extended ip commands dont work

[SC856]

Hello,

will the following config  on a vlan interface on a layer 3 switch , stop me being able to ping 10.15.1.1  .......it is the default gateway for a vlan?

ip address 10.15.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp

I dont seem to get any response to pings when pinging from one of the access switch interfaces in this vlan.  I have tried extended pings.

The access switches are trunking the vlan (ie., it is allowed) in both directions on the interfaces between the access switch and core switch ?

Thankyou

[Reza Sharifi]

Hi,

You should be able to ping it from the access switch. If the access switch is layer-2 only, make sure it has an IP on the management interface, so the ping can be sourced from that.

HTH

[SC856]

Here is the configuration, inherited and the first time I have to add another vlan
Note : on the core switch VRFs are also configured and sVIs are within VRFS

UNMANAGED SWITCH IS CONNECTED TO INT FA0/9 ON ACCESS SWITCH
ACCESS SWITCH INTERFACE CONFIG
interface FastEthernet0/9
description **HVAC SYSTEM**
switchport access vlan 115
switchport mode access
no logging event link-status
no snmp trap link-status
spanning-tree portfast
spanning-tree bpduguard enable


CISCO 4500 CORE SWITCH CONFIG - SHOWS THAT VLAN 115 INTERFACE IS UP
Interface IP-Address OK? Method Status Protocol
Vlan1 unassigned YES NVRAM up up
Vlan11 unassigned YES NVRAM administratively down down
Vlan100 10.10.0.1 YES NVRAM up up
Vlan101 192.168.8.11 YES NVRAM down down
Vlan110 10.10.25.1 YES NVRAM up up
Vlan111 10.10.26.1 YES NVRAM up up
Vlan114 10.200.8.254 YES NVRAM up up
Vlan115 10.15.1.1 YES manual up up

VLAN 115 interface config
interface Vlan115
description WH_BMS_HVAC
ip address 10.15.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
end
The management interface is set on access switch ........vlan 990 ip address 10.10.50.4 (?) diff ip range
I can ping another SVI's on the core switch ie., 10.10.16.1 with the source address of VLAN 990,
I still cannot ping 10.15.1.1 on the core switch with a source address of VLAN 990
Note : on the core switch VRFs are also configured and sVIs are within VRFS -

[SC856]

Further information....Thankyou for spending the time.

All SVI’s that Have already existed Historically on the core switch are all in VRFs. The management interface on the access switch is in the same VRF as the existing SVI’s on the core switch ie vrf for voice and data.  Should my new interface  be in the same vrf  for pings to work from mgt interface?  However, my newly created svi On the core should be in a separate vrf which exists for building mgt system and hence not the same vrf as mgt interface.   How do I test connectivity is working from Vlan on access switch to an SVI on the core, when vrfs are in play?

[Deepak Kumar]

Could you share the complete switches configuration as a core and access switch?

[Deepak Kumar]

Hi,

make sure that VLAN is not pruned. Also, the access switch must have an SVI IP address configured and it must be in up|up state. If it has SVI IP address on different ID(VLAN) then IP routing must be disabled and default-gateway must be added.

[jcockburn]

Hi,

If your question is about if the other 3 settings configured:

no ip redirects
no ip unreachables
no ip proxy-arp

will prevent any pings, the answer in no.

But it is unclear from where (which source IP) you try to ping.