Cisco 9500s 40X cant pass L3 traffic to each other

[chrisbuchner]

Hi Experts,

I am just about to give up on the 9500s and RMA them. I have 2x 9500 40X's thats connected via fiber both can see each other no problem. But for some reason they cant ping eachother cant pass traffic to eachother ARP isnt working MAC address book kind of works.

The only config on them just to make it work is VLAN 1 with IP 10.0.0.1/24 on Core A and 10.0.0.2/24 on core B and IP routing enabled.

Is there some new service that needs to be enabled for fiber switches to work? 

I have tried full config on them

HSRP works but no traffic

tried 4 different OS

Tried different SFP's ranging from Cisco copper to non Cisco fiber all the same

Only similar issue I saw suggested 16.12.3a but that also didnt work.

What can I try or should I just return them and get something else?

[Leo Laohoo]

If these are on 16.12.X, upgrade them to the latest 17.3.X. 

[chrisbuchner]

Hi Leo,

I have already had them on 17.3.X but I guess it might be worth going all the way up?

[Leo Laohoo]

Based on my PTSD, 16.12.X is toxic to 9300/9400/9500/9600.  

[Georg Pauwen]

Hello,

odd. Can you post the running configs of both switches ? As well as the output of 'sh ver' and 'sh lic' ?

[chrisbuchner]

Hi Georg,

Config is blank at this point, only thing configured is vlan 1 on both with an IP in same range and ip routing enabled thats it.

[Georg Pauwen]

Hello, 

can you try just a simple Ethernet cable between two ports, and both ports being layer 3 (no switchport and an assigned IP address) ? I wonder if the fiber ports are the problem...

[chrisbuchner]

Hi Georg,

There are no copper ports on this switch or do you mean to use a copper gbic?

[chrisbuchner]

I have installed the latest OS available still the same thing...

[chrisbuchner]

Another weird thing is if you connect an access switch like 9200 in between it does the same thing data cant travel over the 9200.

if you connect either 9500 to the 9200 they can ping the 9200. as soon as there is a link with both they stop working.

If you connect the 9500 to another 9300 that is behind a firewall.... its able to ping the other 9500...

so 9500A > 9300 > ASA > 9500B works...

[balaji.bandi]

You mentioned you upgraded to 17.3.3 ( your output still show 16.X IOS please clairfy)

Also is this SVL ? or trational port-channel between Cat 9500A and B ?

[chrisbuchner]

Hi Balaji,

I have upgraded to 17.8.10 now it seems OS doesnt matter I have been on many now in 16 and 17 still the same result.

currently it is just a single Fiber connection on port 10 to port 10 Te1/0/10 and Te1/0/10 I have had it in trunk and access. to force vlan 1 over vlans also doesnt matter it can be any.

[balaji.bandi]

You have upgrade to latest version, we noted (my comment based on the attachment)

can you post both the device config,

show run

show ip interface brief

show ip route

[MHM Cisco World]

please see my below comment

[chrisbuchner]

Hi MHM,

These Cores will sit in separated server rooms and will work with standard HSRP between them. I am looking to find if there is some special cisco license or code needed to get this to work of not then there is no need to go into extensive lengths to make ping work.

but thanks for the suggestion!