Issue Inter-Vlan routing ping timeout

WanisaCh · ‎05-01-2023

Hello

I hope can you help me. i can ping server to client but i can not ping client to server and Gateway on router.

server vlan827, client vlan6, router configuration inter-vlan routing.

info :

Cisco_Router#show ip int bri
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0/0 10.88.0.2 YES TFTP up up
GigabitEthernet0/0/1 unassigned YES DHCP down down
GigabitEthernet0/1/0 unassigned YES unset up up
GigabitEthernet0/1/1 unassigned YES unset up up
GigabitEthernet0/1/2 unassigned YES unset down down
GigabitEthernet0/1/3 unassigned YES unset down down
Vlan1 192.168.1.251 YES NVRAM up up
Vlan4 10.10.101.1 YES NVRAM up up
Vlan5 10.10.102.1 YES NVRAM up up
Vlan6 10.10.111.1 YES NVRAM up up
Vlan7 10.10.121.1 YES NVRAM up up
Vlan8 10.10.122.1 YES NVRAM up up
Vlan9 10.10.112.1 YES NVRAM up up
Vlan827 172.26.228.222 YES manual up up

Cisco_Router#show vlan

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi0/1/2, Gi0/1/3
2 Com_and_solar active
4 PMU_BESS active
5 PMU_BPLC active
6 COGEN_MODBUS active
7 RTU_EV active
8 RTU_Demand active
9 BESS_MODBUS active
827 VLAN0827 active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
2 enet 100002 1500 - - - - - 0 0
4 enet 100004 1500 - - - - - 0 0
5 enet 100005 1500 - - - - - 0 0

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
6 enet 100006 1500 - - - - - 0 0
7 enet 100007 1500 - - - - - 0 0
8 enet 100008 1500 - - - - - 0 0
9 enet 100009 1500 - - - - - 0 0
827 enet 100827 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0

Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------

Cisco_Router#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, m - OMP
n - NAT, Ni - NAT inside, No - NAT outside, Nd - NAT DIA
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
H - NHRP, G - NHRP registered, g - NHRP registration summary
o - ODR, P - periodic downloaded static route, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
& - replicated local route overrides by connected

Gateway of last resort is 10.88.0.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 10.88.0.1
10.0.0.0/8 is variably subnetted, 22 subnets, 3 masks
C 10.10.101.0/24 is directly connected, Vlan4
L 10.10.101.1/32 is directly connected, Vlan4
C 10.10.102.0/24 is directly connected, Vlan5
L 10.10.102.1/32 is directly connected, Vlan5
C 10.10.111.0/24 is directly connected, Vlan6
L 10.10.111.1/32 is directly connected, Vlan6
C 10.10.112.0/24 is directly connected, Vlan9
L 10.10.112.1/32 is directly connected, Vlan9
C 10.10.121.0/24 is directly connected, Vlan7
L 10.10.121.1/32 is directly connected, Vlan7
C 10.10.122.0/24 is directly connected, Vlan8
L 10.10.122.1/32 is directly connected, Vlan8
C 10.88.0.0/30 is directly connected, GigabitEthernet0/0/0
L 10.88.0.2/32 is directly connected, GigabitEthernet0/0/0
172.26.0.0/16 is variably subnetted, 2 subnets, 2 masks
C 172.26.228.192/27 is directly connected, Vlan827
L 172.26.228.222/32 is directly connected, Vlan827
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Vlan1
L 192.168.1.251/32 is directly connected, Vlan1

M02@rt37 · ‎05-01-2023

Hello @WanisaCh,

No firewall or other security software that is blocking incoming traffic from the client VLAN ? Check the server configuration to ensure that there are no firewalls or other security software blocking traffic from the client VLAN.

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

WanisaCh · ‎05-02-2023

i'm sure there not security another.

Kanan Huseynli · ‎05-02-2023

Hi,

check for possible access-list under VLAN interface configuration of router.

Do ping from router to client and check arp entry (if ping fails).

Ensure client has proper default gateway configuration. Do ping from client and check arp entry (if ping fails). In general, ping to gateway should not fail, if you don't have access-list on router interface or incorrect client configuration.

Note: Do you have switches between client and router? If yes, check for possible intra-vlan filtering on switch which can be due to vlan-access map (VACL).

HTH,
Please rate and mark as an accepted solution if you have found any of the information provided useful.

MHM Cisco World · ‎05-02-2023

one way only
check the VLAN for Server and Host in SW

Flavio Miranda · ‎05-02-2023

Hi

Why did you create vlan on router?

You dont need vlan on router. Vlan you create on switch. If you need the router to route between vlan, do router on a stick and create subinterfaces on router with dot1q encapsulation as trunk.

Router is a layer3 device and should not be dealing with layer 2 ttaffic like this, thats why we have switches

Make sure the Server is properly configured with default gateway

WanisaCh · ‎05-04-2023

Hi Flavio

I edit config create sub-interfaces on router with dot1q encapsulation but problem is the same.

Info:

Cisco_Router#show ip interface bri
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0/0 10.88.0.2 YES TFTP up up
GigabitEthernet0/0/1 unassigned YES DHCP up up
GigabitEthernet0/0/1.4 10.10.101.1 YES manual up up
GigabitEthernet0/0/1.5 10.10.102.1 YES manual up up
GigabitEthernet0/0/1.6 10.10.111.1 YES manual up up
GigabitEthernet0/0/1.7 10.10.121.1 YES manual up up
GigabitEthernet0/0/1.8 10.10.122.1 YES manual up up
GigabitEthernet0/1/0 unassigned YES unset up up
GigabitEthernet0/1/1 unassigned YES unset up up
GigabitEthernet0/1/2 unassigned YES unset down down
GigabitEthernet0/1/3 unassigned YES unset down down
Vlan1 192.168.1.251 YES NVRAM up up
Vlan827 172.26.228.222 YES manual up up

Cisco_Router#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, m - OMP
n - NAT, Ni - NAT inside, No - NAT outside, Nd - NAT DIA
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
H - NHRP, G - NHRP registered, g - NHRP registration summary
o - ODR, P - periodic downloaded static route, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
& - replicated local route overrides by connected

Gateway of last resort is 10.88.0.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 10.88.0.1
10.0.0.0/8 is variably subnetted, 20 subnets, 3 masks
S 10.10.1.0/24 [1/0] via 172.26.228.193
S 10.10.2.0/24 [1/0] via 172.26.228.193
S 10.10.3.0/24 [1/0] via 172.26.228.193
S 10.10.4.0/24 [1/0] via 172.26.228.193
S 10.10.5.0/24 [1/0] via 172.26.228.193
S 10.10.6.0/24 [1/0] via 172.26.228.193
S 10.10.7.0/24 [1/0] via 172.26.228.193
S 10.10.8.0/24 [1/0] via 172.26.228.193
C 10.10.101.0/24 is directly connected, GigabitEthernet0/0/1.4
L 10.10.101.1/32 is directly connected, GigabitEthernet0/0/1.4
C 10.10.102.0/24 is directly connected, GigabitEthernet0/0/1.5
L 10.10.102.1/32 is directly connected, GigabitEthernet0/0/1.5
C 10.10.111.0/24 is directly connected, GigabitEthernet0/0/1.6
L 10.10.111.1/32 is directly connected, GigabitEthernet0/0/1.6
C 10.10.121.0/24 is directly connected, GigabitEthernet0/0/1.7
L 10.10.121.1/32 is directly connected, GigabitEthernet0/0/1.7
C 10.10.122.0/24 is directly connected, GigabitEthernet0/0/1.8
L 10.10.122.1/32 is directly connected, GigabitEthernet0/0/1.8
C 10.88.0.0/30 is directly connected, GigabitEthernet0/0/0
L 10.88.0.2/32 is directly connected, GigabitEthernet0/0/0
172.26.0.0/16 is variably subnetted, 2 subnets, 2 masks
C 172.26.228.192/27 is directly connected, Vlan827
L 172.26.228.222/32 is directly connected, Vlan827
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Vlan1
L 192.168.1.251/32 is directly connected, Vlan1

MHM Cisco World · ‎05-07-2023

hi friend I think this issue not solved yet ?
I want to understand case here
R-SW
there is four port in router one of then you config as trunk
the link between the SW and router is trunk allow all vlan (I assume that since the VLAN all UP)
NOW
are the SW also have SVI for these VLAN ??

WanisaCh · ‎05-10-2023

hi MHM Cisco World

Issue resolved. because i forgot disconnect wi-fi laptop.