CISCO 2960 switch 2 VLAN one vlan not working properly

[gonzalojborjasf]

Hi guys, Im learning to work with cisco switch, this is my scenario:

vlan 10 computers

IP: 192.168.1.10 255.255.255.0

Gateway 192.168.1.1

router is 192.168.1.1

can access internet and devices and pinging normal.

getting IP from DCHP on router.

Vlan 20 cameras

IP 192.168.188.30

cameras are IP static, but I can't ping any device in the same vlan or other camera with static ip.

from console I can ping any device in vlan 10, or gateway and 8.8.8.8 can I get some guidance how to configure to learn

this is for setup a NVR with PoE cameras and computer in different vlan.

NVR IP 192.168.1.6

cameras IP: 192.168.188.2-24

[gonzalojborjasf]

I tried before IP ROUTING but show me an error:

SW01(config)#ip-routing
^
% Invalid input detected at '^' marker.

any suggestion?

This are the choices when I do ip ?:

SW01(config)#ip ?
Global IP configuration subcommands:
access-list Named access-list
accounting-list Select hosts for which IP accounting information is
kept
accounting-threshold Sets the maximum number of accounting entries
accounting-transits Sets the maximum number of transit entries
address-pool Specify default IP address pooling mechanism
admission Network Admission Control (NAC)
alias Alias an IP address to a TCP port
arp IP ARP global configuration
default-gateway Specify default gateway (if not routing IP)
device Device tracking
dhcp Configure DHCP server and relay parameters
dhcp-client Configure parameters for DHCP client operation
dhcp-server Specify address of DHCP server to use
domain IP DNS Resolver
domain-list Domain name to complete unqualified host names.
domain-lookup Enable IP Domain Name System hostname translation
domain-name Define the default domain name
finger finger server
flow-aggregation Configure flow aggregation
flow-cache Configure netflow cache parameters
flow-capture Capture additional netflow information
flow-egress Configure netflow egress
flow-export Specify host/port to send flow statistics
flow-top-talkers Configure netflow top talkers
ftp FTP configuration commands
gdp Router discovery mechanism
gratuitous-arps Generate gratuitous ARPs for PPP/SLIP peer addresses
host Add an entry to the ip hostname table
host-routing Enable host-based routing (proxy ARP and redirect)
hostname Configure hostname types
hp-host Enable the HP proxy probe service
http HTTP server configuration
icmp ICMP options
igmp IGMP global configuration
local Specify local options
name-server Specify address of name server to use
options IP Options treatment
port-map Port to application mapping (PAM) configuration
commands
radius RADIUS configuration commands
rcmd Rcmd commands
reflexive-list Reflexive access list
scp Scp commands
security Specify system wide security information
sla IP Service Level Agreement
source IP source
source-route Process packets with source routing header options
ssh Configure ssh options
sticky-arp Allow the creation of sticky ARP entries
subnet-zero Allow 'subnet zero' subnets
tacacs TACACS configuration commands
tcp Global TCP parameters
telnet Specify telnet options
tftp tftp configuration commands
verify URPF SNMP trap and IP packet header validation commands

[balaji.bandi]

Can you post-show run from switch?

[Richard Burts]

Thanks for the additional information. There are 2 very important statements in that:

also cameras just have IP and subnet but no gateway, and NVR is connected in VLAN 10

all cameras were connected before thru NVR directly

If the cameras were connected to NVR directly then there was no need for a gateway. Now that NVR is not in the same subnet/same vlan then a gateway is needed. If the cameras do not have a gateway then they are not able to communicate with remote subnets.

[gonzalojborjasf]

So I need to setup each camera with a gateway as well., and yes they were connected directly to NVR and now I want to connecting thru the switch

attached is the run config of the switch

if you kindly guide me what will be the best way to setup

[Richard Burts]

There is a very simple error in syntax. You entered 

ip-routing

It should have been 

ip routing

Give that a try and let us know the results.

[gonzalojborjasf]

Well actually I typed correctly and did not work, I have been reading and apparently Catalyst 2960s don't support that option of IP ROUTING or the firmware version perhaps, can you clarify that. I still have the issue

[balaji.bandi]

Can you post show version or show license

Try below :  (not sure is the same case with 15.X IOS)

The switch supports 16 static routes (including user-configured routes and the default route) and any directly connected routes and default routes for the management interface. The switch can have an IP address assigned to each SVI. Before enabling routing, enter the sdm prefer lanbase-routing global configuration command and reload the switch.

show sdm prefer 

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_55_se/configuration/guide/scg_2960/swipstatrout.html#wp1202471

[Richard Burts]

The output of on line help certainly indicates that ip routing is not supported on this switch. The suggestion of 

sum prefer

is interesting. If 

sdm prefer lanbase-routing

is available it would be interesting to see if it changes support for routing.

[gonzalojborjasf]

this option is available:

I applied:

what this command do:?

SW01(config)#sdm prefer lanbase-routing
Changes to the running SDM preferences have been stored, but cannot take effect
until the next reload.
Use 'show sdm prefer' to see what SDM preference is currently active.

[Georg Pauwen]

Hello,

what device is the switch connected to ?

PC/NVR --> Switch --> Router --> Internet

The 'Router' or whatever is connected directly to the Internet, which type/model is that ? 

[Richard Burts]

Thank you for following the suggestion to change the sdm template. I am a bit concerned about this part of the output "The selected template optimizes the resources in the switch to support this level of features for 0 routed interfaces and 255 VLANs." I had hoped to see a number greater than zero for routed interfaces. 

If you use on line help for ip ?, does the output indicate that ip routing is an option?

[gonzalojborjasf]

Router is a Netgear AC3200 model 8000

[Richard Burts]

Thanks for the update. It is good to know that you are now able to configure ip routing. This should enable devices in vlan 10 and vlan 20 to communicate with each other. Can you verify whether this does work or not?

The config uses the command default-gateway to define the next hop for forwarding traffic to outside destinations. That works while the switch is operating as layer 2 switch. Now that ip routing is enabled that command is ignored. You should configure 

ip route 0.0.0.0 0.0.0.0 192.168.1.1

as its replacement.

[gonzalojborjasf]

thanks for your help in advance this is the new sh run after ip routing applied