CBS350 with no internet access

[uuette]

Hi,

My switch can't connect to the internet - feels isolated and all alone. I got here after a factory reset. Can someone help me fix this? For details, please see the attachment: no_internet.txt

[pieterh · Accepted solution]

>>> I got here after a factory reset <<<
- vlans configured,
- trunk interfaces to accesspoints
- current ip-address
I don't believe the factory reset will produce the current running-configuration! 

first check the factory reset has been succeful,
second this switch is connected to what ? a private network? or a company network? 
test reachability of the first hop : looking at the current config this could be 

ip default-gateway 172.25.1.1

[uuette]

@pieterh Success! 

Background: My home network was compromised via MiTM attack. I reset the switch then reconfigured it to what you saw in the no_internet.txt. With switchport te1/0/1 set to trunk mode and trusted (i.e., IP DHCP and ARP inspection), why was outbound traffic stopped?

Thank you!!!

[pieterh]

>>> then reconfigured it to .... <<< 
aha, you already reconfigured it after the factory reset that explains a lot.

did you perform a ping test to 172.25.1.1 ? and is this reachable?

your uplink only carries your local vlans "trunk allowed vlan 10,20,30" and has its native vlan 1
this must match the device at the other and of this link, you may need to add vlan1 to the allowed list

[pieterh]

by the way ,  interface TenGigabitEthernet1/0/2 also has the description "uplink"
is it intended as a port-channel to the external network ? then interface configuration of Te1/0/1 and Te1/0/2 need to be the same at least (and may need etherchannel or LACP configuration commands)

[uuette]

Okay! I'll place vlan 1, with the other trunk allowed vlans and make te1/0/1-2 identical. I'm learning as I go, so LACP and port-channel will be part of my next stop. You've been very helpful. Thanks and cheers!