Can not access management interface on Cisco 4510R

[it.services]

We have a new Cisco 4500R and I have put an IP address and mask on the management interface and even added an default route for the vrf mgmtVrf yet when I plug a PC on the same subnet into the management port or connect it to a switch in the vlan for that subnet I can not ping or telnet to the management port. 

ip vrf mgmtVrf 

!

interface FastEthernet1
 ip address 10.11.12.45 255.255.255.0

 ip vrf forwarding mgmtVrf

speed auto

duplex auto 

ip route vrf mgmtVrf 0.0.0.0 0.0.0.0 10.11.12.2

All the default vrf mgmtVrf are configured. Am I missing a step?

[Sebastian Helmer]

U mean even if u put the PC to fa1 we see in the config it is not working?

Sent from Cisco Technical Support iPad App

[it.services]

See response to Jon.

[Jon Marshall]

The fa1 one port is up/up ?

Can you post a "sh ip route vrf mgmtVrf"

Jon

[it.services]

Switch#sh ip route vrf mgmtVrf

Routing Table: mgmtVrf

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       + - replicated route, % - next hop override

Gateway of last resort is 10.11.12.2 to network 0.0.0.0

S*    0.0.0.0/0 [1/0] via 10.11.12.2

      10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C        10.11.12.0/24 is directly connected, FastEthernet1

L        10.11.12.45/32 is directly connected, FastEthernet1

Switch#sh int fa1

FastEthernet1 is up, line protocol is up

PC directly connected to fa1 is configured with 10.11.12.2/24 and can not ping fa1 and can't ping PC from switch:

Switch#ping vrf mgmtVrf 10.11.12.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.11.12.2, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

[Jon Marshall]

The PC may have a firewall on it ? which would stop pinging from the switch but not the other way round.

What supervisor and IOS version does the switch have ?

Jon

[it.services]

Switch#sh ver

Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSAL-M), Version 03.05.00.E RELEASE SOFTWARE (fc3)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2013 by Cisco Systems, Inc.

Compiled Tue 27-Aug-13 17:02 by prod_rel_team

License Information for 'WS-X45-SUP7-E'

    License Level: lanbase   Type: Permanent

    Next reboot license Level: lanbase

No firewalls on the PC and I have tried a couple different PC's along with connecting to a switch.

[Jon Marshall]

Can you just confirm, is this a single supervisor setup or do you have two sups in the chassis ?

Jon

[it.services]

Single supervisor set up.

[Jon Marshall]

There is nothing wrong with your configuration as far as i can see. I will have a check for bugs but don't hold out too much hope.

Jon

[Chad Thelen]

Was there ever any solution to this? I'm running into the same issue with a new 4500X. Have the exact configuration as the initial post, and it can't ping its gateway.