05-08-2025 10:13 AM
Hi,
My switch can't connect to the internet - feels isolated and all alone. I got here after a factory reset. Can someone help me fix this? For details, please see the attachment: no_internet.txt
Solved! Go to Solution.
05-09-2025 02:04 AM
>>> I got here after a factory reset <<<
- vlans configured,
- trunk interfaces to accesspoints
- current ip-address
I don't believe the factory reset will produce the current running-configuration!
first check the factory reset has been succeful,
second this switch is connected to what ? a private network? or a company network?
test reachability of the first hop : looking at the current config this could be
ip default-gateway 172.25.1.1
05-09-2025 02:04 AM
>>> I got here after a factory reset <<<
- vlans configured,
- trunk interfaces to accesspoints
- current ip-address
I don't believe the factory reset will produce the current running-configuration!
first check the factory reset has been succeful,
second this switch is connected to what ? a private network? or a company network?
test reachability of the first hop : looking at the current config this could be
ip default-gateway 172.25.1.1
05-09-2025 07:05 AM
@pieterh Success!
Background: My home network was compromised via MiTM attack. I reset the switch then reconfigured it to what you saw in the no_internet.txt. With switchport te1/0/1 set to trunk mode and trusted (i.e., IP DHCP and ARP inspection), why was outbound traffic stopped?
Thank you!!!
05-09-2025 10:32 AM
>>> then reconfigured it to .... <<<
aha, you already reconfigured it after the factory reset that explains a lot.
did you perform a ping test to 172.25.1.1 ? and is this reachable?
your uplink only carries your local vlans "trunk allowed vlan 10,20,30" and has its native vlan 1
this must match the device at the other and of this link, you may need to add vlan1 to the allowed list
05-09-2025 10:45 AM
by the way , interface TenGigabitEthernet1/0/2 also has the description "uplink"
is it intended as a port-channel to the external network ? then interface configuration of Te1/0/1 and Te1/0/2 need to be the same at least (and may need etherchannel or LACP configuration commands)
05-09-2025 04:37 PM
Okay! I'll place vlan 1, with the other trunk allowed vlans and make te1/0/1-2 identical. I'm learning as I go, so LACP and port-channel will be part of my next stop. You've been very helpful. Thanks and cheers!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide