Inter VLAN Routing Non-Operational?

NicP270591 · ‎01-12-2013

Hi all,

I have set up a 2811 with seperate VLANs for phones, and another for computers/printers. Fa0/0 is trunked to a 3560 switch, which has all end devices plugged in. I have enabled the IP Routing commands on both devices, and from advice turned off proxy-arp on the VLANs on the router (unsure if this is causing the issue). The setup is as follows

Computer VLAN = 192.168.20.0

Phone VLAN = 192.168.50.0

Both on the same subnet, along with a router loopback address in the same subnet, at 192.168.10.1.

I am having an issue understanding why, but if I try to ping a phone from a PC it times out. Or if I try to type the phone's IP into an internet browser to get the phone's GUI on screen, it fails. This should not be happening as IP routing has been enabled on both, and everything is in the same subnet, correct? PC's can ping other PC's and network printing works fine. Phones register and operate fine, but the two VLAN's will not interoute.

Furthermore if I try and ping the router's loopback from the switch, it fails. But the trunk is up and operational because DHCP and devices work within their own VLAN. If I try to ping end devices from the switch, it returns 100%. There seems to be an issue with the router looping the different networks together.

What am I missing here?

Nic.

Raju Sekharan · ‎01-12-2013

Hi

You have mentiond that your PC and Phone VLAN are using same subnet.

If you need to have routing, both needs to be in different subnets

Thanks

Raju

kcnajaf · ‎01-12-2013

HiNic,

Could you confirm what are the ip address you are using on phone and PC? Also the switch port configuration for these two devices would be ideal to see.

Regards

Najaf

Please rate when applicable or helpful !!!

NicP270591 · ‎01-12-2013

Hi Raju,

The computer currently has an IP of 192.102.20.2. The Phone beside me is currently on 192.102.50.4. No problems there.

Config requested as per below:

!

no aaa new-model

vtp domain aume-campus

vtp mode transparent

ip subnet-zero

ip routing

!

no file verify auto

spanning-tree mode pvst

spanning-tree extend system-id

!

vlan internal allocation policy ascending

!

vlan 20

name VLAN-20-LAN

!

vlan 50

name VLAN-50-VOICE

!

interface FastEthernet0/1

switchport access vlan 20

switchport mode access

switchport voice vlan 50

spanning-tree portfast

(Port with BOTH phone and PC)

!

interface FastEthernet0/8

switchport access vlan 20

switchport mode access

(Port with a PC only)

!

interface FastEthernet0/48

switchport trunk encapsulation dot1q

switchport trunk native vlan 12

switchport trunk allowed vlan 12,20-22,30,40,41,50,51,60,99

switchport mode trunk

(Trunk to 2811 FE0/0)

!

interface Vlan20

ip address 192.102.20.20 255.255.255.192

!

interface Vlan50

ip address 192.102.50.50 255.255.255.192

!

(Tried these vlan IP's just to make sure)

!

ip classless

ip http server

ip http secure-server

!

control-plane

!

line con 0

!

end

Praveen AR · ‎01-12-2013

Hi Nic,

Switch configuration seemsto be ok,postr routerconfiguration.

Jeff Van Houten · ‎01-13-2013

On the switch config there are a lot of Vlans configured on the trunk. Are there subnets associated with those? You are showing pieces of code for the devices so its a little hard to tell. Is it possible that one of those other vlans/subnets has an address overlap with your phone vlan?

Sent from Cisco Technical Support iPad App

Praveen AR · ‎01-12-2013

Hi Nic,

Could you post router configuration ,router on stick configuration.

Regards

Praveen

NicP270591 · ‎01-12-2013

Hi Praveen,

Please see below. Also, note switch config above if that helps.

no ip dhcp use vrf connected

ip dhcp excluded-address 192.102.50.50 192.102.50.55

ip dhcp excluded-address 192.102.20.20 192.102.20.40

ip dhcp excluded-address 192.102.99.1 192.102.99.10

ip dhcp excluded-address 192.102.10.1 192.102.10.10

!

ip routing

!

ip dhcp pool VLAN-20-LAN

network 192.102.20.0 255.255.255.192

default-router 192.102.20.1

lease 7

!

ip dhcp pool VLAN-50-VOICE

network 192.102.50.0 255.255.255.192

default-router 192.102.50.1

option 150 ip 192.102.10.1

lease 7

!

interface Loopback0

ip address 192.102.10.1 255.255.255.192

!

interface FastEthernet0/0

no ip address

no ip redirects

ip flow ingress

duplex full

speed 100

no cdp enable

!

interface FastEthernet0/0.20

description VLAN-20-LAN

encapsulation dot1Q 20

ip address 192.102.20.1 255.255.255.192

no ip redirects

no ip proxy-arp

ip flow ingress

!

interface FastEthernet0/0.50

description VLAN-50-VOICE

encapsulation dot1Q 50

ip address 192.102.50.1 255.255.255.192

no ip redirects

no ip proxy-arp

ip flow ingress

!

interface FastEthernet0/0.50

description VLAN-50-VOICE

encapsulation dot1Q 50

ip address 192.102.50.1 255.255.255.192

no ip redirects

no ip proxy-arp

ip flow ingress

!

ip forward-protocol nd

ip http server

ip http authentication local

ip http secure-server

!

logging esm config

no cdp run

!

line con0

!

end

Praveen AR · ‎01-12-2013

Hi Nic,

Problem i found in your configuration is that you have given native vlan as 12 in your switch configuration and no router configuration for native vlan.Could you plese add one more sub interface as below

interface FastEthernet0/0.12

encapsulation dot1q 12 native

Ip addres .....(give any ip address in your native vlan range)

or

remove native vlan 12 from switch means native vlan 1 by default.

and create below subinterface in router

interface FastEthernet0/0.1

encapsulation dot1q 1 native

Ip addres .....(give any ip address in your native vlan 1 range)

Hope it should work

Regards

Praveen

Praveen AR · ‎01-13-2013

Hi Nic,

Please let me know if it helps to solve your problem

Regards

Praveen

NicP270591 · ‎01-13-2013

Hi Praveen,

Thank you for pointing that out! It has, however not solved the problem, I added VLAN 12 native to the router config but cannot ping my phone from a PC, etc. Any ideas?

Nic.

Praveen AR · ‎01-13-2013

Hi Nic,

No worries , we can solve it.

I want you to do some testing from your side.

create interface vlan 12 ( for native vlan) on switch.

give ip address.

Afterwards from switch

Ping 192.102.20.1

ping 192.102.50.1

and

ping new ip you gave for native vlan sub interface.

If ping results are fine, no issues with trunk.

Please do ping's and let me know

Regards

Praveen

Praveen AR · ‎01-13-2013

Hi Nic,

Have you created vlan 12 on switch ,I think it is missing in your configuration.

Regards

Praveen

NicP270591 · ‎01-13-2013

Hi Praveen,

I have completed the above and pinged from the switch. Pings to the 20.1, 50.1 and now the 12.1 network are successful.

I still cannot get to the IP Phone GUI from a net browser, or ping anything from the PC if it is not on the 20 network.

Nic.

Praveen AR · ‎01-13-2013

Hi Nic

Now you need to test same from any PC.

Ping 192.102.20.1

192.102.50.1

192.102.12.1

If these work, try ping any of the phone ip

I think you are running CME,you can get ip of phones from cme.

Try ping phone ip once you tested above from pc.

Let me know results

Try shut no shut ethernet router inferace.

Please paste your updated router configuration