Inter Vlan ROAS 9300 Cannot ping between Vlans

[toby.haynes]

Hi Everyone,

I'm sorry, I know there are a heap of posts like this and I'm pretty sure I've read them all and I'm still having an issue.  

I've got C9300-48UXM-A x 2 stacked and I'm trying to get inter-vlan comms working.

PC 1 - 10.100.0.14/24 Gateway 10.100.0.1

PC 2 - 10.100.2.14/24 Gateway 10.100.2.1

VLAN 10 created with an interface - IP 10.100.0.1/24

VLAN 20 created with an interface - IP 10.100.2.1/24

PC1 on tw1/0/2:

- Switchport mode access

- Switchport access vlan 10

- Spanning-tree portfast

PC2 on tw1/0/3

- Switchport mode access

- Switchport access vlan 20

- Spanning-tree portfast

ip routing is enabled

Vlans are administratively and operationally up

show vlan confirms the ports are assigned to the vlans

ports are administratively and operationally up

Smart licence is applied and current

I've reloaded the switch heaps of times

default route is set, but not there makes no difference either.

I've put the pc's on the same vlan (and IP subnets) and tested pinging on them - success - to make sure it's not a firewall thing.

There are no ACLs applied to any vlans.

In the current setup;

PC 1 - ping 10.100.0.1 - success

PC 1 - ping 10.100.2.1 - success

PC 1 - ping 10.100.2.14 - failure

PC 2 - ping 10.100.0.1 - success

PC 2 - ping 10.100.2.1 - success

PC 2 - ping 10.100.0.14 - failure

switch - show arp

- 10.100.0.1

- 10.100.0.14

- 10.100.2.1

- 10.100.2.14

What am I missing???

[Seb Rupik · Accepted solution]

Hi there,

What OS is the PC running? Most flavors of windows won't reply to a ping unless explicitly permitted via the windows firewall.

cheers,

Seb.

[toby.haynes]

Thanks Seb,

I didn't think to check if Win (10 education) would block pings from a different subnet.  I'll check that in about 11hrs - Thanks!

There is a third Vlan where I also have troubles pinging 8.8.8.8 from a neighboring Vlan, which may not be explained so easily.  I'll see what happens there too.

[toby.haynes]

For all the other threads I've read, no one mentioned the local subnet only rules in the windows firewall, so I didn't think of it.  But that is what the problem was - Thanks!