04-16-2009 09:55 AM - edited 03-06-2019 05:13 AM
ok, I may be missing something simple, but I have 2 3550's no ip routes, no default gateway set, no dns servers set, yet I can ping outside addresses, traceroute to them and resolve names miraculously, any ideas where these default routes might be coming from
!
interface Vlan30
ip address 10.20.30.21 255.255.255.0
!
interface Vlan39
ip address 10.20.39.12 255.255.255.0
!
ip classless
ip http server
!
!
control-plane
!
!
line con 0
line vty 0 4
password 7 070A20581D0C1C09
login
line vty 5 15
password 7 02050D480809
no login
!
end
ussw01#sho ip route
Default gateway is not set
Host Gateway Last Use Total Uses Interface
ICMP redirect cache is empty
ussw01#
04-16-2009 10:00 AM
MIKE,
I just want to know about the traceroute output to outside addresses you mentioned.
Toshi
04-16-2009 10:04 AM
Yes, lets see the PINGs and TRACES. Thanks.
And stop following me, Toshi!
04-16-2009 10:06 AM
ussw01#tracerout 4.2.2.1
Type escape sequence to abort.
Tracing the route to vnsc-pri.sys.gtei.net (4.2.2.1)
1 10.20.30.2 0 msec 0 msec 0 msec
2 10.125.48.1 33 msec 33 msec 17 msec
3 653230hfc242.tampabay.res.rr.com (65.32.30.242) 25 msec 26 msec 50 msec
4 ge1-2-0.tampfledc-rtr3.tampflrdc.rr.com (65.32.13.29) 17 msec 17 msec 50 mse
c
5 te-3-1.car2.Tampa1.Level3.net (4.79.146.1) 143 msec 92 msec 51 msec
6 vnsc-pri.sys.gtei.net (4.2.2.1) 58 msec 42 msec 34 msec
ussw01#
04-16-2009 10:13 AM
My guess is that this device is broadcasting an ARP request for a default gateway when you run the trace. Since it is in the same vlan as the next hop, 10.20.30.2, the next hop receives the request and responds, since it has proxy-arp enabled.
This device forwards to the next hop, the next hop routes the packet to its next hop - and so on, and then, on the return trip, the next hop does a L2 forwarding to this device, since they are on the same vlan.
This is my guess...
Victor
04-16-2009 10:25 AM
heres my problem with that, since 4.2.2.1 is on a differnet subnet, he doesn't arp for 4.2.2.1, he should arp for 10.20.30.2, but how does he know that 10.20.30.2 is his default gateway, proxy arp is usually when you have varied subnet mask and the host arps and the router forwards the arp request, in this case i don't think an arp request for 4.2.2.1 would be answered by anyone even if it was proxied.
04-16-2009 10:36 AM
Then you have two choices:
1.) Turn on some debugging and see what the switch is doing when you execute a trace.
2.) Call a priest to perform an Exorcism on your switch because it may be possessed by a router demon. :-)
HTH
Victor
04-16-2009 10:34 AM
Mike,
I'm a bit crazy right now.(grin) Is this lab environment? Would you please do "ping 4.2.2.1" and "debug ip packet detail"?
I just want to see which source ip address it is using. If it is something like 10.20.30.X. It should not do ARP for 4.2.2.1. I would see "unroutable" in debug.
Toshi
04-16-2009 10:38 AM
its not a lab environment, and you are correct it shouldn't arp for 4.2.2.1, it should arp for 10.20.30.2 as that is the correct default gateway and it is working the problem being is how is it finding out what that default gateway is as it isn't configured, and how is it resolving names in the traceroute as there are no dns servers configured. My problem isnt that something isn't working and should be, it is that it is working and it shouldn't be.
04-16-2009 10:38 AM
Toshi:
"I'm a bit crazy right now."
Just "now"????
Or always?? :-)
04-16-2009 10:43 AM
actually i have 2 switches, 10.20.30.21 and .22, correct default gateway is .1 using glbp, and it is sending to .2 and .3. they are both working in this manner, there are no default routes, no ip routes, no dns servers, yet I can ping remotely, reach them from remote subnets and ping by name. Go figure.
ussw01#ping www.cisco.com
Translating "www.cisco.com"...domain server (255.255.255.255) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 198.133.219.25, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
no where in the config is a dns server configured, so how is it resolving?
04-16-2009 10:48 AM
Mike,
I thought that would be an "ip domain lookup " command is on. It's using 255.255.255.255.
However I'm waiting for "ping 4.2.2.1" and "debug ip packet detail".
Toshi
04-16-2009 10:51 AM
cant do that in middle of day, but it should show me sending the packet to the virtual mac of my glbp routers, and if i do a sho ip arp that is what it has for all external addresses
Internet 4.2.2.1 54 0007.b400.0101 ARPA Vlan30
Internet 10.20.34.10 229 0007.b400.0101 ARPA Vlan30
Internet 10.91.30.7 84 0007.b400.0101 ARPA Vlan30
Internet 10.20.36.186 25 0007.b400.0101 ARPA Vlan30
Internet 198.133.219.25 8 0007.b400.0101 ARPA Vlan30
Internet 10.20.36.184 90 0007.b400.0101 ARPA Vlan30
Internet 10.20.36.183 172 0007.b400.0101 ARPA Vlan30
Internet 10.20.36.168 156 0007.b400.0101 ARPA Vlan30
04-16-2009 11:07 AM
Mike,
Why it sent to one of gblp routers. How can it request that mac-address,0007.b400.0101 if it didn't configure the default-gateway. Properly be 10.20.30.1.
I will open TAC case for Victor.
Victor, Are you there? (grin)
Toshi
04-16-2009 11:08 AM
i just opened one.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide