Configuring 2960 and 300 ES switches

[mpetrella]

I have a 2960S switch and nine (9) 300 switches. I have three VLANs configured on them, data, voice and management. Each 300 has unique data and ovice VLANs corresponding to their locations. All of the 300 switches connect to the 2960 in a hub and spoke network topology via 802.1q trunks. I can access devices between switches on the data and voice VLANs fine from any other switch. My issue is that from any 300 switch I can access the 2960 management VLAN interface without a problem, but I can not access the 300 switch management VLAN that I am connected to from the CLI. I do not use the GUI at all for management.

Am I missing something.

[Tom Watts]

Michael, another idea you may try to set the switchport to general and remove the ingress filter all together

switchport mode general

switchport general pvid 1

switchport general ingress-filter disable

switchport general allowed vlan add 1 untagged

switchport general allowed vlan add 10,11,100 tagged

If the forementioned config doesn't work, give this a try.

-Tom

[mpetrella66]

Tom,

We did not get to try your suggestion yesterday. In testeing we could not ping between VLAN interfaces on the 2960. We addesd VLAN 10 to an interface and connected a PC to it. We could ping the gateway, but not a PC on VLAN 100. While researching the issue we saw that we did not have any routed interfaces. We then vevrified that the lanbased-routing template was being used and the output is below. The 0 routed interfaces is a concern for us. Any ideas on what is missing?

We also saw that this seems to be a common issue, but it seems the answers are "get different switches." That is not an option with us.

Thanks,

Mike

2960-MDF-1#sho ver
Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version
12.2(55)SE5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Thu 09-Feb-12 19:22 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x01B00000

ROM: Bootstrap program is Alpha board boot loader
BOOTLDR: C2960S Boot Loader (C2960S-HBOOT-M) Version 12.2(55r)SE, RELEASE
SOFTWARE (fc1)


2960-MDF-1#sho sdm prefer
 The current template is "lanbase-routing" template.
 The selected template optimizes the resources in
 the switch to support this level of features for
 0 routed interfaces and 255 VLANs.

  number of unicast mac addresses:                  4K
  number of IPv4 IGMP groups + multicast routes:    0.25K
  number of IPv4 unicast routes:                    4.875k
    number of directly-connected IPv4 hosts:        4K
    number of indirect IPv4 routes:                 0.875k
  number of IPv6 multicast groups:                  0.25K
  number of directly-connected IPv6 addresses:      0.25K
  number of indirect IPv6 unicast routes:           0
  number of IPv4 policy based routing aces:         0
  number of IPv4/MAC qos aces:                      0.375k
  number of IPv4/MAC security aces:                 0.375k
  number of IPv6 policy based routing aces:         0
  number of IPv6 qos aces:                          0
  number of IPv6 security aces:                     0.125k

[Tom Watts]

Michael, first need to change the SDM template

SwitchA(config)#sdm prefer lanbase-routing

Changes to the running SDM preferences have been stored, but cannot take effect until the next reload.

Use 'show sdm prefer' to see what SDM preference is currently active.

SwitchA(config)

SwitchA#reload

System configuration has been modified. Save? [yes/no]: y

Proceed with reload? [confirm]

SwitchA#conf t

SwitchA(config)#ip routing

SwitchA(config)# interface vlan 1 ip address x.x.x.x /24

SwitchA(config)# interface vlan 10 ip address x.x.x.x /24

SwitchA(config)# interface vlan 11 ip address x.x.x.x /24

SwitchA(config)# interface vlan 100 ip address x.x.x.x /24

SwitchA(config)# do show ip route

-Tom

[mpetrella66]

Tom,

We cahnged the sdm template and in the output above it shows that the template is lanbase-routing, but no routed interfaces.

I am totally lost on this.

Thanks,

Mike

[Tom Watts]

michael, here is the documentation for it;

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_55_se/configuration/guide/swipstatrout.html

The trick is to enable the ip routing

config t

ip routing

-Tom

[mpetrella66]

Tom,

We had the VLAN interfaces configured before we changed the SDM template and did the "ip routing" command. Do you think it makes sense to remove the VLAN interfaces, reload the switch and re-configure the VLAN interfaces?

Thanks,

Mike

[Tom Watts]

Please post the following outputs

show sdm prefer

show ip interface [vlan id]

show ip route

Make sure there is an active connection on the routed interfaces (in other words, make sure there is a live link on each vlan interface to ensure there is a link connectivity to build the route table).

-Tom

[mpetrella66]

Tom,

Last night we tftp the config file to a pc, wipeed the config on the switch, reloaded it, tftp the config file back onto the switch and everything is fine. Not sure what happened when we started this, but that did the trick.

Thanks for all the help. I will post another topic if we have any more issues.

Mike.