ivan Mamka]

I found the problem. ip default-gateway 100.1.1.1 command does not add any entries to the routing table. When using "ip route 0.0.0.0 0.0.0.0 100.1.1.1", it started to work.

[NetworkDave]

@Ivan Mamka,

Thanks for the update. Good job.

Verifying the SVI, Default-Gateway, and Routing, etc. is part of the troubleshooting Process.

Glad the problem is resolved. Please mark this thread as solved.

----------------------------------------------------------------------------------------------------
Remember to mark helpful posts and mark the correct answer as a solution; It helps other users with similar questions.

[Ivan Mamka]

Actually, I want to say that I was not right about "I found the problem". I mean I found the workaround.

So, in packet tracer when using "ip default-gateway ....", the ping is working of another subnet without "ip route 0.0.0.0...." command. Also routing table does not show any default route (show ip route) on the same switch, but still ping receiving replies....

[Ivan Mamka]

In addition, the lab which I'm doing (in a book), does not mention to use "ip route...."

[NetworkDave]

@Ivan Mamka,

What is the title of book and the name of the lab? 

Can you provide to topology and any instructions to the lab..

Please send the zipped Packet tracer files.

----------------------------------------------------------------------------------------------------
Remember to mark helpful posts and mark the correct answer as a solution; It helps other users with similar questions.

[Ivan Mamka]

Book called: 101Labs Cisco CCNP. Chapter - Lab 006. HSRP and Switch Security.
Hope the copyright will be ok with below. Two switch configuration. ASL1 unable to ping other subnet (ie 200.1.1.254 or 200.1.1.1)

DLS1 commands:
conf term
vtp mode transparent
vlan 100
exit
vlan 200
exit
int range fa0/7,fa0/9,fa0/11
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 1,100,200
switchport nonegotiate
switchport port-security
switchport port-security maximum 10
switchport port-security violation restrict
switchport port-security mac-address sticky
exit
int vlan 100
ip add 100.1.1.1 255.255.255.0
standby 1 ip 100.1.1.254
standby 1 priority 105
standby 1 preempt
standby 1 authentication HSRP1
int vlan 200
ip add 200.1.1.1 255.255.255.0
standby 2 ip 200.1.1.254
standby 2 preempt
standby 2 authentication HSRP2
exit
spanning-tree mode rapid-pvst
ip routing

ASL1 commands:
conf term
vtp mode transparent
vlan 200
exit
int range fa0/7,fa0/9
switchport mode trunk
switchport trunk allowed vlan 1,100
int vlan 100
ip add 100.1.1.3 255.255.255.0
exit
ip routing
ip default-gateway 100.1.1.254

[NetworkDave]

@Ivan Mamka,

Thanks for providing some of the requested information. Please send the zipped Packet tracer files you are working with.

Refer to the comments - in brackets [ ] - for changes needed in the configuration:
**************
DLS1 commands:
**************
int range fa0/7,fa0/9,fa0/11
switchport [* Missing *]
switchport trunk encapsulation dot1q

int vlan 100
standby 1 preempt
standby 1 authentication text HSRP1 [* Add "text" *]
int vlan 200
standby 2 preempt
standby 2 authentication text HSRP2 [* Add "text" *]
exit

**************
ASL1 commands:
**************
vtp mode transparent
vlan 200 [* Should be vlan 100 *]
exit

HTH

----------------------------------------------------------------------------------------------------
Remember to mark helpful posts and mark the correct answer as a solution; It helps other users with similar questions.