Solved: Re: How to ping to Seperate Vlans from 2 Diffrent Switches

Hari Kumar Raja · ‎09-10-2013

Hi ,

I have a 2 Cisco 3750 Switches in my company network in 2 locations ( 1 Location 10.10.1.0 and other location 10.10.0.0 ) , i have created one more vlan in my primary site and give vlan ip as 10.10.2.0 , now i want to ping 10.10.0.x subnets and systems from 10.10.2.0 network viseversa , but i am unable to ping any host in 10.10.0.x , can any one help me on this.

Thanks

Hari

kcnajaf · ‎09-11-2013

Hi Hari,

Glad to hear that this is working as expected. Which ip address did you point your static route to? Is it to 35 or 36?

Regards

Najaf

View solution in original post

kcnajaf · ‎09-11-2013

Hi Hari,

Is your rquirment is to allow only ping from 10.10.2.x network to 10.10.33.x network? None of the other ip subnet should not be able to ping 10.10.33.x?

You could use an extented ACL to achive this and apply the ACL on VLAN 33.

Regards

Najaf

View solution in original post

Hari Kumar Raja · ‎09-10-2013

Can any one help me pls on this , i am not femiler with cisco , i have a 2 routers in both locations and i am able to trace 10.10.1.0 from 10.10.0.1 and not able to trace 10.10.2.0 from 10.10.0.1 , belwo are the trace details and routing tables from both switches.

Phoenix-VSEZ-CORE#traceroute 10.10.1.36

Type escape sequence to abort.

Tracing the route to 10.10.1.36

1 10.10.0.3 8 msec 0 msec 9 msec

2 10.10.24.1 0 msec 8 msec 8 msec

3 10.10.1.36 9 msec * 9 msec

--------------------------------------------------------------------

Phoenix-VSEZ-CORE#traceroute 10.10.2.36

Type escape sequence to abort.

Tracing the route to 10.10.2.36

1 10.10.0.3 0 msec 0 msec 0 msec

2 10.10.24.1 0 msec 17 msec 0 msec

3 10.10.24.1 !H * !H

--------------------------------------------------------------------

From 10.10.0.1 switch :

ip classless

ip route 0.0.0.0 0.0.0.0 10.10.33.5

ip route 10.10.0.0 255.255.255.0 10.10.0.3

ip route 10.10.1.0 255.255.255.0 10.10.0.3

ip route 10.10.2.0 255.255.255.0 10.10.0.3

ip route 10.10.5.0 255.255.255.0 10.10.0.3

ip route 10.10.25.0 255.255.255.0 10.10.0.3

ip route 10.10.32.0 255.255.255.0 10.10.0.3

------------------------------------------------------------------------

From 10.10.1.36 Switch :

ip classless

ip route 0.0.0.0 0.0.0.0 10.10.1.43

ip route 10.10.0.0 255.255.255.0 10.10.1.199

ip route 10.10.2.0 255.255.255.0 10.10.1.199

ip route 10.10.25.0 255.255.255.0 10.10.1.35

ip route 10.10.32.0 255.255.255.0 10.10.1.199

ip route 10.10.33.0 255.255.255.0 10.10.1.199

ip route 10.10.34.0 255.255.255.0 10.10.1.199

ip route 10.10.35.0 255.255.255.0 10.10.1.199

ip route 172.16.20.0 255.255.255.0 10.10.1.35

ip route 192.168.1.0 255.255.255.0 10.10.1.35

ip route 192.168.6.0 255.255.255.0 10.10.1.35

ip route 192.168.99.0 255.255.255.0 10.10.1.35

Thanks in advance

kcnajaf · ‎09-10-2013

Hi Hari,

It would help if you could let us know how these devices are connected physically (i mean a diagram would help) along with show ip int brief output from the devices.

Looking at the trace it looks like the device which has ip address 10.10.24.1 doesn't have a route to 10.10.2.x network.

Hope that helps

Regards

Najaf

Hari Kumar Raja · ‎09-10-2013

Hi Nijaf,

Thanks for your reply , as i told you i am a new user for this domain , as suggested by you i have added ip route in 10.10.24.1 and below are the modification details details , after adding the route i tried to ping 10.10.2.36 from 10.10.0.1 swtich and the resutl was below , i tried to traceroute 10.10.2.36 from 10.10.0.1 and the result was below , but i am unable to ping any ip in 10.10.2.x network .

ip route 10.10.0.0 255.255.255.0 10.10.24.2

ip route 10.10.2.0 255.255.255.0 10.10.24.2

ip route 10.10.25.0 255.255.255.0 10.10.1.35

ip route 10.10.32.0 255.255.255.0 10.10.24.2

ip route 10.10.33.0 255.255.255.0 10.10.24.2

ip route 10.10.34.0 255.255.255.0 10.10.24.2

ip route 10.10.35.0 255.255.255.0 10.10.24.2

--------------------------------------------------------------------

From 10.10.0.1 Switch ( 3750)

Phoenix-VSEZ-CORE# show ip int brief

Interface IP-Address OK? Method Status Protocol

Vlan1 unassigned YES NVRAM administratively down down

Vlan31 10.10.0.1 YES NVRAM up up

Vlan32 10.10.32.1 YES NVRAM up up

Vlan33 10.10.33.1 YES NVRAM up up

Vlan34 10.10.34.1 YES NVRAM up up

Vlan35 10.10.35.1 YES NVRAM up up

FastEthernet0 unassigned YES NVRAM administratively down down

GigabitEthernet1/0/1 unassigned YES unset up up

GigabitEthernet1/0/2 unassigned YES unset up up

GigabitEthernet1/0/3 unassigned YES unset up up

GigabitEthernet1/0/4 unassigned YES unset down down

GigabitEthernet1/0/5 unassigned YES unset down down

GigabitEthernet1/0/6 unassigned YES unset down down

GigabitEthernet1/0/7 unassigned YES unset down down

GigabitEthernet1/0/8 unassigned YES unset down down

GigabitEthernet1/0/9 unassigned YES unset down down

GigabitEthernet1/0/10 unassigned YES unset up up

GigabitEthernet1/0/11 unassigned YES unset down down

GigabitEthernet1/0/12 unassigned YES unset down down

GigabitEthernet1/0/13 unassigned YES unset down down

GigabitEthernet1/0/14 unassigned YES unset down down

GigabitEthernet1/0/15 unassigned YES unset down down

GigabitEthernet1/0/16 unassigned YES unset down down

GigabitEthernet1/0/17 unassigned YES unset down down

GigabitEthernet1/0/18 unassigned YES unset down down

GigabitEthernet1/0/19 unassigned YES unset up up

GigabitEthernet1/0/20 unassigned YES unset down down

GigabitEthernet1/0/21 unassigned YES unset down down

GigabitEthernet1/0/22 unassigned YES unset down down

GigabitEthernet1/0/23 unassigned YES unset down down

GigabitEthernet1/0/24 unassigned YES unset up up

GigabitEthernet1/1/1 unassigned YES unset up up

GigabitEthernet1/1/2 unassigned YES unset down down

GigabitEthernet1/1/3 unassigned YES unset down down

GigabitEthernet1/1/4 unassigned YES unset down down

Te1/1/1 unassigned YES unset down down

Te1/1/2 unassigned YES unset down down

Phoenix-VSEZ-CORE#ping 10.10.2.36

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.2.36, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

-----------------------------------------------------------------

Phoenix-VSEZ-CORE#traceroute 10.10.2.36

Type escape sequence to abort.

Tracing the route to 10.10.2.36

1 10.10.0.3 0 msec 0 msec 0 msec

2 10.10.24.1 0 msec 0 msec 8 msec

3 10.10.24.2 0 msec 17 msec 0 msec

4 10.10.24.1 8 msec 8 msec 9 msec

5 10.10.24.2 8 msec 9 msec 8 msec

6 10.10.24.1 9 msec 8 msec 8 msec

7 10.10.24.2 9 msec 8 msec 9 msec

8 10.10.24.1 8 msec 8 msec 8 msec

9 10.10.24.2 9 msec 17 msec 8 msec

10 10.10.24.1 8 msec 8 msec 17 msec

11 10.10.24.2 8 msec 8 msec 17 msec

12 10.10.24.1 8 msec 33 msec 42 msec

13 10.10.24.2 42 msec 42 msec 9 msec

14 10.10.24.1 9 msec 17 msec 16 msec

15 10.10.24.2 9 msec 17 msec 17 msec

16 10.10.24.1 17 msec 34 msec 16 msec

17 10.10.24.2 17 msec 9 msec 17 msec

18 10.10.24.1 17 msec 17 msec 50 msec

19 10.10.24.2 17 msec 59 msec 34 msec

20 10.10.24.1 17 msec 17 msec 16 msec

21 10.10.24.2 17 msec 25 msec 25 msec

22 10.10.24.1 25 msec 16 msec 25 msec

23 10.10.24.2 17 msec 16 msec 26 msec

24 10.10.24.1 25 msec 17 msec 25 msec

25 10.10.24.2 25 msec 16 msec 34 msec

26 10.10.24.1 25 msec 25 msec 25 msec

27 10.10.24.2 25 msec 42 msec 26 msec

28 10.10.24.1 25 msec 25 msec 34 msec

29 10.10.24.2 25 msec 26 msec 25 msec

30 10.10.24.1 33 msec 34 msec 25 msec

-------------------------------------------------------------------------------

From 10.10.1.36 Switch ( 3750)

L3-PHOENIXCORP#sh ip interface brief

Interface IP-Address OK? Method Status Protocol

Vlan1 10.10.1.36 YES NVRAM up up

Vlan101 unassigned YES NVRAM up up

Vlan102 10.10.2.36 YES NVRAM up up

Vlan103 10.10.3.36 YES NVRAM up up

Vlan104 10.10.4.36 YES NVRAM up up

Vlan105 10.10.5.36 YES NVRAM up up

Vlan106 10.10.6.36 YES NVRAM up up

Vlan107 10.10.7.36 YES NVRAM up up

Vlan108 10.10.8.36 YES NVRAM up up

Vlan109 10.10.9.36 YES NVRAM up up

Vlan175 unassigned YES NVRAM up up

FastEthernet0 unassigned YES NVRAM down down

GigabitEthernet1/0/1 unassigned YES unset up up

GigabitEthernet1/0/2 unassigned YES unset up up

GigabitEthernet1/0/3 unassigned YES unset up up

GigabitEthernet1/0/4 unassigned YES unset up up

GigabitEthernet1/0/5 unassigned YES unset up up

GigabitEthernet1/0/6 unassigned YES unset up up

GigabitEthernet1/0/7 unassigned YES unset up up

GigabitEthernet1/0/8 unassigned YES unset up up

GigabitEthernet1/0/9 unassigned YES unset up up

GigabitEthernet1/0/10 unassigned YES unset up up

GigabitEthernet1/0/11 unassigned YES unset up up

GigabitEthernet1/0/12 unassigned YES unset up up

GigabitEthernet1/0/13 unassigned YES unset up up

GigabitEthernet1/0/14 unassigned YES unset up up

GigabitEthernet1/0/15 unassigned YES unset down down

GigabitEthernet1/0/16 unassigned YES unset down down

GigabitEthernet1/0/17 unassigned YES unset down down

GigabitEthernet1/0/18 unassigned YES unset up up

GigabitEthernet1/0/19 unassigned YES unset up up

GigabitEthernet1/0/20 unassigned YES unset up up

GigabitEthernet1/0/21 unassigned YES unset up up

GigabitEthernet1/0/22 unassigned YES unset up up

GigabitEthernet1/0/23 unassigned YES unset up up

GigabitEthernet1/0/24 unassigned YES unset up up

GigabitEthernet1/1/1 unassigned YES unset down down

GigabitEthernet1/1/2 unassigned YES unset down down

GigabitEthernet1/1/3 unassigned YES unset down down

GigabitEthernet1/1/4 unassigned YES unset down down

Te1/1/1 unassigned YES unset down down

Te1/1/2 unassigned YES unset down down

--------------------------------------------------------------------------------------------------------------

From 10.10.24.1 ( Router)

phoenixcorpoff881#sh ip interface brief

Interface IP-Address OK? Method Status Prot

ocol

FastEthernet0 unassigned YES unset up down

FastEthernet1 unassigned YES unset up down

FastEthernet2 unassigned YES unset up down

FastEthernet3 unassigned YES unset up up

FastEthernet4 10.10.24.1 YES NVRAM up up

Vlan1 10.10.1.199 YES NVRAM up up

------------------------------------------------------------------------------------------------------------------

From 10.10.24.2 ( Router)

phoenixvsez#sh ip interface brief

Interface IP-Address OK? Method Status Prot

ocol

BRI0 unassigned YES NVRAM administratively down down

BRI0:1 unassigned YES unset administratively down down

BRI0:2 unassigned YES unset administratively down down

FastEthernet0 unassigned YES unset down down

FastEthernet1 unassigned YES unset up up

FastEthernet2 unassigned YES unset down down

FastEthernet3 unassigned YES unset down down

FastEthernet4 unassigned YES unset down down

FastEthernet5 unassigned YES unset down down

FastEthernet6 unassigned YES unset down down

FastEthernet7 unassigned YES unset down down

FastEthernet8 unassigned YES NVRAM down down

GigabitEthernet0 10.10.24.2 YES NVRAM up up

Vlan1 10.10.0.3 YES NVRAM up up

Hope this helps you to understand my network ,

Thanks

Hari

kcnajaf · ‎09-10-2013

Hi Hari,

Could you please provide show ip route from below devices

L3-PHOENIXCORP

phoenixvsez

phoenixcorpoff881

Regards

Najaf

Hari Kumar Raja · ‎09-10-2013

Dear Nijaf,

Please find the details below.

L3-PHOENIXCORP#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.10.1.43 to network 0.0.0.0

172.16.0.0/24 is subnetted, 1 subnets

S 172.16.20.0 [1/0] via 10.10.1.35

S 192.168.99.0/24 [1/0] via 10.10.1.35

10.0.0.0/24 is subnetted, 15 subnets

S 10.10.0.0 [1/0] via 10.10.1.199

C 10.10.1.0 is directly connected, Vlan1

C 10.10.2.0 is directly connected, Vlan102

C 10.10.3.0 is directly connected, Vlan103

C 10.10.4.0 is directly connected, Vlan104

C 10.10.5.0 is directly connected, Vlan105

C 10.10.6.0 is directly connected, Vlan106

C 10.10.7.0 is directly connected, Vlan107

C 10.10.8.0 is directly connected, Vlan108

C 10.10.9.0 is directly connected, Vlan109

S 10.10.25.0 [1/0] via 10.10.1.35

S 10.10.32.0 [1/0] via 10.10.1.199

S 10.10.33.0 [1/0] via 10.10.1.199

S 10.10.34.0 [1/0] via 10.10.1.199

S 10.10.35.0 [1/0] via 10.10.1.199

S 192.168.6.0/24 [1/0] via 10.10.1.35

S 192.168.1.0/24 [1/0] via 10.10.1.35

S* 0.0.0.0/0 [1/0] via 10.10.1.43

---------------------------------------------------------------------------------

phoenixvsez#sh ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is 10.10.24.1 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 10.10.24.1

10.0.0.0/8 is variably subnetted, 9 subnets, 3 masks

C 10.10.0.0/24 is directly connected, Vlan1

L 10.10.0.3/32 is directly connected, Vlan1

C 10.10.24.0/30 is directly connected, GigabitEthernet0

L 10.10.24.2/32 is directly connected, GigabitEthernet0

S 10.10.31.0/24 [1/0] via 10.10.0.1

S 10.10.32.0/24 [1/0] via 10.10.0.1

S 10.10.33.0/24 [1/0] via 10.10.0.1

S 10.10.34.0/24 [1/0] via 10.10.0.1

S 10.10.35.0/24 [1/0] via 10.10.0.1

-------------------------------------------------------------------------------------------------

phoenixcorpoff881#sh ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

ia - IS-IS inter area, * - candidate default, U - per-user static route

o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 11 subnets, 3 masks

S 10.10.0.0/24 [1/0] via 10.10.24.2

C 10.10.1.0/24 is directly connected, Vlan1

L 10.10.1.199/32 is directly connected, Vlan1

S 10.10.2.0/24 [1/0] via 10.10.24.2

C 10.10.24.0/30 is directly connected, FastEthernet4

L 10.10.24.1/32 is directly connected, FastEthernet4

S 10.10.25.0/24 [1/0] via 10.10.1.35

S 10.10.32.0/24 [1/0] via 10.10.24.2

S 10.10.33.0/24 [1/0] via 10.10.24.2

S 10.10.34.0/24 [1/0] via 10.10.24.2

S 10.10.35.0/24 [1/0] via 10.10.24.2

Thanks

Hari

kcnajaf · ‎09-11-2013

Hi Hari,

Modify the configuration as below.

On phoenixcorpoff881

no ip route 10.10.2.0 255.255.255.0 10.10.24.2

ip route 10.10.2.0 255.255.255.0 10.10.1.36 or 35

From your configuration im not sure if the next hop is 10.10.1.36 or is it 10.10.1.35. Any ways you can try one by one and check which one will work:-)

Hope that help.

Regards

Najaf

Please rate when applicable or helpful !!!

Hari Kumar Raja · ‎09-11-2013

Thanks a lot Najaf , i am able to ping both hosts viseversa , thanks for your extreame help .

Regards

Hari

kcnajaf · ‎09-11-2013

Hi Hari,

Glad to hear that this is working as expected. Which ip address did you point your static route to? Is it to 35 or 36?

Regards

Najaf

Hari Kumar Raja · ‎09-11-2013

Ya You are correct Nijaf , thanks for your suggestion and help once again , If possible can i have your personal ID that i can contact you if i need any assistance.

Thanks

Hari

kcnajaf · ‎09-11-2013

Hi Hari,

You can send me private message on Cisco Support Community forum. I monitor this more than my emails :-)

Regards

Najaf

Hari Kumar Raja · ‎09-11-2013

Thanks Najaf,

I need one more small help from you , as i am able to ping all the IPS in destination hosts ( 10.10.0.x ,10.10.32.x , 10.10.33.x and 10.10.35.x ) now i want to restrict to ping only 10.10.33.x network from 10.10.2.x network , can you guide me how can i fix this as 10.10.33.x network is my cretical servers and i dont want any hit .

Thanks in advance.

Hari

kcnajaf · ‎09-11-2013

Hi Hari,

Is your rquirment is to allow only ping from 10.10.2.x network to 10.10.33.x network? None of the other ip subnet should not be able to ping 10.10.33.x?

You could use an extented ACL to achive this and apply the ACL on VLAN 33.

Regards

Najaf

Hari Kumar Raja · ‎09-11-2013

Hi Najaf,

I have created ACL and able to restrict , thaks for your suggestion .

Hari