3650 Can't route between VLANs

[gary.walvin11]

Hi,

We have a brand new 3650 license with IPBase with the following config. Put and laptop into VLAN 2 and another into VLAN 3 using their respective default gateways, disabled firewalls, etc but we can't ping between the VLANs. We've done everything the same was as we have on our 3560 but can't get it to work.

Any suggestions at all please?

Building configuration...

Current configuration : 4635 bytes
!
! Last configuration change at 09:30:26 UTC Mon Nov 23 2015
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname XXXXXXX
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
logging console emergencies
enable password admin
!
username xxxx privilege 15 password 0 xxxxx
username xxxx password 0 xxxxxx
no aaa new-model
switch 1 provision ws-c3650-24ts
ip routing
!
ip domain-name domain.com
ip device tracking
!
crypto pki trustpoint TP-self-signed-2717516725
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2717516725
revocation-check none
rsakeypair TP-self-signed-2717516725
!
crypto pki certificate chain TP-self-signed-2717516725
certificate self-signed 01
…….
quit
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
redundancy
mode sso
!
class-map match-any non-client-nrt-class
match non-client-nrt
!
policy-map port_child_policy
class non-client-nrt-class
bandwidth remaining ratio 10
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
negotiation auto
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
switchport access vlan 3
switchport mode access
switchport nonegotiate
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
switchport access vlan 2
switchport mode access
switchport nonegotiate
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 10.5.2.2 255.255.255.0
!
interface Vlan3
ip address 10.5.3.2 255.255.255.0
!
ip http server
ip http authentication local
ip http secure-server
!
line con 0
exec-timeout 0 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login local
line vty 5 15
login local
!
wsma agent exec
profile httplistener
profile httpslistener
wsma agent config
profile httplistener
profile httpslistener
wsma agent filesys
profile httplistener
profile httpslistener
wsma agent notify
profile httplistener
profile httpslistener
!
wsma profile listener httplistener
transport http
!
wsma profile listener httpslistener
transport https
ap group default-group
end

SW01#

[paul driver]

Hello

Title =2950 Vsant route between VLANS

We have a brand new 3650 license with IPBase with the following config.

Can you please confirm what model you are using - 3650 switch with Ip base feature set should allow inter-vlan routing

Do you have the L2 vlans created?

config t
Vlan2,3
exit

[gary.walvin11]

Sorry about that, it's a 3650. Title corrected.

[paul driver]

Hello

Ip base should work - do you have the clients in the correct vlans with the correct subnets and default-gateways

Are the L2 vlans created?



res

paul

[swasthik_ms87]

Hi

Checking L2 Vlan would be a great starting point.

Could you also share me a show ip route output please ? Also check the subnet Mask is matching on machines & Switch Vlan SVI's. Thanks

[Ganesh Hariharan]

Hello,

what is the show ip int brief output ? Is all vlan are up and up.

what is the output of show vlan brief ?

Can try removing all config from your interface 

interface GigabitEthernet1/0/20
switchport access vlan 2
switchport mode access
switchport nonegotiate
spanning-tree portfast
spanning-tree bpduguard enable

and let us know the result.

Hope it Helps..

-GI

[gary.walvin1]

Thanks for input and sorry for the slow response. We'll investigate some more and report back.

[Richard Burts]

As you investigate it would be helpful if your would post the output of show vlan and of show interface status.

HTH

Rick