Folks,
I was wondering if someone would be able to assist, basically i need to create a couple of vlans within a vtp domain and allow routing between them. I'm a bit of a novice and don't work on Cisco products as often as i'd like to.
Requirements
1. Create 3 new vlans
vlans 70, 74, 75
I created the vlans but they don't show up in the vlan database but are visible in the show run config.
i read a post which i will try first thing in the morning, -
"
You need to create the vlan before you can create the SVI. The SVI will not come up without the vlan.
vlan 3
name vlan003
Interface vlan 3
ip address x.x.x.x x.x.x.x
no shutdown
"
2. the other original vlans are not showing up in the running config? see configs below
3. this may be related to above (1.) , but i can't ping the the vlan i just created
4. configure port channels to allow new vlans
- i have edited the port channel to allow vlans 70,74,75 between the 4500 and 3650, once this is working i will do the same between the 3650 and 2960
5. enable routing between the new vlans
- vlans 74 and 75 will be routed to 70
correct me if am wrong please, to enable routing i may have to conciser the following:
- enable routing on the 4500
- enable default gateway on 4500, can this address be local to this switch?
- gateway of last resort, do i need this?
- routes example 10.168.70.0 255.255.255.0 vlan 70 ?
- routes example 10.168.74.0 255.255.255.0 vlan 74 ?
- routes example 10.168.75.0 255.255.255.0 vlan 75 ?
Switch configurations
4500 -
hostname 4500
!
boot-start-marker
boot system flash bootflash:cat4500e-universal.SPA.03.10.02.E.152-6.E2.bin
boot-end-marker
!
!
vrf definition mgmtVrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
power redundancy-mode redundant
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
!
!
!
!
!
!
interface Port-channel1
switchport
switchport trunk allowed vlan 11,12,21,22,31,70,74,75
switchport mode trunk
!
interface Port-channel2
switchport
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel3
switchport
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel4
switchport
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel5
switchport
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel15
switchport
switchport mode trunk
!
interface FastEthernet1
vrf forwarding mgmtVrf
no ip address
speed auto
duplex auto
!
interface TenGigabitEthernet1/1
switchport trunk allowed vlan 11,12,21,22,31,70,74,75
switchport mode trunk
channel-group 1 mode active
!
interface TenGigabitEthernet1/2
switchport trunk allowed vlan 11,12,21,22,31,70,74,75
switchport mode trunk
channel-group 1 mode active
!
interface TenGigabitEthernet1/3
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 2 mode active
!
interface TenGigabitEthernet1/4
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 2 mode active
!
interface TenGigabitEthernet1/5
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 3 mode active
!
interface TenGigabitEthernet1/6
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 3 mode active
!
interface TenGigabitEthernet1/7
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 4 mode active
!
interface TenGigabitEthernet1/8
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 4 mode active
!
interface TenGigabitEthernet1/9
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 5 mode active
!
interface TenGigabitEthernet1/10
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 5 mode active
!
interface TenGigabitEthernet1/11
!
interface TenGigabitEthernet1/12
!
interface TenGigabitEthernet1/13
!
interface TenGigabitEthernet1/14
!
interface TenGigabitEthernet1/15
!
interface TenGigabitEthernet1/16
!
interface Vlan1
no ip address
shutdown
!
!
interface Vlan70
ip address 10.168.70.1 255.255.255.0
!
interface Vlan74
ip address 10.168.74.1 255.255.255.0
!
interface Vlan75
ip address 10.168.75.1 255.255.255.0
!
ip forward-protocol nd
no ip http server
!
!
!
!
!
!
line con 0
stopbits 1
line vty 0 4
login
!
!
end
3650 -
hostname 3650
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
!
no aaa new-model
switch 1 provision ws-c3650-24td
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-1264829995
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1264829995
revocation-check none
rsakeypair TP-self-signed-1264829995
!
!
crypto pki certificate chain TP-self-signed-1264829995
certificate self-signed 01
30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31323634 38323939 3935301E 170D3139 30353234 30343137
34375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 32363438
32393939 35308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201
0A028201 0100DB71 F94D246C 05333AFC 744F0908 2161C9F9 8FF76C75 DB2E621E
41370F26 40DF6092 AB633BCF EDAB1A8C A452F51E 967B6699 D9756421 22877597
FBA29CB2 D2CD66D5 2FA0F4F5 7DCBA687 E9994AC6 C3C291D3 ACC7927C AE97834C
2FFD875C 14EFD3A1 806FC416 5875192C 074641B8 F9266C60 25C9961A 56639A79
5EFA0269 C4FD55CD 5184DD98 B083F9E1 2EB8A0F0 E3A6B4F8 C83CDFEA 588AB1F1
510BE920 7598DA25 3D9E10DF 7C7FB274 AA1ECD57 43299A42 308AF84D 442BD687
E539FA6F 748C776D DFB65C3C 908E70E9 6378068F 520379B0 C62D69FE 38D157D4
0AD6F1B2 DC4EA021 60276C0B 7AAD6605 E00B15F0 1CCD3D74 E6D4BC71 E7B722AF
CA156550 62C70203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF
301F0603 551D2304 18301680 14755356 BB21EC31 2AA0BE36 4FC75736 D966F8C8
8B301D06 03551D0E 04160414 755356BB 21EC312A A0BE364F C75736D9 66F8C88B
300D0609 2A864886 F70D0101 05050003 82010100 3FFC24E6 07E1D705 E07F0A36
38677E0B 873DD936 248DB221 8CCABF4E BAC99574 792C5ACE 0C0C237E 96B69E57
9480BBD7 28D99365 C3CAE739 8BC62DC4 6676B2AE 113A787C ECDA0DD1 024C20E4
48C82C88 32204601 42DE8CC0 C7FC0E7E 7451E9C4 DC2934A5 044550D9 8B3714B8
4FEF4FF6 E8E978AB 33D7D06E D1099844 5D23F30E 8ADC1622 4371EAD6 E5049CED
4B12ABEA B2257821 1F5BEAF9 92E2CA41 A91FDB88 5A10F559 B492AAD4 35C9897C
E90028E4 DA04038F 2619B83B 5ED40F66 835B111F FF682506 04322431 75AC3DA2
00256F7F 090447E5 125C5700 171DCC60 79EC6180 32B18AB4 7080F321 C8FB9128
C1868049 51DE1FD2 77FB003B C4AE1E44 62C91F94
quit
!
!
!
diagnostic bootup level minimal
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
redundancy
mode sso
!
!
transceiver type all
monitoring
!
!
class-map match-any system-cpp-police-topology-control
description Topology control
class-map match-any system-cpp-police-sw-forward
description Sw forwarding, L2 LVX data, LOGGING
class-map match-any system-cpp-default
description DHCP Snooping, EWLC control, EWCL data
class-map match-any system-cpp-police-sys-data
description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL SAMPLED DATA, RPF Failed
class-map match-any system-cpp-police-punt-webauth
description Punt Webauth
class-map match-any system-cpp-police-l2lvx-control
description L2 LVX control packets
class-map match-any system-cpp-police-forus
description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
description MCAST END STATION
class-map match-any system-cpp-police-multicast
description Transit Traffic and MCAST Data
class-map match-any system-cpp-police-l2-control
description L2 control
class-map match-any system-cpp-police-dot1x-auth
description DOT1X Auth
class-map match-any system-cpp-police-data
description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
description Stackwise Virtual
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
description Routing control
class-map match-any system-cpp-police-protocol-snooping
description Protocol snooping
class-map match-any system-cpp-police-system-critical
description System Critical and Gold
!
policy-map system-cpp-policy
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Port-channel1
switchport trunk allowed vlan 11,12,21,22,31,70,74,75
switchport mode trunk
!
interface Port-channel11
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel12
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel13
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel14
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel15
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel16
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel17
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel18
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel19
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel20
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface Port-channel21
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
shutdown
speed 1000
negotiation auto
!
interface GigabitEthernet1/0/1
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
speed 1000
duplex full
channel-group 11 mode active
!
interface GigabitEthernet1/0/2
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
speed 1000
duplex full
channel-group 11 mode active
!
interface GigabitEthernet1/0/3
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
speed 1000
duplex full
channel-group 12 mode active
!
interface GigabitEthernet1/0/4
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
speed 1000
duplex full
channel-group 12 mode active
!
interface GigabitEthernet1/0/5
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
speed 1000
duplex full
channel-group 21 mode active
!
interface GigabitEthernet1/0/6
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
speed 1000
duplex full
channel-group 21 mode active
!
interface GigabitEthernet1/0/7
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 14 mode active
!
interface GigabitEthernet1/0/8
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 14 mode active
!
interface GigabitEthernet1/0/9
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 15 mode active
!
interface GigabitEthernet1/0/10
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 15 mode active
!
interface GigabitEthernet1/0/11
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 16 mode active
!
interface GigabitEthernet1/0/12
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 16 mode active
!
interface GigabitEthernet1/0/13
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 17 mode active
!
interface GigabitEthernet1/0/14
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 17 mode active
!
interface GigabitEthernet1/0/15
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 18 mode active
!
interface GigabitEthernet1/0/16
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 18 mode active
!
interface GigabitEthernet1/0/17
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 11 mode active
!
interface GigabitEthernet1/0/18
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 11 mode active
!
interface GigabitEthernet1/0/19
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 13 mode active
!
interface GigabitEthernet1/0/20
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 13 mode active
!
interface GigabitEthernet1/0/21
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 13 mode active
!
interface GigabitEthernet1/0/22
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 13 mode active
!
interface GigabitEthernet1/0/23
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 20 mode active
!
interface GigabitEthernet1/0/24
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
channel-group 20 mode active
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
switchport trunk allowed vlan 11,12,21,22,31,70,74,75
switchport mode trunk
channel-group 1 mode active
!
interface TenGigabitEthernet1/1/4
switchport trunk allowed vlan 11,12,21,22,31,,70,74,75
switchport mode trunk
channel-group 1 mode active
!
interface Vlan1
no ip address
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
!
!
control-plane
service-policy input system-cpp-policy
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
login
line vty 5 15
login
!
!
mac address-table notification mac-move
!
!
!
!
!
end
2960 -
hostname 2960
!
boot-start-marker
boot-end-marker
!
logging console emergencies
!
no aaa new-model
switch 1 provision ws-c2960x-48fps-l
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-3209400448
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3209400448
revocation-check none
rsakeypair TP-self-signed-3209400448
!
!
crypto pki certificate chain TP-self-signed-3209400448
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33323039 34303034 3438301E 170D3139 30353234 30373139
31345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 32303934
30303434 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100B9E8 A922E038 347096D5 5F5330CC 27DE5AA1 3062E58B 9240266A 497B8A42
A0F63AAC 76765698 DBAFE73C 74EE68BE 5345A604 EE56E88B B63E5067 12ADEA5F
5EF83338 6361D56D DB4BDEAB F2B825A2 62A959AA 5D970754 80CCA55F A8291553
B079338F 0B3EE65B 3DB99E42 8E7BD925 ADB1C29A 5E14E2E4 E3E52DF8 7879ED32
F9950203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 143F24FF 8B322454 AA97556C 9EB5D10E 40A376CB D6301D06
03551D0E 04160414 3F24FF8B 322454AA 97556C9E B5D10E40 A376CBD6 300D0609
2A864886 F70D0101 05050003 81810034 9AEC4ACE 43FBF6F0 1B83B1FC 80336657
864F5BBF 9AA746CE CA861114 07B42A9C 10E54E80 F3BC29DB DDB4946C 473A5590
8AE39439 1B87AEE0 1A1C6F2D E36C78AA B736B6C3 CEA3AABD B2F32224 6B8B22EF
DFF22BD7 EA42FA42 4689DC3C 74938929 93DE52A0 A755FB33 E48B9BEC 47575E0E
AFAD5E38 8982FF5A AC4A3545 AF5572
quit
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
!
!
!
!
!
interface Port-channel14
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
!
interface FastEthernet0
no ip address
shutdown
!
interface GigabitEthernet1/0/1
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/2
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/3
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/4
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/5
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/6
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/7
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/8
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/9
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/10
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/11
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/12
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/13
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/14
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/15
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/16
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/17
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/18
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/19
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/20
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/21
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/22
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/23
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/24
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/25
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/26
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/27
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/28
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/29
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/30
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/31
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/32
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/33
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/34
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/35
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/36
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/37
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/38
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/39
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/40
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/41
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/42
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/43
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/44
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/45
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/46
description Mgmt-CCTV
switchport access vlan 11
!
interface GigabitEthernet1/0/47
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
power inline never
channel-group 14 mode active
!
interface GigabitEthernet1/0/48
switchport trunk allowed vlan 11,12,21,22,31
switchport mode trunk
power inline never
channel-group 14 mode active
!
interface GigabitEthernet1/0/49
!
interface GigabitEthernet1/0/50
!
interface GigabitEthernet1/0/51
!
interface GigabitEthernet1/0/52
!
interface Vlan1
no ip address
shutdown
!
ip http server
ip http secure-server
!
!
!
no vstack
!
line con 0
exec-timeout 0 0
line vty 0 4
login
line vty 5 15
login
!
end
