cannot access to managment vlan1 on cisco catalyst 3560

goran ljubic · ‎02-21-2020

i have l3 switch the cisco catalyst 3560g which has name "Cisco 3560g", like picture attached. i tryed that use vlan 1 on them for management of this switch from workstations 'dri-ns' and 'dri-pc' but when i tryed that teleneting on them i cant from both workstations. configuration of this switch is

Building configuration...

Current configuration : 1762 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname ns
!
!
!
!
!
!
!
ip routing
!
!
!
!
username driadmin privilege 15 password 0 Test123!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet0/1
 switchport access vlan 11
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
 switchport access vlan 100
!
interface GigabitEthernet0/1
 spanning-tree portfast
!
interface GigabitEthernet0/2
!
interface Vlan1
 ip address 192.168.151.11 255.255.255.0
 ip access-group management in
!
interface Vlan11
 ip address 192.168.11.1 255.255.255.0
 ip helper-address 192.168.99.45
 ip access-group novisad in
!
interface Vlan100
 ip address 192.168.1.1 255.255.255.0
!
router rip
!
ip default-gateway 192.168.151.1
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.254 
!
ip flow-export version 9
!
!
ip access-list extended novisad
 permit ip any any
ip access-list extended management
 permit ip any any
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login local
 transport input telnet
line vty 5 15
 login local
 transport input telnet
!
!
!
end

LaserNinja · ‎03-13-2020

You seem to have two interfaces as switchports:
FastEthernet0/24 to vlan 100
FastEthernet0/1 to vlan 11
If the two connected interfaces in the picture are those ones, then they don't have access to vlan1 because they are also in a different subnet and they explicitly can access only vlan11 and vlan100.
vlan1 is the 192.168.151.0
vlan100 is the 192.168.1.0
and vlan11 is the 192.168.11.0
So, you either need to create a trunk interface or just add the pc to the vlan subnet you neet to manage.
I hope this helps.

Georg Pauwen · ‎03-13-2020

Hello,

if this is a Packet Tracer project, post the (zipped) .pkt file...