9200 Switch

[itsupportgl]

Hello,

I bought Cisco C9200L-24P-4X switch connected the switch in my existing network VTP configured, shows the Vlan in my L3 Switch, broadcast is happening in all Vlan, bu i am not able ping the Switch IP

[Georg Pauwen]

Hello,

from where can you not ping the switch ? Do you have a management IP address and default gateway configured ?

[itsupportgl]

Hi,
Interface vlan1 IP and Gateway configured, not able to ping from my
desktop or other vlans, Only Native Vlan of the switch is getting ping,
Tried pinging the gateway of other vlans nothing worked.

[Georg Pauwen]

Hello,

--> Only Native Vlan of the switch is getting ping,

So Vlan 1 is not the native Vlan on the switch ?

Post the full running configuration of the 9200, as well as that of one of the neighboring switches, and indicate through which port they are connected.

[itsupportgl]

Switch#sh running-config
Building configuration...

Current configuration : 8625 bytes
!
! Last configuration change at 07:11:52 UTC Sat Nov 30 2019
!
version 16.9
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service call-home
no platform punt-keepalive disable-kernel-core
!
hostname Switch
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
enable secret 5 $1$6IUW$39rWxbSCSnuJ0c28HWKyV/
!

no aaa new-model
switch 1 provision c9200l-24p-4x
!
!
ip routing
ip arp entry learn 10240

login on-success log
call-home
! If contact email address in call-home is configured as
sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used
as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
!
crypto pki trustpoint TP-self-signed-1577138162
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1577138162
revocation-check none
rsakeypair TP-self-signed-1577138162
!
crypto pki trustpoint SLA-TrustPoint
enrollment pkcs12
revocation-check crl
!
!
crypto pki certificate chain TP-self-signed-1577138162
certificate self-signed 01
quit
!
license boot level network-essentials addon dna-essentials
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
redundancy
mode sso
!
!
!
class-map match-any system-cpp-police-topology-control
description Topology control
class-map match-any system-cpp-police-sw-forward
description Sw forwarding, L2 LVX data, LOGGING
class-map match-any system-cpp-default
description Inter FED, EWLC control, EWLC data
class-map match-any system-cpp-police-sys-data
description Learning cache ovfl, High Rate App, Exception, EGR Exception,
NFL SAMPLED DATA, RPF Failed
class-map match-any system-cpp-police-punt-webauth
description Punt Webauth
class-map match-any system-cpp-police-l2lvx-control
description L2 LVX control packets
class-map match-any system-cpp-police-forus
description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
description MCAST END STATION
class-map match-any system-cpp-police-multicast
description Transit Traffic and MCAST Data
class-map match-any system-cpp-police-l2-control
description L2 control
class-map match-any system-cpp-police-dot1x-auth
description DOT1X Auth
class-map match-any system-cpp-police-data
description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
description Stackwise Virtual
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
description Routing control and Low Latency
class-map match-any system-cpp-police-protocol-snooping
description Protocol snooping
class-map match-any system-cpp-police-dhcp-snooping
description DHCP snooping
class-map match-any system-cpp-police-system-critical
description System Critical and Gold Pkt
!
policy-map system-cpp-policy
!

interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
switchport access vlan 5
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
switchport mode trunk
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface Vlan1
ip address 172.30.1.36 255.255.0.0
!
ip default-gateway 172.30.1.2
ip forward-protocol nd
no ip http server
ip http authentication local
ip http secure-server
!
!
!
snmp-server community glsnmp RO
!
control-plane
service-policy input system-cpp-policy
!
!
line con 0
--------------------------------------------------------------------------
Existing Switch

[Georg Pauwen]

Hello,

you have 'ip routing' enabled, try and turn that off:

Switch#conf t

Switch(config)#no ip routing

[balaji.bandi]

by Default, I have seen sometimes the VLAN 1 down in admin mode.

check show interface VLAN 1  - what status if it is down?

config t

!

interface VLAN 1 

no shut

!

end

ping from the switch to  172.30.1.2 < this IP works before you move to next level

[itsupportgl]

Hi,

I will check on the default Vlan status and i can ping Vlan 1 IP ranges, (
All Switches, i can telnet this switch from other switches)
For ex - Vlan 3,4,5 is created in Core and if i give this IP in this switch
it is broadcasting.

[balaji.bandi]

then i may be missed here something ? what is the issue ?

[Richard Burts]

I am not clear what is the current state of this. I do agree with @Georg Pauwen about one important issue. The configuration has ip routing enabled and has this in the configuration for default route

ip default-gateway 172.30.1.2

The issue is that default-gateway is used when the switch is operating as a host in the network (ip routing disabled - which is the default) and default-gateway configuration is ignored when ip routing is enabled (as was the case in the posted config). So either ip routing should be removed or a static default route should be configured, which might look something like this

ip route 0.0.0.0 0.0.0.0 172.30.1.2

If there still are issues I would appreciate a fresh statement of what the issues are. It would also be helpful to see the output of these commands on the switch

show cdp neighbor

show ip route

show arp 

show interface trunk

HTH

Rick

[itsupportgl]

Hi All,

PLease find the details,

Layer 3 Core Switch 3850 - 172.30.1.2 - Vlan 1,
By default when i configure new switch, I will connect the uplink of the
switch in Trunk port.


Existing Gateway & Vlan,
Vlan 12 - 172.17.1.100, Vlan 5 - 10.5.5.1,
Here i connected the 9200 switch in trunk port and assigned IP as
172.30.1.36, configured a Port as vlan 5 and device got connected and
working fine, but not able to ping the gateway 10.5.5.1,

[Richard Burts]

Can you attempt ping from the pc to its gateway and immediately check the arp table of the PC and post that output here?

Also please post the output of the command show interface trunk from the 9200 switch.

HTH

Rick

[muneerabdeljaber]

Hello,

Ihave cisco 9200l give me this issue.

Mainboard hardware authentication failed. Abort init ...

Initializing Hardware...

System Bootstrap, Version 17.8.1r [FC5], RELEASE SOFTWARE (P)
Compiled Wed 01/12/2022 17:00:03 by rel

Current ROMMON image : Primary
C9200L-48P-4X platform with 2097152 Kbytes of main memory

boot: attempting to boot from [flash:packages.conf]
boot: reading file packages.conf

#############
ILET-2-AUTHENTICATION_FAIL: The system integrity check has failed during the boot-up sequence. Please contact Cisco's Technical Assistance Center for more information.
Mainboard hardware authentication failed. Abort init ...

[Richard Burts]

You picked an old discussion to add your issue to the discussion. And your issue has nothing to do with the issue in the original post. It would have been better for you to have started a new discussion. But you asked here and so I will respond here. It looks like some type of hardware issue. I believe that this part of the output is very good advice "Please contact Cisco's Technical Assistance Center for more information."