Cisco 4500-X 16 SFP port Ip routing Issue

[Moses Kihoro]

Hi All,

Can I have someone to urgently tell me why the switch isn't activating the ip routing. I have issued that command but when I do sh run Its not in effect?

the version of IOS is below:

Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch  Software (cat4500e-UNIVERSALK9-M), Version 03.08.01.E RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Thu 28-Jan-16 22:17 by prod_rel_team

[Mark Malone]

Hi

what exactly do you mean its not in effect ?

 is routing not working when you configure it ? or do you mean you don't see it in running-config ?

if you cant see it in sh run it could be enabled by default if that's the case , try sh run all  it can show the hidden default commands that are enabled

[Moses Kihoro]

Hi Mark,

Ok I cant see on running-config, then if I configured interfaface of for example vlan 13 and 15 with ip addresses for vlan 13 and another subnet for vlan 15, then i connect a client machine to access port with vlan 13, I tried pinging the ip address for vlan 15 but its unreachable. 

This shows like inter vlan routing is not working.

[Mark Malone]

yes that's sounds as if something's off alright

the 2 vlan interfaces are up , can you ping directly between them on the actual router cli that will rule out intervlan routing if its the problem ? if they can ping between the interfaces intervlan is working and you probabaly have some other issue

whats the license level your on ? show license

[Moses Kihoro]

Hi Mark,

Unfortunately am out from the customers site, but I remember I saw something like:

license:permanent while it was booting up.

Please also with ideas on how to tackle the issue.

May be will post the result tomorrow but one that is on Sunday 16/10/2016.

[Mark Malone]

1 first you really need to confirm if it is intervlan issue by pinging between vlan interfaces rather than hosts , this will confirm exactly

2 if that's working then there is something off with your pc setup or access port setup ,maybe typo in TCP/IP settings or ports gone err-disabled at access  side

3 Check spanning tree make sure ports are all forwarding and not blocking for some reason too

if routing is enabled when you do show ip route even if nothings really configured but routing enabled you should see ---Gateway of last resort  -- in the output  

if its still acting as layer 2 you will see --Default gateway is  --- this will confirm if switch is running at layer 3 or 2 even if you cant see ip routing in config

These switches are layer 3 so I doubt its not able to route , but if you only have lan services license you cant route its blocked  , you will need at least ipbase or ipservices for ip traffic so confirm the license

let me know what you find when you get access we can go from there , try collect the outputs and post them so we can see what your seeing

[Moses Kihoro]

Hi Mr. Mark,

below are the outputs:

1. The switch itself cannot ping its vlan interfaces configured with ip addresses.

output for show license summary:

Index 0   Feature: entservices
          Period left: Life time
          License Type: Permanent
          License State: Active, In Use
          License Count: Non-Counted
          License Priority: Medium
Index 1   Feature: ipbase
          Period left: 8 weeks 4 days
          License Type: Evaluation
          License State: Active, Not in Use, EULA not accepted
          License Count: Non-Counted
          License Priority: None
Index 2   Feature: lanbase
          Period left: 1513 weeks 1 day
          License State: Active, Not in Use, EULA not accepted
          License Count: Non-Counted
Index 3   Feature: internal_service
          Period left: 0 seconds

Output for show ip route:

#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override

Gateway of last resort is not set

switch#

[Mark Malone]

your on full license and routing is enabled as per your output

both interfaces are fully up and you still cant ping between them ?  no spanning-tree issues in logs for those vlans ?

never seen this before as these pings are on same data plane in the switch , these switches are known for having a few buggy versions of ios-xe but the basics usually all work , do you see any packets being dropped in the vlan  interface when you check them ?

if everything looks fine interfaces are up nothing irregular in the logs I would change the ios-xe verion to an MD release or a safe harbour release try one if them instead

[Mark Malone · Accepted solution]

im actually running one of these images on one of my 45s at access layer , the routing command is hidden

im on entservices as well but not seeing the same issues

#sh run all | i routing
ip routing protocol purge interface
ip routing
ip multicast-routing

#sh ver | i 8
Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch  Software (cat4500es8-UNIVERSALK9-M), Version 03.08.01.E RELEASE SOFTWARE (fc2)

could you post the show interface vlan x for each vlan

show spanning-tree vlan x

sh vlan id x

sh run int vlan x

[Moses Kihoro]

Hi Mr. Mark,

Thanks a lot for your support I realized that I had to connect the 4500x switch to an access switch so that it can bring the svi online.

Tested and everything worked ok.

[Mark Malone]

ah very good least its working now thanks for the update