Cool. Ok Jon. I'll try it out

Ali Al Habsi · ‎03-31-2015

Hi

I just cant ping the HQ router here. Tried to ping from a PC from different VLANs, no use. For example, when i ping from PC0 to 192.168.2.3 (which is the F1/0 interface of the HQ router) it fails and outputs this message from the cmd:

Reply from 192.168.10.1: Destination host unreachable.

Request timed out.

Ping statistics for 192.168.2.3:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Switch (connected to PC0 via F0/6):

hostname Switch
!
!
!
!
!
spanning-tree mode pvst
!
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 10
switchport mode trunk
switchport voice vlan 10
!
interface FastEthernet0/4
switchport access vlan 10
!
interface FastEthernet0/5
switchport access vlan 10
switchport mode access
switchport voice vlan 10
!
interface FastEthernet0/6
switchport access vlan 10
!
interface FastEthernet0/7
switchport access vlan 10
!
interface FastEthernet0/8
switchport access vlan 10
!
interface FastEthernet0/9
switchport access vlan 10
!
interface FastEthernet0/10
switchport access vlan 10
!
interface FastEthernet0/11
switchport access vlan 10
!
interface FastEthernet0/12
switchport access vlan 10
!
interface FastEthernet0/13
switchport access vlan 10
!
interface FastEthernet0/14
switchport access vlan 10
!
interface FastEthernet0/15
switchport access vlan 10
!
interface FastEthernet0/16
switchport access vlan 10
!
interface FastEthernet0/17
switchport access vlan 10
!
interface FastEthernet0/18
switchport access vlan 10
!
interface FastEthernet0/19
switchport access vlan 10
!
interface FastEthernet0/20
switchport access vlan 10
!
interface FastEthernet0/21
switchport access vlan 10
!
interface FastEthernet0/22
switchport access vlan 10
!
interface FastEthernet0/23
switchport access vlan 10
!
interface FastEthernet0/24
switchport access vlan 10
switchport mode access
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
!
!
!
line con 0
!
line vty 0 4
login
line vty 5 15
login
!
!
end

MSHQ1(connected to MSHQ3 via F0/1):

ip routing

!

spanning-tree mode pvst

!

interface FastEthernet0/1

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/2

!

interface FastEthernet0/3

!

interface FastEthernet0/4

!

interface FastEthernet0/5

!

interface FastEthernet0/6

!

interface FastEthernet0/7

!

interface FastEthernet0/8

!

interface FastEthernet0/9

!

interface FastEthernet0/10

!

interface FastEthernet0/11

!

interface FastEthernet0/12

!

interface FastEthernet0/13

!

interface FastEthernet0/14

!

interface FastEthernet0/15

!

interface FastEthernet0/16

!

interface FastEthernet0/17

!

interface FastEthernet0/18

!

interface FastEthernet0/19

!

interface FastEthernet0/20

!

interface FastEthernet0/21

!

interface FastEthernet0/22

!

interface FastEthernet0/23

!

interface FastEthernet0/24

!

interface GigabitEthernet0/1

no switchport

ip address 192.168.1.4 255.255.255.0

duplex auto

speed auto

!

interface GigabitEthernet0/2

!

interface Vlan1

no ip address

shutdown

!

interface Vlan10

ip address 192.168.10.1 255.255.255.192

!

interface Vlan20

ip address 192.168.10.65 255.255.255.192

!

interface Vlan30

ip address 192.168.10.129 255.255.255.192

!

interface Vlan40

ip address 192.168.10.193 255.255.255.192

!

interface Vlan50

ip address 192.168.20.1 255.255.255.224

!

interface Vlan60

ip address 192.168.20.33 255.255.255.240

!

router ospf 1

log-adjacency-changes

network 192.168.1.0 0.0.0.255 area 0

network 192.168.2.0 0.0.0.255 area 0

network 192.168.10.0 0.0.0.63 area 0

network 192.168.20.0 0.0.0.15 area 0

!

ip default-gateway 192.168.1.3

ip classless

ip route 192.168.1.0 255.255.255.0 192.168.10.0

ip route 192.168.1.0 255.255.255.0 192.168.10.64

ip route 192.168.1.0 255.255.255.0 192.168.10.128

ip route 192.168.1.0 255.255.255.0 192.168.10.192

ip route 192.168.1.0 255.255.255.0 192.168.20.0

ip route 192.168.1.0 255.255.255.0 192.168.20.32

!

ip flow-export version 9

!

line con 0

!

line aux 0

!

line vty 0 4

login

!

end

MSHQ2:

hostname Switch

!

ip routing

!

spanning-tree mode pvst

!

interface FastEthernet0/1

!

interface FastEthernet0/2

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/3

!

interface FastEthernet0/4

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/5

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/6

!

interface FastEthernet0/7

!

interface FastEthernet0/8

!

interface FastEthernet0/9

!

interface FastEthernet0/10

!

interface FastEthernet0/11

!

interface FastEthernet0/12

!

interface FastEthernet0/13

!

interface FastEthernet0/14

!

interface FastEthernet0/15

!

interface FastEthernet0/16

!

interface FastEthernet0/17

!

interface FastEthernet0/18

!

interface FastEthernet0/19

!

interface FastEthernet0/20

!

interface FastEthernet0/21

!

interface FastEthernet0/22

!

interface FastEthernet0/23

!

interface FastEthernet0/24

!

interface GigabitEthernet0/1

no switchport

ip address 192.168.2.4 255.255.255.0

duplex auto

speed auto

!

interface GigabitEthernet0/2

!

interface Vlan1

no ip address

shutdown

!

interface Vlan10

ip address 192.168.10.1 255.255.255.192

!

interface Vlan20

ip address 192.168.10.65 255.255.255.192

!

interface Vlan30

ip address 192.168.10.129 255.255.255.192

!

interface Vlan40

ip address 192.168.10.193 255.255.255.192

!

interface Vlan50

ip address 192.168.20.1 255.255.255.224

!

interface Vlan60

ip address 192.168.20.33 255.255.255.240

!

router ospf 1

log-adjacency-changes

network 192.168.2.0 0.0.0.255 area 0

network 192.168.1.0 0.0.0.255 area 0

network 192.168.10.0 0.0.0.63 area 0

network 192.168.20.0 0.0.0.15 area 0

!

ip default-gateway 192.168.2.3

ip classless

ip route 192.168.1.0 255.255.255.0 192.168.10.0

ip route 192.168.1.0 255.255.255.0 192.168.10.64

ip route 192.168.1.0 255.255.255.0 192.168.10.128

ip route 192.168.1.0 255.255.255.0 192.168.10.192

ip route 192.168.1.0 255.255.255.0 192.168.20.0

ip route 192.168.1.0 255.255.255.0 192.168.20.32

!

ip flow-export version 9

!

line con 0

!

line aux 0

!

line vty 0 4

login

!

end

MSHQ3:

hostname Switch

!

ip dhcp excluded-address 192.168.10.0 192.168.10.1

ip dhcp excluded-address 192.168.10.64 192.168.10.65

ip dhcp excluded-address 192.168.10.128 192.168.10.129

ip dhcp excluded-address 192.168.10.192 192.168.10.193

ip dhcp excluded-address 192.168.20.0 192.168.20.1

ip dhcp excluded-address 192.168.20.32 192.168.20.33

!

ip dhcp pool SALES

network 192.168.10.0 255.255.255.192

default-router 192.168.10.1

option 150 ip 10.0.0.1

ip dhcp pool IT

network 192.168.10.64 255.255.255.192

default-router 192.168.10.65

option 150 ip 10.0.0.1

ip dhcp pool PROCUREMENT

network 192.168.10.128 255.255.255.192

default-router 192.168.10.129

ip dhcp pool ACCOUNTS&FINANCE

network 192.168.10.192 255.255.255.192

default-router 192.168.10.193

ip dhcp pool ADMINISTRATION&PRJECTS

network 192.168.20.0 255.255.255.224

default-router 192.168.20.1

ip dhcp pool DATACENTER

network 192.168.20.32 255.255.255.240

default-router 192.168.20.33

!

ip routing

!

spanning-tree mode rapid-pvst

!

interface FastEthernet0/1

switchport access vlan 10

switchport trunk encapsulation dot1q

switchport mode trunk

switchport voice vlan 100

!

interface FastEthernet0/2

switchport access vlan 20

switchport trunk encapsulation dot1q

switchport mode trunk

switchport voice vlan 100

!

interface FastEthernet0/3

switchport access vlan 30

switchport trunk encapsulation dot1q

switchport mode access

!

interface FastEthernet0/4

switchport access vlan 40

switchport trunk encapsulation dot1q

switchport mode access

!

interface FastEthernet0/5

switchport access vlan 50

switchport trunk encapsulation dot1q

switchport mode access

!

interface FastEthernet0/6

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/7

switchport access vlan 60

switchport mode access

!

interface FastEthernet0/8

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/9

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/10

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/11

!

interface FastEthernet0/12

!

interface FastEthernet0/13

!

interface FastEthernet0/14

!

interface FastEthernet0/15

!

interface FastEthernet0/16

!

interface FastEthernet0/17

!

interface FastEthernet0/18

!

interface FastEthernet0/19

!

interface FastEthernet0/20

!

interface FastEthernet0/21

!

interface FastEthernet0/22

!

interface FastEthernet0/23

!

interface FastEthernet0/24

!

interface GigabitEthernet0/1

!

interface GigabitEthernet0/2

!

interface Vlan1

no ip address

shutdown

!

interface Vlan10

ip address 192.168.10.1 255.255.255.192

!

interface Vlan20

ip address 192.168.10.65 255.255.255.192

!

interface Vlan30

ip address 192.168.10.129 255.255.255.192

!

interface Vlan40

ip address 192.168.10.193 255.255.255.192

!

interface Vlan50

ip address 192.168.20.1 255.255.255.224

!

interface Vlan60

ip address 192.168.20.33 255.255.255.240

!

interface Vlan99

ip address 192.168.20.65 255.255.255.240

!

router ospf 1

log-adjacency-changes

network 192.168.2.0 0.0.0.255 area 0

network 192.168.1.0 0.0.0.255 area 0

network 192.168.10.0 0.0.0.63 area 0

network 192.168.20.0 0.0.0.15 area 0

!

ip classless

ip route 192.168.1.0 255.255.255.0 192.168.10.0

ip route 192.168.1.0 255.255.255.0 192.168.10.64

ip route 192.168.1.0 255.255.255.0 192.168.10.128

ip route 192.168.1.0 255.255.255.0 192.168.10.192

ip route 192.168.1.0 255.255.255.0 192.168.20.0

ip route 192.168.1.0 255.255.255.0 192.168.20.32

!

ip flow-export version 9

!

line con 0

!

line aux 0

!

line vty 0 4

login

!

end

MSHQ4:
hostname Switch

!

ip routing

!

spanning-tree mode pvst

!

interface FastEthernet0/1

!

interface FastEthernet0/2

!

interface FastEthernet0/3

!

interface FastEthernet0/4

!

interface FastEthernet0/5

!

interface FastEthernet0/6

switchport access vlan 60

switchport mode access

!

interface FastEthernet0/7

!

interface FastEthernet0/8

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/9

switchport access vlan 60

!

interface FastEthernet0/10

switchport access vlan 60

switchport mode access

!

interface FastEthernet0/11

switchport access vlan 60

!

interface FastEthernet0/12

switchport trunk encapsulation dot1q

switchport mode trunk

!

interface FastEthernet0/13

!

interface FastEthernet0/14

!

interface FastEthernet0/15

!

interface FastEthernet0/16

!

interface FastEthernet0/17

!

interface FastEthernet0/18

!

interface FastEthernet0/19

!

interface FastEthernet0/20

!

interface FastEthernet0/21

!

interface FastEthernet0/22

!

interface FastEthernet0/23

!

interface FastEthernet0/24

!

interface GigabitEthernet0/1

!

interface GigabitEthernet0/2

!

interface Vlan1

no ip address

shutdown

!

interface Vlan10

ip address 192.168.10.1 255.255.255.192

!

interface Vlan20

ip address 192.168.10.65 255.255.255.192

!

interface Vlan30

ip address 192.168.10.129 255.255.255.192

!

interface Vlan40

ip address 192.168.10.193 255.255.255.192

!

interface Vlan50

ip address 192.168.20.1 255.255.255.224

!

interface Vlan60

ip address 192.168.20.33 255.255.255.240

!

router ospf 1

log-adjacency-changes

network 192.168.2.0 0.0.0.255 area 0

network 192.168.1.0 0.0.0.255 area 0

network 192.168.10.0 0.0.0.63 area 0

network 192.168.20.0 0.0.0.15 area 0

!

ip classless

ip route 192.168.1.0 255.255.255.0 192.168.10.0

ip route 192.168.1.0 255.255.255.0 192.168.10.64

ip route 192.168.1.0 255.255.255.0 192.168.10.128

ip route 192.168.1.0 255.255.255.0 192.168.10.192

ip route 192.168.1.0 255.255.255.0 192.168.20.0

ip route 192.168.1.0 255.255.255.0 192.168.20.32

!

ip flow-export version 9

!

line con 0

!

line aux 0

!

line vty 0 4

login

!

end

Router(HQ):

hostname Router

!

no ip cef

no ipv6 cef

!

spanning-tree mode pvst

!

interface FastEthernet0/0

ip address 192.168.1.3 255.255.255.0

duplex auto

speed auto

!

interface FastEthernet0/1

no ip address

duplex auto

speed auto

shutdown

!

interface Serial0/0/0

no ip address

clock rate 2000000

!

interface Serial0/0/1

no ip address

clock rate 2000000

!

interface FastEthernet1/0

ip address 192.168.2.3 255.255.255.0

duplex auto

speed auto

!

interface Vlan1

no ip address

shutdown

!

interface Vlan10

ip address 192.168.10.1 255.255.255.192

!

interface Vlan20

ip address 192.168.10.65 255.255.255.192

!

interface Vlan30

ip address 192.168.10.129 255.255.255.192

!

interface Vlan40

ip address 192.168.10.193 255.255.255.192

!

interface Vlan50

ip address 192.168.20.1 255.255.255.224

!

interface Vlan60

ip address 192.168.20.33 255.255.255.240

!

interface Vlan99

ip address 192.168.20.65 255.255.255.240

!

router ospf 1

log-adjacency-changes

network 192.168.2.0 0.0.0.255 area 0

network 192.168.3.0 0.0.0.255 area 0

network 192.168.10.0 0.0.0.63 area 0

network 192.168.20.0 0.0.0.15 area 0

!

ip classless

ip route 0.0.0.0 0.0.0.0 FastEthernet0/0

ip route 0.0.0.0 0.0.0.0 FastEthernet1/0

!

ip flow-export version 9

!

no cdp run

!

line con 0

!

line aux 0

!

line vty 0 4

login

!

end

The network is large, it'll be better if you can check the packet tracer file
Can anyone please help me?

I'll be glad if someone could help.Topology image is attached and the Packet Tracer file is attached here too.

Ali Al Habsi · ‎04-01-2015

Anyone? :-(

Jon Marshall · ‎04-01-2015

Most people on here don't use PT so if you need help then please post the topology diagram and the configurations as attachments and then someone can look at them for you.

Jon

Jon Marshall · ‎04-02-2015

Your configurations are not making much sense.

You have the same vlan interfaces with the same IP addresses on all devices and multiple static routes for 192.168.1.0/24.

This is what you should change -

1) the clients only connect to MSHQ3 so remove all vlan interfaces off all the other switches for the client vlans.

Also remove the server vlan interface off MSHQ3

2) the server vlan only connects to MSHQ4 so remove the server vlan off all other switches and remove all the client vlan interfaces off MSHQ4

3) interconnect all your switches with L3 links because you are routing vlans locally on MSHQ3 and MSHQ4 so there is no need for any L2 links between switches.

Note also in a true routed design MSHQ3 should not connect to MSHQ4 ie. traffic between those devices goes via MSHQ1 and MSHQ2

4) remove all static routes for 192.168.1.0/24 from all devices

5) run OSPF on all devices and only advertise the locally connected subnets off each device.

For the switch interconnects use new IP subnets, don't reuse any of your existing vlan subnets.

If you do all of the above then you have a routed access design with your distribution switches, MSHQ1 and MSHQ2 routing between access layer switches and the router.

If you are trying to achieve something else other than a routed access layer design then please come back and clarify.

But either way what you have now is not good and will not work properly.

Jon

Ali Al Habsi · ‎04-02-2015

Hi Jon,

Thanks for your help there, but what do you mean by "interconnect all your switches with L3 links" ? OSPF???

Jon Marshall · ‎04-02-2015

I mean used routed ports ie.

int <x/y>
no switchport
ip address x.x.x.x <subnet mask>

each interconnect uses a different IP subnet usually with a 255.255.255.252 subnet mask as you only need two useable IPs, one for each end of the connection.

Then you include that subnet and any other local subnets in the OSPF configuration.

Note between MSHQ1 and MSHQ2 and also between MSHQ3 and MHSQ4 you have two connections each.

With those you can either use single L3 links as above each using it's own IP subnet and OSPF should see equal cost paths or you can use a L3 etherchannel for both ports.

Up to you.

Jon

Ali Al Habsi · ‎04-02-2015

I see. I'll use etherchannel then. Thanks for your help again Jon. Im still making some basic mistakes, but im learning. :-)

Jon Marshall · ‎04-02-2015

No problem.

If you make all those changes and it still isn't working then by all means come back and we can take it from there.

Just to say again, what you are doing here is creating a routed access layer design ie. the switches with clients connected are L3 and you route to the distribution switches.

This is not as common as using L2 from the access layer but it is still a valid design and works well but it means you can't have the same vlan/IP subnet on multiple access switches which from the look of your topology you don't.

Also as I said previously with L3 in the access layer you don't usually interconnect access switches so you wouldn't normally connect MSHQ3 direct to MSHQ4 ie. traffic between the clients and the servers would go via your distribution switches, MSHQ1 and MSHQ2.

It will still work with the interconnection but just wanted to clarify that.

Like I say any more issues just post back.

Jon

Ali Al Habsi · ‎04-02-2015

Cool. Ok Jon. I'll try it out. I'll let you know if there is any issues. Thanks a lot.

CANT PING HQ ROUTER!