Can ping trunk to switch, but not the other way around

[Keyon]

First things first, I'm not completely certain if I should post this here or in routing.

I have setup a router on a stick with 2 devices that have nothing else on them as of now. I put an ip on both router and the switch to test connectivity. There are 4 vlans I'm sending across the trunk, and 2 of them work perfectly. The other 2 vlans can only ping the router from the switch, but not the switch from the router.

The sub interfaces are all setup the exact same except the ip addresses. On the switch, the interface vlans are also the exact same except for the ips.

I can post the configurations for it in a bit, but I am not near my devices currently. I do not have access lists or anything else like that on the devices, just the 2 ports and all a router on a stick entails.

[Reza Sharifi]

Yrs, this is the right place to post this type of questions.

When you get to your devices, please post "sh run" from both the switch and the router.

HTH

[Richard Burts]

show run will show us the details of how things are set up and help us determine what may be the problem. In addition it would be quite helpful if you would post the output of these commands from the router:

show ip interface brief

show arp

and of these commands from the switch

show ip interface brief

show interface trunk

show vlan

HTH

Rick

[paul driver]

Hello

just like to add -

-Are all the VLANs allowed across the trunk 

-Are the switch SVIs up and their related l2 VLANs created.

-Ip routing enabled on the switch 

[Keyon]

I am not certain what the switch SVIs are, but I have allowed all the vlans across the tunnel. Ip routing is not enabled on the switch.

I am sorry about giving false info on being able to post the configs, the higher ups at my workplace wanted the switch to be setup differently, and other people at my work have messed with it before I could post them.

I feel bad for having to say that. I am really curious as to how to fix it if I ever come across it again, so I'm going to type out the commands I put in after the initial startup.

On the router:

Interface g0/0.10

Encapsulation dot1q 10

Ip add 22.113.43.1 255.255.255.224

No shutdown

Interface g0/0.20

Encapsulation dot1q 20

Ip add 10.10.20.1 255.255.255.224

No shutdown

Interface g0/0.64

Encapsulation dot1q 64

Ip add 22.113.43.65 255.255.255.192

No shutdown

Interface g0/0.128

Encapsulation dot1q 128

Ip add 22.113.43.129 255.255.255.128

No shutdown

On the switch:

Interface vlan 10

Description services

Ip add 22.113.43.2 255.255.255.224

Interface vlan 20

Ip add 10.10.20.2 255.255.255.224

Interface vlan 64

Description voice

Ip add 22.113.43.66 255.255.255.192

Interface vlan 128

Description users

Ip add 22.113.43.130 255.255.255.128

Interface g1/0/1

Switchport mode trunk

Switchport trunk allowed vlan 10,20,64,128

The ping results from router:

To vlan 10 !!!!!

To vlan 20 !!!!!

To vlan 64 .....

To vlan 128 .....

The ping results from switch:

To g0/0.10 !!!!!

To g0/0.20 !!!!!

To g0/0.64 !!!!!

To g0/0.128 !!!!!

According to the switch, only the interface vlans 10 and 20 are up.

I also tried recreating the vlans and changing their numbers, but only vlans 10 and 20 work, even when the other two were 5 and 15.

I'm sorry I can't provide anything else other than that anymore.

[Reza Sharifi]

Switchport mode tunnel

Switchport tunnel allowed vlan 10,20,64,128

You mean switchport mode trunk?

Also, on the switch side, can you shut and no shut interface vlan 64 and 128 and test again?

HTH

[Keyon]

Sorry about that, I did mean trunk, my work mates were distracting me. We have a major thing coming up soon.

I did try shut and no shut all the interfaces, both individually and together. That was the first thing I tried.

[Richard Burts]

Not sure if it is simply typo in recreating what you configured. But look at this from what you posted:

router

Interface g0/0.10

Ip add 22.113.43.1 255.255.255.224

switch

Interface vlan 10

Ip add 22.113.43.1 255.255.255.224

router

Interface g0/0.20

Encapsulation dot1q 20

Ip add 10.10.20.2 255.255.255.224

switch

Interface vlan 20

Ip add 10.10.20.2 255.255.255.224

vlans 64 and 128 do not have this problem.

HTH

Rick

[Keyon]

At first I thought it was a typo, but I reread what you said and I do not see what you mean by problem. Those two are the two vlans working.

[paul driver]

Hello

What rick is stating is that for vlan 10-20 on the rtr and switch have the same ip address?

vlan 10 and Interface g0/0.10

22.113.43.1

Vlan 20 and Interface g0/0.20
10.10.20.2

On the switch suggest to change the above addressing, create the L2 vlans and enable ip routing then test again

conf t

vlan 10,20,64,128

exit
ip routing

[Keyon]

Oh, yeah, that was a typo. Today was a rushed day, so I didn't really have time to do much other than a quick read and reply. I'll go through and mark them.

Thank you to each of you so far, as I stated earlier, the devices have been changed by my coworkers, but we are going to be doing another setup very similar to the one I had a problem with soon, so I would like to see if it's possible to solve this before it happens again. If it does happen again.

If there's nothing else that can be done without testing, I might be able to setup a temporary port tomorrow following exactly what I did today on the same devices. But I do not know if I'll be allowed to or not.

[Martin L]

CLN is great educational site for learning Cisco networking and networking in general