Solved: Re: Cisco 2960 inter-vlan routing - unable to access internet - Page 2

job · ‎05-24-2021

I'm working with a C2960 running c2960-lanbasek9-mz.122-55.SE12 that supports routing. I added a couple of VLANs (we'll call them vlan2, vlan3,vlan4, vlan5 and vlan6 etc...) in addition to vlan1 that is created by default. The VLAN IP's assigned to vlan1 is DHCP (192.168.1.101), vlan2 is 192.168.2.1, vlan3 is 192.168.3.1)

IP routing is enabled.

When I put a host on vlan2, it can ping the IP address of vlan1 (192.168.1.101) but nothing else on that VLAN. As my default gateway is on vlan1, hosts on vlan2 or others get no internet access.

Any pointers on where I should be looking?

please help

Building configuration...

Current configuration : 4132 bytes
!
version 12.2
no service pad

no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
!
!
!
no AAA new-model
system MTU routing 1500
IP routing
!
IP DHCP pool vlan2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
!
IP DHCP pool vlan3
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
!
IP DHCP pool vlan4
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
!
IP DHCP pool vlan5
network 192.168.5.0 255.255.255.0
default-router 192.168.5.1
!
IP DHCP pool vlan6
network 192.168.6.0 255.255.255.0
default-router 192.168.6.1
!
!
!
!

!
!

certificate self-signed 01
3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31343533 37393430 3438301E 170D3933 30333031 30303032
30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 34353337
39343034 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CB35 B8A65710 1B2AD283 77931DBC 76C1BC1E 25059AFC DA9D2CDD C317EB77
4AD4D9C8 E2FA44F3 7F015C2D F7626C86 CCBBD3EF 2CAF3BEC 089CF7EE 6E9E4FAC
727AD419 85189BC5 525C13AB 73D6C8D6 57506F44 2FB2F391 EEEB1475 8EE97C99
9B4DB79E F25EAE05 A358CA45 563B4115 28CEEB9E DF059F3D 3EBA7969 7A100E09
60D50203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603
551D1104 0B300982 07537769 7463682E 301F0603 551D2304 18301680 145CC483
6125D8B4 A6CC1C89 B2877F3E F2F51812 34301D06 03551D0E 04160414 5CC48361
25D8B4A6 CC1C89B2 877F3EF2 F5181234 300D0609 2A864886 F70D0101 04050003
818100C2 5E2FA06C B2701E7C F16434AE 1310F355 AC33DFF9 76F1C913 5785DF7F
5A5EAA6E 0C4A8C36 8B3BE429 5190436D 43B7CA34 0F05B081 52A6DBC6 790E38FD
CD55AC20 ED6C186D B623AD2A 7210CF6C C11D85AA 666F75B9 703378AB DFD591D0
3F1058B7 EFABBAD0 9C94EB35 886AB687 AF78C6E6 9D072A43 48EA6D38 8ABD0D94 71F885
quit
!
!
!
spanning-tree mode PVST
spanning-tree extend system-id
!
VLAN internal allocation policy ascending
!
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
switchport access VLAN 2
switchport mode access
!
interface FastEthernet0/4
switchport access VLAN 3
switchport mode access
!
interface FastEthernet0/5
switchport access VLAN 4
switchport mode access
!
interface FastEthernet0/6
switchport access VLAN 4
switchport mode access
!
interface FastEthernet0/7
switchport access VLAN 4
switchport mode access
!
interface FastEthernet0/8
switchport access VLAN 5
switchport mode access
!
interface FastEthernet0/9
switchport access VLAN 5
switchport mode access
!
interface FastEthernet0/10
switchport access VLAN 6
switchport mode access
!
interface FastEthernet0/11
switchport access VLAN 6
switchport mode access
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
IP address 192.168.1.101 255.255.255.0
!
interface Vlan2
IP address 192.168.2.1 255.255.255.0
!
interface Vlan3
IP address 192.168.3.1 255.255.255.0
!
interface Vlan4
IP address 192.168.4.1 255.255.255.0
!
interface Vlan5
IP address 192.168.5.1 255.255.255.0
!
interface Vlan6
IP address 192.168.6.1 255.255.255.0
!
IP http server
IP http secure-server
IP route 0.0.0.0 0.0.0.0 192.168.1.1

!
line con 0
line VTY 0 4
login
line VTY 5 15
login
!
end

balaji.bandi · ‎05-27-2021

I do not see any major issue other than this command :

try to remove this :

no default-router 192.168.1.1 ( you already have ip route added)

You mentioned user able to get DHCP IP address ? from the other VLAN are you able to ping 1.1.1.1 or 8.8.8.8 before try to browse internet using browser.

also can you post other VLAN (not VLAN1) Device connected ( ipconfig /all ) out put

can you post show vlan from Switch.

same time check on router show nat translation, ? from PC other vlan are you able to ping 192.168.1.1 ?

Can you also let us know what interface in switch the router connected ?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Richard Burts · ‎05-27-2021

The suggestion to remove default-router 192.168.1.1 seems to associate this command with a routing statement, but it is part of a DHCP pool and is very appropriate there. I wold comment that since there is a DHCP pool for vlan 1 on both the router and on the switch that one of the pools should be removed. And since the pool on the router has parameters that are not in the pool on the switch I would suggest removing the dhcp pool for vlan 1 on the switch.

I would suggest that you remove this from the router configuration

ip route 192.168.1.0 255.255.255.0 192.168.1.2

It is not a problem. But it is not needed and would not be used. 192.168.1.0 is a connected subnet and connected subnets are preferred over any static route for that subnet.

I do not see any serious issues with the configuration that are posted and would expect them to work, especially if devices connected in vlan 1 are working. Can you confirm that a device connected in vlan 1 does have Internet access? If other vlans are not working I suspect that it is something to do with the physical setup. To try to figure out what is going on would you post these things:

On the router

show ip route

show ip interface brief

show cdp neighbor

On the switch

show cdp neighbor

show ip route

show interface status

show vlan

show arp

and tell us what device (connected on which switch interface) you tested with. And from that device what is its IP address, mask, and default gateway (ipconfig is the easy way to do this)

HTH

Rick

job · ‎05-26-2021

- switch vlan interfaces (other than vlan 1) are down. What is going on here? Perhaps posting the output of show interface status from the switch might help shed light on this.

because i didn't plug in the cable if i plug in they status change to up

- router interface to switch show as down. What is going on here?

i think i didn't give the switch static ip and default-gateway like(ip address 192.168.1.2 255.255.255.0 default-gateway 192.168.1.1)

i think if i give it the router states change to up, but is it necessary to give the switch ?