cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1115
Views
0
Helpful
11
Replies

Can't ping VLANs

chris.bias
Level 1
Level 1

VLAN 7 is configured on the switch and can ping VLAN 7 subnet but from VLAN 2 or any other VLAN it can't ping the VLAN 7 subnet. I am kind of confused by what the issue is as the configuration looks fine.

1 Accepted Solution

Accepted Solutions

No, you need to remove them from the svi.

 

config t

interface vlan 7

no ip access-group manage_in in

no ip access-group management out

HTH

View solution in original post

11 Replies 11

marce1000
VIP
VIP

 

 - Technically your subject-phrasing is wrong because you can not ping vlan's but only hosts (in Vlans)  , or if you are referring to SVI's , if you think the configuration 'looks fine' , and does not work, then you may want to post here for review.

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

My apologies I can't ping hosts that are on different VLANs. Example would be IP 10.50.2.22 can't ping 10.50.7.22

Can you post the output of "sh run" and "sh vlan"?

HTH

See attached

For testing, can you remove these 2 commands from VLAN 7 SVI and test them again?

ip access-group manage_in in
 ip access-group management out

 

I apologize but I think I have the right command but it is the following to remove it:

 

pps_switch_stack#config t
Enter configuration commands, one per line. End with CNTL/Z.
pps_switch_stack(config)#vlan 7
pps_switch_stack(config-vlan)#no ip access-group manage_in in
^
% Invalid input detected at '^' marker.

pps_switch_stack(config-vlan)#

No, you need to remove them from the svi.

 

config t

interface vlan 7

no ip access-group manage_in in

no ip access-group management out

HTH

Well I can now ping the 10.50.7.1 from the switch which I was not able to originally but can't ping any devices like 10.50.7.50

What device is 10.50.7.50?

Do you see its MAC address? sh mac address-table vlan 7

Make sure it is in the right vlan (vlan 7).

Also, if .50 is a window system, the OS firewall may be blocking ping.

 

HTH

Got it!!! Removed that and it started talking!

 

Hi, 

Ensure the ip routing command is enabled. Also double check the Mas and Default Gateway assigned to Vlan 7

 

HTH

Leonardo

Review Cisco Networking for a $25 gift card