cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3380
Views
0
Helpful
3
Replies

2960x inter vlan routing

Nimajneb
Level 1
Level 1

I have 2960x switch that I have three vlans on vlan5 vlan10 vlan25. I can ping the ip address of the vlan but can not ping from devices to device on different vlan. On vlan5 I have a linux server. On vlan10 I have a pc, and on vlan25 I have a pc and a plc. I have very little experience with configuring switches, and this is in a testing environment. Below is the config, ip routing and ip interface, also each devices config.

Any help with this is appreciated.

 

PC1

ip address 5.1.10.15

subnet 255.255.255.0

gateway 5.1.10.1

 

PC2

ip address 5.1.25.30

subnet 255.255.255.0

gateway 5.1.25.1

 

Linux server

ip address 5.1.5.10

subnet 255.255.255.0

gateway 5.1.5.1

 

PLC

ip address 5.1.25.20

subnet 255.255.255.0

gateway 5.1.25.1

 

CONFIG

Switch#show running-config
Building configuration...

Current configuration : 2131 bytes
!
! Last configuration change at 10:48:42 UTC Thu Aug 20 2020
!
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$t0E4$cc6ByNPn5dRiNDXIHwvIi0
!
no aaa new-model
clock timezone UTC -5 0
clock summer-time UTC recurring
switch 1 provision ws-c2960x-24ps-l
ip routing
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
no ip address
no ip route-cache
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
switchport access vlan 5
switchport mode access
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
switchport access vlan 10
switchport mode access
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
switchport access vlan 25
switchport mode access
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/0/25
switchport access vlan 25
switchport mode access
!
interface GigabitEthernet1/0/26
!
interface GigabitEthernet1/0/27
!
interface GigabitEthernet1/0/28
!
interface Vlan1
ip address 5.1.1.2 255.255.255.0
!
interface Vlan5
ip address 5.1.5.1 255.255.255.0
!
interface Vlan10
ip address 5.1.10.1 255.255.255.0
!
interface Vlan25
ip address 5.1.25.1 255.255.255.0
!
ip default-gateway 5.1.1.1
ip http server
ip http secure-server
!
!
!
no vstack
!
line con 0
line vty 0 4
login
line vty 5 15
login
!
end

 

IP ROUTE

Switch#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override

Gateway of last resort is not set

5.0.0.0/8 is variably subnetted, 8 subnets, 2 masks
C 5.1.1.0/24 is directly connected, Vlan1
L 5.1.1.2/32 is directly connected, Vlan1
C 5.1.5.0/24 is directly connected, Vlan5
L 5.1.5.1/32 is directly connected, Vlan5
C 5.1.10.0/24 is directly connected, Vlan10
L 5.1.10.1/32 is directly connected, Vlan10
C 5.1.25.0/24 is directly connected, Vlan25
L 5.1.25.1/32 is directly connected, Vlan25

 


IP INTERFACE

Switch#show ip interface
Vlan1 is up, line protocol is up
Internet address is 5.1.1.2/24
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is enabled
Local Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP Flow switching is disabled
IP CEF switching is enabled
IP CEF switching turbo vector
IP Null turbo vector
IP multicast fast switching is disabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast, CEF
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Probe proxy name replies are disabled
Policy routing is disabled
Network address translation is disabled
BGP Policy Mapping is disabled
Input features: MCI Check
Output features: Input interface drop, Check hwidb
Vlan5 is up, line protocol is up
Internet address is 5.1.5.1/24
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is enabled
Local Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP Flow switching is disabled
IP CEF switching is enabled
IP CEF switching turbo vector
IP Null turbo vector
IP multicast fast switching is disabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast, CEF
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Probe proxy name replies are disabled
Policy routing is disabled
Network address translation is disabled
BGP Policy Mapping is disabled
Input features: MCI Check
Output features: Input interface drop, Check hwidb
Vlan10 is up, line protocol is up
Internet address is 5.1.10.1/24
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is enabled
Local Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP Flow switching is disabled
IP CEF switching is enabled
IP CEF switching turbo vector
IP Null turbo vector
IP multicast fast switching is disabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast, CEF
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Probe proxy name replies are disabled
Policy routing is disabled
Network address translation is disabled
BGP Policy Mapping is disabled
Input features: MCI Check
Output features: Input interface drop, Check hwidb
Vlan25 is up, line protocol is up
Internet address is 5.1.25.1/24
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is enabled
Local Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP Flow switching is disabled
IP CEF switching is enabled
IP CEF switching turbo vector
IP Null turbo vector
IP multicast fast switching is disabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast, CEF
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Probe proxy name replies are disabled
Policy routing is disabled
Network address translation is disabled
BGP Policy Mapping is disabled
Input features: MCI Check
Output features: Input interface drop, Check hwidb
FastEthernet0 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet1/0/1 is up, line protocol is up
Inbound access list is not set
GigabitEthernet1/0/2 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/3 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/4 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/5 is up, line protocol is up
Inbound access list is not set
GigabitEthernet1/0/6 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/7 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/8 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/9 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/10 is up, line protocol is up
Inbound access list is not set
GigabitEthernet1/0/11 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/12 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/13 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/14 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/15 is up, line protocol is up
Inbound access list is not set
GigabitEthernet1/0/16 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/17 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/18 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/19 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/20 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/21 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/22 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/23 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/24 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/25 is up, line protocol is up
Inbound access list is not set
GigabitEthernet1/0/26 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/27 is down, line protocol is down
Inbound access list is not set
GigabitEthernet1/0/28 is down, line protocol is down
Inbound access list is not set

 

 

 

 

 

.

1 Accepted Solution

Accepted Solutions

Martin L
VIP
VIP

 

switch config looks good;  I see all interface vlan x are up up , check it again with show ip int brief;  

also check if your vlans are in vlan database with command show vlan brief - they should be.  

otherwise, something on end device is preventing communications. check firewall.

 

Regards, ML
**Please Rate All Helpful Responses **

View solution in original post

3 Replies 3

Martin L
VIP
VIP

 

switch config looks good;  I see all interface vlan x are up up , check it again with show ip int brief;  

also check if your vlans are in vlan database with command show vlan brief - they should be.  

otherwise, something on end device is preventing communications. check firewall.

 

Regards, ML
**Please Rate All Helpful Responses **

It was firewalls blocking on end devices. Thank you for the help!

Francesco Molino
VIP Alumni
VIP Alumni
Can you do a show vlan and validate all your vlans are there, normally they are otherwise the output would be different.
What switch model and IOS are you running?

From pc in vlan 5:
- can you ping IP vlan 5 on switch?
- can you ping IP vlan 10 on switch?
- You can not ping endpoint on vlan 10, is that correct?

From the switch, can you run these tests and let us know the result:
- ping 5.1.5.10
- ping 5.1.10.15
- ping 5.1.5.10 so vlan 10
- ping 5.1.10.15 so vl 5


Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question
Review Cisco Networking for a $25 gift card