SG550XG Layer (3) & 2960x (Layer2) Vlan/Switch communication

[Tim Lehmann]

Hello
i am a little bit rusty/newbie in Cisco Networking. Maybe some of u guys could help me out?

i got some problem to setup our new network enviroment with a SG550XG 24F (Layer 3 ) and several 2960X (Layer 2) Switch.
We have several VLANs but somehow i can't communicate btw the Switches (Ping btw Switchen & VLANs).
i attached the config so you could have  look what is done so far.

ty in advance

[nayef salem]

Hi

i had a quick look at the config

first of all 

- are all these VLANs created in layer 3 switch exist in Layer 2 switch either by vtp or manually.

-  i notices layer 2 switch has ip routing  command activated , you need to remove it 

no ip routing  

- in layer 2 switch , which port is the uplink and also it has to be made into trunk as a first step for pings to be success 

provide in layer 2 switches

show vlan 

show interface trunk

sho vtp status

[Tim Lehmann]

Hi nayef salem

Thank your for ur answer.

yeah i did creat all the vlan on both switches.

and i made ur suggested change with the no ip routing and attached the results from

- show vlan

- show interface trunkk

-show vtp

ty in advance

[nayef salem]

Hi Tim

can you do sho cdp neighbor

show running interface g1/0/25 of layer 2 and also same for  the uplink  interface switch L3

which port in L3 switch is the uplink between L2 and L3 switch?

also i notice in layer 2 switch native vlan is 1 and  10.0.0.0/24 and it's removed from the trunk of all interfaces in L3 switch?! when you connect between these switches , what is the color of the uplink , amber or green or blinking amber ?

[Tim Lehmann]

okay i reset the SG550XG and  made the configuration new from scratch.. it works so far pretty well! but there are still some issues..

- Layer 3 Switch can ping everything in VLAN1& 60

- Host (Port 18) on Layer 3 can ping everything in VLAN1 & 60

- Layer 2 Switch can ping everything in VLAN1 but can't ping host on Layer 3

- Host on (Port 2) can ping everything in VLAN1 & 60

any suggestions? i tought i could be FW reason but i can ping from l2 host to l3 host..

i attached the new config files

ty in advance

[nayef salem]

my dear 

i don't know what is your purpose exactly as things are mixing up but you are almost there 

when you say 

- Layer 3 Switch can ping everything in VLAN1& 60

does it mean in the same switch or even hosts connected to layer2?

- Host (Port 18) on Layer 3 can ping everything in VLAN1 & 60

same question above

- Layer 2 Switch can ping everything in VLAN1 but can't ping host on Layer 3

same question above + it can't ping hosts in layer 3 switch because you are not allowing vlan 1 or 60 in layer 3 switch 

- Host on (Port 2) can ping everything in VLAN1 & 60

same question (does it mean in the same switch or even hosts connected to layer2?)

one question keeps hitting me , in the uplink interface btw the 2 switch (L3,L2) , why do you allow it vlan 1,60(L2 sw) and remove it in L3 sw ??!!!

First things First

you didn't send show cdp neighbor

1- what are the ports connecting layer 3 to layer 2 switch

if am correct it's like this

                  layer 3 sw                                     layer 2 switch

                 1/0/12                  ---->                       1/0/25

then under layer 3 switch inter the following commands

interface TengigabitEthernet1/0/12
 switchport mode trunk 
 switchport trunk allowed vlan add 1-83

under layer 2 switch inter the following command

interface GigabitEthernet1/0/25
 switchport trunk allowed vlan 1-83
 switchport mode trunk
 switchport nonegotiate

2- remove 

ip route 10.0.60.0 /24 10.0.60.65 metric 1

from L3 switch as this subnet is directly connect SVI vlan to the switch 

let me know

also since you resetted the SG550 , make sure it's in L3 mode in GUI under administration so it will route between the vlans

cheers