Hey folks,
I'm attempting to set up a greenfield Catalyst 3750X core stack and am having a bit of trouble getting 2 devices on different VLANs to be able to talk to each other. I'm fairly new to doing this sort of config so I'm sure it's user error, but I've looked up and followed just about every guide I can find regarding setting up & configuring inter-VLAN routing and I don't see any obvious differences between my config and theirs. Can someone help me figure out what I'm doing wrong?
Here's what works currently:
My IP space for this project is 10.230.0.0/16. VLAN IDs correspond to 3rd octets and are all /24s
Take VLAN 121 for instance, my user data VLAN. I connect a device to a port assigned to VLAN 121, it gets a DHCP IP (10.230.121.3) with correct default gateway (10.230.121.1). It can ping the gateway and the interface IP of all other VLANs on the switch, i.e. 10.230.15.1, 10.230.32.1, 10.230.121.1 etc
If I plug another device (laptop) into the same VLAN (gets IP 10.230.121.2), the two devices can ping each other just fine.
If I plug that second device into a port with a different VLAN like VLAN 15, it gets an IP just fine and again can ping interface IP of all other VLANs but the two devices can't talk to each other.
Tried a couple ping tests from the switch itself to confirm no firewall funny business, same result
SCTS-CORE-STACK#debug ip icmp
ICMP packet debugging is on
SCTS-CORE-STACK#ping 10.230.121.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.230.121.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/16 ms
SCTS-CORE-STACK#ping 10.230.121.3 source vlan15
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.230.121.3, timeout is 2 seconds:
Packet sent with a source address of 10.230.15.1
.....
Success rate is 0 percent (0/5)
SCTS-CORE-STACK#
Here's my config. Only thing I've left out are irrelevant port configs and sensitive stuff.
version 12.2
no service pad
service timestamps debug datetime localtime
service timestamps log datetime
service password-encryption
!
[....]
!
no aaa new-model
clock timezone MST -8
clock summer-time DST recurring
switch 1 provision ws-c3750x-48p
switch 2 provision ws-c3750x-48p
system mtu routing 1500
ip routing
ip dhcp excluded-address 10.230.100.1 10.230.100.20
!
ip dhcp pool 8x8_Voice
network 10.230.100.0 255.255.255.0
default-router 10.230.100.1
dns-server 8.8.8.8 4.2.2.2
!
ip dhcp pool User-Data-Test
network 10.230.121.0 255.255.255.0
default-router 10.230.121.1
dns-server 8.8.8.8 4.2.2.2
domain-name ---
!
ip dhcp pool VMWare-Mgmt-Test
network 10.230.32.0 255.255.255.0
default-router 10.230.32.1
dns-server 8.8.8.8 4.2.2.2
domain-name ---
!
ip dhcp pool PD-Test
network 10.230.15.0 255.255.255.0
default-router 10.230.15.1
dns-server 8.8.8.8 4.2.2.2
domain-name ---
!
!
ip domain-name ---
ip name-server ---
vtp domain ---
vtp mode transparent
udld enable
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
spanning-tree vlan 1-2,15,30-32,100,121,144 priority 24576
!
!
!
!
vlan internal allocation policy ascending
!
vlan 2
name Network_Management
!
vlan 15
name PD-QA
!
vlan 20
name DMZ
!
vlan 30
name VMWare-DHCP
!
vlan 31
name VMWare-Static
!
vlan 32
name VMWare-Mgmt
!
vlan 40
name Camera
!
vlan 100
name 8x8-Voice
!
vlan 121
name User-Data
!
vlan 144
name Wireless-Data
!
vlan 990
name ISP
!
vlan 999
name FORTIGATE_DMZ
!
[....]
!
interface GigabitEthernet2/0/13
switchport access vlan 121
switchport mode access
!
interface GigabitEthernet2/0/14
switchport access vlan 15
switchport mode access
!
interface GigabitEthernet2/0/15
switchport access vlan 121
switchport mode access
!
[....]
!
interface Vlan1
ip address 10.230.1.1 255.255.255.0
!
interface Vlan2
description Network_Management
ip address 10.230.2.1 255.255.255.0
!
interface Vlan15
description PD-QA
ip address 10.230.16.1 255.255.255.0 secondary
ip address 10.230.17.1 255.255.255.0 secondary
ip address 10.230.15.1 255.255.255.0
!
interface Vlan20
description DMZ
no ip address
!
interface Vlan30
description VMWare-DHCP
ip address 10.230.30.1 255.255.255.0
!
interface Vlan31
description VMWare-Static
ip address 10.230.31.1 255.255.255.0
!
interface Vlan32
description VMWare-Mgmt
ip address 10.230.32.1 255.255.255.0
!
interface Vlan40
description Camera
ip address 10.230.40.1 255.255.255.0
!
interface Vlan100
description 8x8 Voice
ip address 10.230.100.1 255.255.255.0
!
interface Vlan121
description User-Data
ip address 10.230.121.1 255.255.255.0
!
interface Vlan144
description Wireless-Data
ip address 10.230.144.1 255.255.255.0
!
interface Vlan999
ip address 10.10.10.254 255.255.255.0
!
ip classless
no ip http server
no ip http secure-server
!
!
no vstack
[...]
