10-05-2017 03:28 AM - edited 03-08-2019 12:16 PM
Good Day,
I have 1x 5548 nexus switch running as a core with layer 3 vlans running for the server farm, storage and other vlans, on this switch I have a trunk going to a 3850 switch where the servers are connected. The switches can see each other via cdp neighbors but cant ping each other.
from the core I can ping 10.10.50.2 which is the firewall interface, but cant ping anything else in this range, and this is the server farm range. On the nexus the layer 3 is configured as
ip vlan 50
ip address 10.10.50.1 255.255.255.0
on the serfer farm switch (3850) I cant ping, lease advise what I could be missing
10-05-2017 06:54 AM
I gave myself an ip in the vlan 50 range 10.10.50.10 and set the dfgw to .1 connected to port gi1/0/48 on the switch, on my laptop I can ping the gateway but on the switch I cant ping my laptop
DIR-Access#ping 10.10.50.10
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.50.10, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
DIR-Access#sh arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 10.10.50.12 25 246e.9647.9842 ARPA Vlan1
Internet 146.64.74.4 - 00c1.b13d.1cc7 ARPA Vlan1
DIR-Access#sh arp | i 10.10.50.10
DIR-Access#sh mac add
DIR-Access#sh mac address-table add
DIR-Access#sh mac address-table address d481.d7c7.b606
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
50 d481.d7c7.b606 DYNAMIC Gi1/0/48
Total Mac Addresses for this criterion: 1
DIR-Access#
DIR-Access#
DIR-Access#
DIR-Access#
DIR-Access#ping 10.10.50.10
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.50.10, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
DIR-Access#
10-05-2017 06:03 AM
10.10.50.5 is one of the servers connected on the 3850 on port gi1/0/2, I still cant ping it on the core even though its on the arp table.
DIR-CORE#
DIR-CORE# sh vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Po1, Po2, Eth1/1, Eth1/2
Eth1/5, Eth1/6, Eth1/7, Eth1/8
Eth1/9, Eth1/10, Eth1/11
Eth1/12, Eth1/13, Eth1/14
Eth1/16, Eth1/17, Eth1/18
Eth1/19, Eth1/20, Eth1/21
Eth1/22, Eth1/23, Eth1/24
Eth1/25, Eth1/26, Eth1/27
Eth1/28, Eth1/29, Eth1/30
Eth1/32
10 Management active Po1, Eth1/3, Eth1/4, Eth1/15
Eth1/31, Eth1/32
20 VM_Public active Po1, Po2, Eth1/1, Eth1/2
Eth1/5, Eth1/31, Eth1/32
30 Ceph_PVT active Po1, Po2, Eth1/1, Eth1/2
Eth1/5, Eth1/31, Eth1/32
40 Ceph_PUB active Po1, Po2, Eth1/1, Eth1/2
Eth1/5, Eth1/31, Eth1/32
50 Svr_Farm active Po1, Po2, Eth1/1, Eth1/2
Eth1/5, Eth1/31, Eth1/32
494 VLAN0494 active Po2, Eth1/1, Eth1/2, Eth1/5
1494 VLAN1494 active Po2, Eth1/1, Eth1/2, Eth1/5
2494 VLAN2494 active Po2, Eth1/1, Eth1/2, Eth1/5
3494 VLAN3494 active Po2, Eth1/1, Eth1/2, Eth1/5
VLAN Type Vlan-mode
---- ----- ----------
1 enet CE
10 enet CE
20 enet CE
30 enet CE
40 enet CE
50 enet CE
DIR-CORE# sh int trunk
--------------------------------------------------------------------------------
Port Native Status Port
Vlan Channel
--------------------------------------------------------------------------------
Eth1/1 1 trnk-bndl Po2
Eth1/2 1 trnk-bndl Po2
Eth1/5 1 trunking --
Eth1/31 10 trunking --
Eth1/32 10 trnk-bndl Po1
Po1 10 trunking --
Po2 1 trunking --
--------------------------------------------------------------------------------
Port Vlans Allowed on Trunk
--------------------------------------------------------------------------------
Eth1/1 1-9,11-4094
Eth1/2 1-9,11-4094
Eth1/5 1-9,11-4094
Eth1/31 10,20,30,40,50
Eth1/32 1,10,20,30,40,50
Po1 1,10,20,30,40,50
Po2 1-9,11-4094
--------------------------------------------------------------------------------
Port Vlans Err-disabled on Trunk
--------------------------------------------------------------------------------
Eth1/1 none
Eth1/2 none
Eth1/5 none
Eth1/31 none
Eth1/32 none
Po1 none
Po2 none
--------------------------------------------------------------------------------
Port STP Forwarding
--------------------------------------------------------------------------------
Eth1/1 none
Eth1/2 none
Eth1/5 none
Eth1/31 none
Eth1/32 none
Po1 1,10,20,30,40,50
Po2 1,20,30,40,50,494,1494,2494,3494
--------------------------------------------------------------------------------
Port Vlans in spanning tree forwarding state and not pruned
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Port Vlans Forwarding on FabricPath
--------------------------------------------------------------------------------
Eth1/1 none
Eth1/2 none
Eth1/5 none
Eth1/31 none
Eth1/32 none
Po1 none
Po2
10-05-2017 06:04 AM
and on the 3850
DIR-Access#sh vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi1/0/4, Gi1/0/8, Gi1/0/12
Gi1/0/16, Gi1/0/20, Gi1/0/24
Gi1/0/28, Gi1/0/29, Gi1/0/30
Gi1/0/31, Gi1/0/32, Gi1/0/33
Gi1/0/34, Gi1/0/35, Gi1/0/36
Gi1/0/37, Gi1/0/38, Gi1/0/39
Gi1/0/40, Gi1/0/41, Gi1/0/42
Gi1/0/43, Gi1/0/44, Gi1/0/45
Gi1/0/46, Gi1/0/47, Gi1/0/48
Gi1/1/1, Gi1/1/2, Te1/1/3
10 Management active Gi1/0/1, Gi1/0/5, Gi1/0/9
Gi1/0/13, Gi1/0/17, Gi1/0/21
Gi1/0/25
50 Svr_Farm active Gi1/0/2, Gi1/0/3, Gi1/0/6
Gi1/0/7, Gi1/0/10, Gi1/0/11
Gi1/0/14, Gi1/0/15, Gi1/0/18
Gi1/0/19, Gi1/0/22, Gi1/0/23
Gi1/0/26, Gi1/0/27
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
10 enet 100010 1500 - - - - - 0 0
50 enet 100050 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0
Remote SPAN VLANs
------------------------------------------------------------------------------
Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------
DIR-Access#
DIR-Access#sh int trunk
Port Mode Encapsulation Status Native vlan
Po1 on 802.1q trunking 10
Port Vlans allowed on trunk
Po1 1,10,20,30,40,50
Port Vlans allowed and active in management domain
Po1 1,10,50
Port Vlans in spanning tree forwarding state and not pruned
Po1 1,10,50
DIR-Access#
DIR-Access#
10-05-2017 06:57 AM
is the 5k ;licensed as layer 3 device as they only come as layer 2 standard
10-05-2017 07:18 AM
not sure what to lookout for here is the output
DIR-CORE# sh license usage
Feature Ins Lic Status Expiry Date Comments
Count
--------------------------------------------------------------------------------
FCOE_NPV_PKG No - Unused -
FM_SERVER_PKG No - Unused -
ENTERPRISE_PKG No - Unused -
FC_FEATURES_PKG No - Unused -
VMFEX_FEATURE_PKG No - Unused -
ENHANCED_LAYER2_PKG No - Unused -
LAN_BASE_SERVICES_PKG No - Unused -
LAN_ENTERPRISE_SERVICES_PKG No - Unused -
--------------------------------------------------------------------------------
DIR-CORE#
10-05-2017 07:21 AM
Thats purely layer 2 so the 5k cant do the routing currently between intervlans
10-05-2017 07:24 AM
oh ok, I thoght the " LAN Servcies PKG " means its licensed
Feature License Product ID Features
Layer 3 Base Services
Package
Unlimited static routes and a
maximum of 256 dynamic
routes
• Static Routes
• RIPv2
• OSPFv2 and OSPFv3
• EIGRP Stub
• HSRP 23
• VRRP 24
• IGMP v2/v3
• PIMv2 (sparse mode)
• VRF Lite
• Routed ACL
Layer 3 Base Services Package N55-BAS1K9
LAN_BASE_SERVICES_PKG
22
10-05-2017 07:30 AM
Your license is not turned on or hasnt been added it should state yes like mine
# sh license usage
Feature Ins Lic Status Expiry Date Comments
Count
--------------------------------------------------------------------------------
MPLS_PKG No - Unused -
STORAGE-ENT No - Unused -
VDC_LICENSES No 0 Unused -
ENTERPRISE_PKG No - Unused -
FCOE-N7K-F132XP No 0 Unused -
FCOE-N7K-F248XP No 0 Unused -
ENHANCED_LAYER2_PKG No - Unused -
SCALABLE_SERVICES_PKG No - Unused -
TRANSPORT_SERVICES_PKG No - Unused -
LAN_ADVANCED_SERVICES_PKG Yes - Unused Never -
LAN_ENTERPRISE_SERVICES_PKG Yes - In use Never -
--------------------------------------------------------------------------------
10-05-2017 07:34 AM
In order for me to turn it on, I would need the licence key from the ISP from which the switch was bought, if it was bought right?
10-05-2017 07:39 AM
10-05-2017 09:02 AM
Hi Mark,
Thank you for your assistance, much appreciated.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide