Inter-vlan routing issue

[Imran Ahmad]

Hello Experts,

I have multiple remote-sites connecting through E1 links into my HQ Switch, and I have created 2-VLAN Interfaces, in which i added multiple sites IP-Subnets as following:

interface Vlan690
 description E1__Region1-Sites
 ip address 192.168.28.2 255.255.255.0 secondary
 ip address 192.168.37.2 255.255.255.0 secondary
 ip address 192.168.21.2 255.255.255.0 secondary
 ip address 192.168.22.2 255.255.255.0 secondary
 ip address 192.168.38.2 255.255.255.0
!
interface Vlan691
 description E1_Region2-Sites
 ip address 192.168.23.2 255.255.255.0 secondary
 ip address 192.168.24.2 255.255.255.0 secondary
 ip address 192.168.40.2 255.255.255.0 secondary
 ip address 192.168.8.2 255.255.255.0 secondary
 ip address 192.168.20.2 255.255.255.0 secondary
 ip address 192.168.13.2 255.255.255.0 secondary
 ip address 192.168.26.2 255.255.255.0
!

The issue is -

1- After each 20-30 minutes some of the remote-sites disconnect and after 1-2 minutes of downtime again the connections come up.  (while my remote-sites disconnect, when I run these follwing commands on my Switch then the connections come up "

VTP(config)#no ip routing

VTP(config)#ip routing
VTP(config)#ip route 0.0.0.0 0.0.0.0 10.1.1.1

2- I can normally ping and open remote-desktop session into all my remote-site client-pcs.  While sometimes I can Ping but in mean-while I can not open Remote-Desktop Session or access other ports.

Any help appreciated

[Reza Sharifi]

Hi,

What is the reason for having so many secondary IP addresses?

What is your design look like?

[Imran Ahmad]

Hi Reza,

Thanks for the reply

Our E1 Service-Provider has put 8 remote-sites into single-VLAN 690 & 691 at their end.  And at my HQ Switch I have created One VLAN-Interface and added all my 8-remotes sites ip-address into one VLAN (690) and other 8-Remote-sites into other VLAN (691). 

We dont have manageable switches at our remote-sites that is why it is a need for this type of configuration

Regards,

[Charles Hill]

I would verify spanning-tree is working properly.

show spanning tree detail will show if you are experiencing a lot of topology changes.

When connectivity is lost, I would show spanning tree blocked ports. 

Hope this helps...