cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5390
Views
5
Helpful
20
Replies
Highlighted
Beginner

3560G InterVlan routing is not working!

Dear All,

I have cisco 3560G-TS-S with IOS 12.2(35)SE5 IPbase software. I have vlan 1 and vlan 2.

Each Vlan has one pc attached to it. Each pc can ping its default vlan ip address and can ping the router behind the swtich.

The problem is pc 1 can not ping pc 2 even though i typed "Ip routing" in the global config mode to enable interVlan routing.

Is it because my IOS is old and does't support intervlan routing?

Thanks,

Kevin

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Hi,

Simply create a default route on the switch in order to point to internet router, such as ip route 0.0.0.0 0.0.0.0 192.168.2.1.  This will ensure any traffic that neither destined for 192.168.2.0/24 or 192.168.4.0/24 will be forwarded to internet router, and from their out to the internet.

Regard

Allan.

View solution in original post

20 REPLIES 20
Highlighted
Hall of Fame Guru

aboodnet650 wrote:

Dear All,

I have cisco 3560G-TS-S with IOS 12.2(35)SE5 IPbase software. I have vlan 1 and vlan 2.

Each Vlan has one pc attached to it. Each pc can ping its default vlan ip address and can ping the router behind the swtich.

The problem is pc 1 can not ping pc 2 even though i typed "Ip routing" in the global config mode to enable interVlan routing.

Is it because my IOS is old and does't support intervlan routing?

Thanks,

Kevin

Kevin

Doesn't matter which IOS you use, the 3560 is a L3 switch so it will route between vlans.

Have you checked there are no firewalls on the PCs blocking incoming ICMP. Note it might not just be a firewall, antivirus software can do this as well.

Jon

Cisco are currently donating money to the Haiti earthquake appeal for every rating so please consider rating all helpful posts.

Highlighted
Contributor

When you say "the router behind the switch", does that mean the router is doing the routing?  Or do you intend to use the 3560 for routing?

You can try these commands on the switch to verify:

# show ip int brief

# show ip route

Highlighted

johnnylingo,

The router behind the switch is for accessing the internet only nothing more and it has 192.168.2.1 as its IP address. I want the Switch to perform the routing between vlans.

this is what you asked for?

Interface              IP-Address      OK? Method Status                Protocol
Vlan1                  192.168.2.5     YES NVRAM  up                    up
Vlan2                  192.168.4.1     YES manual up                    up
GigabitEthernet0/1     unassigned      YES unset  up                    up
GigabitEthernet0/2     unassigned      YES unset  up                    up
GigabitEthernet0/3     unassigned      YES unset  up                    up
GigabitEthernet0/4     unassigned      YES unset  up                    up
GigabitEthernet0/5     unassigned      YES unset  up                    up
GigabitEthernet0/6     unassigned      YES unset  up                    up
GigabitEthernet0/7     unassigned      YES unset  up                    up
GigabitEthernet0/8     unassigned      YES unset  down                  down
GigabitEthernet0/9     unassigned      YES unset  down                  down
GigabitEthernet0/10    unassigned      YES unset  down                  down
GigabitEthernet0/11    unassigned      YES unset  down                  down
GigabitEthernet0/12    unassigned      YES unset  down                  down
GigabitEthernet0/13    unassigned      YES unset  down                  down
GigabitEthernet0/14    unassigned      YES unset  down                  down
GigabitEthernet0/15    unassigned      YES unset  down                  down
GigabitEthernet0/16    unassigned      YES unset  down                  down
GigabitEthernet0/17    unassigned      YES unset  down                  down
GigabitEthernet0/18    unassigned      YES unset  down                  down
GigabitEthernet0/19    unassigned      YES unset  down                  down
--More--

SW1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C    192.168.4.0/24 is directly connected, Vlan2
C    192.168.2.0/24 is directly connected, Vlan1

Highlighted

From the PC in vlan 1 can you ping the vlan 2 interface IP address ? If so it strongly suggests firewalling on the PCs.

Jon

Highlighted

no actually i can not ping another subnet even the interface of the vlan itself. I did trace route and this is what i got...

Here i am in host 2 (192.168.2.10) from vlan 2

C:\Windows\system32>tracert -d 192.168.4.1

Tracing route to 192.168.4.1 over a maximum of 30 hops

  1    <1 ms    <1 ms    <1 ms  192.168.2.1
  2    11 ms    11 ms    11 ms  62.215.127.254
  3    12 ms    11 ms    11 ms  62.215.2.14
  4    16 ms    11 ms    11 ms  62.215.2.90
  5    11 ms    11 ms    11 ms  62.215.2.62
6     *        *        *     Request timed out.
  7     *        *        *     Request timed out.
  8     *        *        *     Request timed out.
9     *        *        *     Request timed out.
10    *        *        *     Request timed out.

I think my linksys router which is behind the switch is causing the problem.

Highlighted

Kevin

Your ip address for vlan 1 on the switch is  192.168.2.5 but in your traceroute the first hop is 192.168.2.1 so the default-gateway on the  PC in vlan 1 is wrong, it should be set to 192.168.1.5.

What is 192.168.2.1 anyway ?

Jon


Cisco are currently donating money to the Haiti earthquake appeal for every rating so please consider rating all helpful posts.

Highlighted

192.168.2.1 is the IP address of my linksys router ( the router behind the switch )

Highlighted

aboodnet650 wrote:

192.168.2.1 is the IP address of my linksys router ( the router behind the switch )


That's why it's not working. Change default-gayeway on PC to 192.168.2.5.

Jon

Highlighted

I just did that and everything works fine .. i can ping anything i want in my network but when i changed the vlan1 default ip address from 192.168.2.1 to 192.168.2.5 i lost my internet access in vlan 1. why is that?

Highlighted

Hi,

From the trace route it appears that the first hop is 192.168.2.1, this suggest that your default-gateway on the pc is the actual address of the internet router and not the vlan interface.  The default-gateway of the pc on subnet 192.168.2.0/24 should the vlan interface address 192.168.2.5, trying changing the address and then try pinging 192.168.4.1.

Regards

Allan.

Highlighted

I did that and if i changed it to 192.168.2.5 then i won't be able to access the internet.

Highlighted

Hi,

Simply create a default route on the switch in order to point to internet router, such as ip route 0.0.0.0 0.0.0.0 192.168.2.1.  This will ensure any traffic that neither destined for 192.168.2.0/24 or 192.168.4.0/24 will be forwarded to internet router, and from their out to the internet.

Regard

Allan.

View solution in original post

Highlighted

i tried to do that before. i typed ip route 0.0.0.0 0.0.0.0 192.168.2 with no luck..

It does show in running config but it doesn't show in "show ip route"

should i configure the port connecting to my linksys router as a routed port instead of SVI port?

Highlighted

aboodnet650 wrote:

i tried to do that before. i typed ip route 0.0.0.0 0.0.0.0 192.168.2 with no luck..

It does show in running config but it doesn't show in "show ip route"

should i configure the port connecting to my linksys router as a routed port instead of SVI port?

It doesn't need to be a routed port -

so you add "ip route 0.0.0.0 0.0.0.0 192.168.2.1" and it doesn't appear in the routing table ?

Can you post the config of the 3560 and a "sh ip route" from the same device after adding the default-route.

Jon

Content for Community-Ad