My scenario: A 891 is linked to a 2960 switch. I have 2 vlan.
My problem: if I put an ip on the vlan the dhcp works on the 891 but stops on the 2960, if I put the ip on the sub interface, the dhcp work on the swicth, but the switch on the 891 never gives ip's.
My configurations:
Switch 2960
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SWT1-Biblioteca
!
!
no aaa new-model
system mtu routing 1500
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
interface range FastEthernet0/1-3
switchport trunk allowed vlan 1-3
switchport mode trunk
!
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 3
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet0/1
switchport trunk native vlan 2
switchport trunk allowed vlan 2,3
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 10.5.2.1 255.255.255.248
!
interface Vlan2
ip address 172.21.1.254 255.255.255.0
!
interface Vlan3
no ip address
!
no ip http server
no ip http secure-server
access-list 2 permit 172.21.1.1
access-list 2 deny any
!
line con 0
login local
line vty 0 4
access-class 2 in
login local
line vty 5 15
access-class 2 in
login local
!
ntp clock-period 36028732
ntp source Vlan2
ntp server 172.21.1.1
end
My router:
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname rt-hotspot
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
!
!
clock timezone GMT 0
clock summer-time GMT recurring
!
!
ip source-route
!
!
ip dhcp excluded-address 172.20.1.254
ip dhcp excluded-address 192.168.2.1
ip dhcp excluded-address 172.21.1.1
ip dhcp excluded-address 172.21.1.253
ip dhcp excluded-address 172.21.1.254
!
ip dhcp pool hotspots
network 172.20.0.0 255.255.0.0
default-router 172.20.1.254
dns-server 8.8.8.8
lease 0 3
!
ip dhcp pool biblioteca
network 172.21.1.0 255.255.255.0
default-router 172.21.1.1
dns-server 8.8.8.8
lease 5
!
ip dhcp pool biblioteca-hotspot
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
lease 0 3
!
!
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
!
!
!
interface FastEthernet0
!
!
interface FastEthernet1
!
!
interface FastEthernet2
!
!
interface FastEthernet3
!
!
interface FastEthernet4
!
!
interface FastEthernet5
switchport access vlan 2
!
!
interface FastEthernet6
switchport access vlan 3
!
!
interface FastEthernet7
switchport access vlan 10
!
!
interface FastEthernet8
no ip address
shutdown
duplex auto
speed auto
!
!
interface GigabitEthernet0
description LAN$FW_INSIDE$
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
no ip route-cache cef
no ip route-cache
duplex auto
speed auto
!
!
interface GigabitEthernet0.1
encapsulation dot1Q 1
no ip route-cache
!
interface GigabitEthernet0.2
encapsulation dot1Q 2 native
no ip route-cache
bridge-group 2
bridge-group 2 spanning-disabled
!
interface GigabitEthernet0.3
encapsulation dot1Q 3
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache
ip tcp adjust-mss 1452
!
interface Vlan1
ip address 172.20.1.254 255.255.0.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
!
interface Vlan2
ip address 172.21.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache cef
no ip route-cache
ip tcp adjust-mss 1452
bridge-group 2
bridge-group 2 spanning-disabled
!
!
interface Vlan3
no ip address
!
!
interface Vlan10
description Internet
ip address *.*.*.* 255.255.254.0
ip nat outside
ip virtual-reassembly
no ip route-cache cef
no ip route-cache
!
!
interface Async1
no ip address
encapsulation slip
!
!
ip forward-protocol nd
no ip http server
ip http authentication local
no ip http secure-server
!
!
ip nat inside source list 1 interface Vlan10 overload
ip route 0.0.0.0 0.0.0.0 195.54.168.3
!
access-list 1 permit 172.20.0.0 0.0.255.255
access-list 1 permit 172.21.1.0 0.0.0.255
access-list 1 permit 192.168.2.0 0.0.0.255
access-list 1 deny any
access-list 2 deny any
!
!
!
!
!
!
control-plane
!
!
!
line con 0
login local
line 1
modem InOut
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
line vty 0 4
access-class 2 in
login local
line vty 5 15
access-class 2 in
login local
!
scheduler max-task-time 5000
ntp source Vlan10
ntp master
ntp update-calendar
ntp server 194.117.9.130 prefer source Vlan10
end
Any ideias?
