01-05-2023 07:54 AM
Hello, I set up this topology in Packet Tracer and it worked just fine.
Any help would be greatly appreciated, Thanks
This is an internal network only.
I set up 1 C3560-CX switch in L3 mode and 4 C3560-CX switch in L2.
I can ping and connect to each switch with ssh and GUI
Layer 3 switch
enabled L3 by enabling ip routing
added the vlans 25,30 and 100 (management)
3 interface vlans
vlan 25 172.16.1.0/26
vlan 30 172.16.1.64/26
vlan 100 172.16.30.0/24
setup 4 trunk ports, plugged the 4 L2 switchs in.
Layer 2 switchs
added vlan 25,30 and 100
set up the 8 ports as access and access vlan 25, access voice vlan 30
spanning tree pordtfast
set up port 10 as a trunk for a connection to the L3 switch
setup ip default-gateway (vlan 100 172.16.30.254)
I added 1 client to each L2 switch.
the clients can hit the default gateway
no clients could hit each other. They are a mix of win 10 and win 11.
There are no additional configurations.
Solved! Go to Solution.
01-05-2023 08:39 AM
End device able to ping Gateway ?
Fist thing come to our mind, End device has FW , so disable and test it
Also check from L3 switch are you able to ping end device ?
still issue post below information :
L3 switch :
show ip interface brief
show ip route
show run | in routing
show ip arp
show vlan
show span summary
show vtp status
L2 switch
show vlan
show vtp status
show interface status
End device any one :
no clients could hit each other. They are a mix of win 10 and win 11.
ipconfig /all
tracert to other client IP and show where it blocking.
Note : we expect there no ACL here ?
01-05-2023 08:39 AM
End device able to ping Gateway ?
Fist thing come to our mind, End device has FW , so disable and test it
Also check from L3 switch are you able to ping end device ?
still issue post below information :
L3 switch :
show ip interface brief
show ip route
show run | in routing
show ip arp
show vlan
show span summary
show vtp status
L2 switch
show vlan
show vtp status
show interface status
End device any one :
no clients could hit each other. They are a mix of win 10 and win 11.
ipconfig /all
tracert to other client IP and show where it blocking.
Note : we expect there no ACL here ?
01-05-2023 08:43 AM
only add vlan to l3 SW and it will work
do this by
vlan 25
vlan 30
vlan 100
01-10-2023 11:58 AM
Sorry for the delay, I was pulled to another task
I went through the firewall settings and found that the firewalls were still on after a good effort to allow all connections. I found out that group policy controlled the firewall, so I went in to gpedit and turned them off and everything is functioning.
Thank you for the reply
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide