cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2030
Views
0
Helpful
2
Replies

cannot access to managment vlan1 on cisco catalyst 3560

goran ljubic
Level 1
Level 1

i have l3 switch the cisco catalyst 3560g which has name "Cisco 3560g", like picture attached. i tryed that use vlan 1 on them for management of this switch from workstations 'dri-ns' and 'dri-pc' but when i tryed that teleneting on them i cant from both workstations. configuration of this switch is

Building configuration...

Current configuration : 1762 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname ns
!
!
!
!
!
!
!
ip routing
!
!
!
!
username driadmin privilege 15 password 0 Test123!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet0/1
 switchport access vlan 11
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
 switchport access vlan 100
!
interface GigabitEthernet0/1
 spanning-tree portfast
!
interface GigabitEthernet0/2
!
interface Vlan1
 ip address 192.168.151.11 255.255.255.0
 ip access-group management in
!
interface Vlan11
 ip address 192.168.11.1 255.255.255.0
 ip helper-address 192.168.99.45
 ip access-group novisad in
!
interface Vlan100
 ip address 192.168.1.1 255.255.255.0
!
router rip
!
ip default-gateway 192.168.151.1
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.254 
!
ip flow-export version 9
!
!
ip access-list extended novisad
 permit ip any any
ip access-list extended management
 permit ip any any
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login local
 transport input telnet
line vty 5 15
 login local
 transport input telnet
!
!
!
end

 

2 Replies 2

LaserNinja
Level 1
Level 1
You seem to have two interfaces as switchports:
FastEthernet0/24 to vlan 100
FastEthernet0/1 to vlan 11
If the two connected interfaces in the picture are those ones, then they don't have access to vlan1 because they are also in a different subnet and they explicitly can access only vlan11 and vlan100.
vlan1 is the 192.168.151.0
vlan100 is the 192.168.1.0
and vlan11 is the 192.168.11.0
So, you either need to create a trunk interface or just add the pc to the vlan subnet you neet to manage.
I hope this helps.

Hello,

 

if this is a Packet Tracer project, post the (zipped) .pkt file...

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: