cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
820
Views
0
Helpful
5
Replies

CBS350 with no internet access

uuette
Level 1
Level 1

Hi,

My switch can't connect to the internet - feels isolated and all alone. I got here after a factory reset. Can someone help me fix this? For details, please see the attachment: no_internet.txt

1 Accepted Solution

Accepted Solutions

pieterh
VIP
VIP

>>> I got here after a factory reset <<<
- vlans configured,
- trunk interfaces to accesspoints
- current ip-address
I don't believe the factory reset will produce the current running-configuration! 

first check the factory reset has been succeful,
second this switch is connected to what ? a private network? or a company network? 
test reachability of the first hop : looking at the current config this could be 

ip default-gateway 172.25.1.1

 

View solution in original post

5 Replies 5

pieterh
VIP
VIP

>>> I got here after a factory reset <<<
- vlans configured,
- trunk interfaces to accesspoints
- current ip-address
I don't believe the factory reset will produce the current running-configuration! 

first check the factory reset has been succeful,
second this switch is connected to what ? a private network? or a company network? 
test reachability of the first hop : looking at the current config this could be 

ip default-gateway 172.25.1.1

 

uuette
Level 1
Level 1

@pieterh Success! 

Background: My home network was compromised via MiTM attack. I reset the switch then reconfigured it to what you saw in the no_internet.txt. With switchport te1/0/1 set to trunk mode and trusted (i.e., IP DHCP and ARP inspection), why was outbound traffic stopped?

Thank you!!!

pieterh
VIP
VIP

>>> then reconfigured it to .... <<< 
aha, you already reconfigured it after the factory reset that explains a lot.

did you perform a ping test to 172.25.1.1 ? and is this reachable?

your uplink only carries your local vlans "trunk allowed vlan 10,20,30" and has its native vlan 1
this must match the device at the other and of this link, you may need to add vlan1 to the allowed list

pieterh
VIP
VIP

by the way ,  interface TenGigabitEthernet1/0/2 also has the description "uplink"
is it intended as a port-channel to the external network ? then interface configuration of Te1/0/1 and Te1/0/2 need to be the same at least (and may need etherchannel or LACP configuration commands)

uuette
Level 1
Level 1

Okay! I'll place vlan 1, with the other trunk allowed vlans and make te1/0/1-2 identical. I'm learning as I go, so LACP and port-channel will be part of my next stop. You've been very helpful. Thanks and cheers!