cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
680
Views
0
Helpful
20
Replies

Cisco nexos 9.37 int vlan 1 not able to ping gateway

We have sonic wall firewall enabled dot1q with sub interface vlan 1 vlan 2 vlan 3 vlan 21 and vlan 22 on nexus switch we have enabled inter vlan feature and configured interface vlan 1 with ip address 192.168.1.254 and default route point to sonic wall interface ip address 192.168.1.1 when we try ping to 192.168.1.1 getting destination host not reachable and no route found

20 Replies 20

Pavel Tarakanov
Cisco Employee
Cisco Employee

How firewall and the switch connected? Please provide configuration for ports used for connection.

 

Most likely you need to move ports to switchport mode:

 

int eth 1/1

switchport

switchport mode trunk

M02@rt37
VIP
VIP

Hello @arunkumarunique86 

What about hte Cisco Interface's config ? It should be a Trunk mode.

Also you ant to ping a Firewall... ensure that policy allowed this and check also from SonicWall if you see icmp echo-request.

 

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

our ethernet 1/1 is connected to the pc with ip address 192.168.1.6/24 was able to ping both interface vlan 1 192.168.1.254 and sonic firewall interface ip address 192.168.1.1

Check mac address and arp table for correct records.

Screenshot 2024-08-02 164005.png

arp comes out incomplete 

Can switch ping/resolve ARP for any other host in this VLAN?

on nexus switch

interface eth1/47

switchport mode trunk

switchport trunk allowed vlan 1-25

exit

interface vlan 1

ip address 192.168.1.254/24

no shut

exit 

ip route 0.0.0.0 0.0.0.0 192.168.1.1

end

ping 192.168.1.1

i am getting destination host unreachable we ping 192.168.1.1 from switch is there any feature need to be enabled or disabled

@arunkumarunique86 

On Switch, ping 192.168.1.1 source 192.168.1.254 failed ?

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

yes failed also

@arunkumarunique86 

clear ARP table

and retry

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

tried few times still the same

i can give you remote access through team viewer tomorrow morning 9:00 am Singapore time

anything we are missing out

Review Cisco Networking for a $25 gift card