01-15-2014 11:44 AM - edited 03-07-2019 05:35 PM
We have a new Cisco 4500R and I have put an IP address and mask on the management interface and even added an default route for the vrf mgmtVrf yet when I plug a PC on the same subnet into the management port or connect it to a switch in the vlan for that subnet I can not ping or telnet to the management port.
ip vrf mgmtVrf
!
interface FastEthernet1
ip address 10.11.12.45 255.255.255.0
ip vrf forwarding mgmtVrf
speed auto
duplex auto
ip route vrf mgmtVrf 0.0.0.0 0.0.0.0 10.11.12.2
All the default vrf mgmtVrf are configured. Am I missing a step?
01-15-2014 11:57 AM
U mean even if u put the PC to fa1 we see in the config it is not working?
Sent from Cisco Technical Support iPad App
01-15-2014 12:14 PM
See response to Jon.
01-15-2014 11:59 AM
The fa1 one port is up/up ?
Can you post a "sh ip route vrf mgmtVrf"
Jon
01-15-2014 12:12 PM
Switch#sh ip route vrf mgmtVrf
Routing Table: mgmtVrf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 10.11.12.2 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 10.11.12.2
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.11.12.0/24 is directly connected, FastEthernet1
L 10.11.12.45/32 is directly connected, FastEthernet1
Switch#sh int fa1
FastEthernet1 is up, line protocol is up
PC directly connected to fa1 is configured with 10.11.12.2/24 and can not ping fa1 and can't ping PC from switch:
Switch#ping vrf mgmtVrf 10.11.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.11.12.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
01-15-2014 12:16 PM
The PC may have a firewall on it ? which would stop pinging from the switch but not the other way round.
What supervisor and IOS version does the switch have ?
Jon
01-15-2014 12:18 PM
Switch#sh ver
Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSAL-M), Version 03.05.00.E RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 27-Aug-13 17:02 by prod_rel_team
License Information for 'WS-X45-SUP7-E'
License Level: lanbase Type: Permanent
Next reboot license Level: lanbase
No firewalls on the PC and I have tried a couple different PC's along with connecting to a switch.
01-15-2014 12:58 PM
Can you just confirm, is this a single supervisor setup or do you have two sups in the chassis ?
Jon
01-15-2014 01:08 PM
Single supervisor set up.
01-15-2014 01:28 PM
There is nothing wrong with your configuration as far as i can see. I will have a check for bugs but don't hold out too much hope.
Jon
04-27-2016 11:26 AM
Was there ever any solution to this? I'm running into the same issue with a new 4500X. Have the exact configuration as the initial post, and it can't ping its gateway.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide