Issue with VLAN traffic through SVI interfaces (and HSRP)

[mrorange0705]

Hello, 

I have a VLAN 10 (192.168.0.0 /22) that should go through its VLAN10 interface in a layer 3 switch, on which i have configured HSRP... The ip address on the switch is 192.168.3.254 for the VLAN int, and the virtual gateway for HSRP is 192.168.3.253.

So i've also configured the sub.interface (gi0/1.10) on a router on the other side of the L3 switch that i am trying to ping, but it's not working... It's working for my other vlans because they do not have interfaces on the L3 switch.

I don't know if it's stupid what i'm trying to do but our teacher told us to setup this router-on-a-stick but with HSRP on 2 "L3 switches" between the regular switches and the router.

And he won't give us any hint because we should be able to figure it out with what we learned so far. 

I've been at it for almost 4 hours. Please help me get a ping. For the love of god... I have to go to sleep now, it's 3:36 am in France. 

[MHM Cisco World]

please when you weak up share the config and topology. 
have a nice day. 

[mrorange0705]

Hello

Here is topology

 - L3 distrib1:

show int switchport

 show int vlan10

show standby

Show Standby

- L3 distrib2:

show int switchport

 show int vlan10

show standby

- Router:

ip int brief

int gi0/1.10

[mrorange0705]

Also, these port-channel are down, i don't know why...

 

[Georg Pauwen]

Hello,

post your zipped Packet Tracer project (.pkt) file...

[MHM Cisco World]

port channel is down ? that why.

[mrorange0705]

Hi, ok

[Georg Pauwen]

Hello,

post the written instructions you are following. The PCs do not even get an IP address because the DHCP server is in Vlan 60, and there is no Vlan interface on the L3 switches for Vlan 60. Also, you cannot have IP addresses from the same subnet on different sides of the router and the L3 switches. An L3 switch is basically a router...

[mrorange0705]

I'm gonna have to translate it, but it really is just: create these VLAN, implemant DHCP, use L3 Switches, do HSRP then another router to practice NAT and Routing later to join another LAN.

Also, i've setup the VTP, the L3 switches are the servers (not sure if that's right), i'll have to put DHCP Snooping, Mac Filtering and write a bunch of ACLs to block certain VLAN, but these i can do.

It's just the topology and the **bleep** HSRP...

Here's the what i did before i started messing up because i didn't know where/how to put the HSRP...

[Georg Pauwen]

Bonjour,

post the instructions in French, no problem. HSRP on the L3 switches and ROAS (Router-on-a-stick) are mutually exclusive, you cannot configure them both together. What kind of class are you following, what qualifications does your instructor have ?

Maybe after seeing the instructions I can figure it out...

[mrorange0705]

I translated it :

• Needs:

Each site will host 2 network cores and two internet accesses. The network cores will be provided by the router provided by the ISP (router 2901) and will be hosted in 2 different buildings.

The distribution layer will have to rely on layer 3 switches and layer 2 switches for the access layer of the Catalyst range.

• Configurations:

Each switch must be connected to the distribution by link aggregation.

The company wishes to segment the network using vlans, the following vlans are planned:

VLAN10 to 70. VLAN60 being the servers.

The access switches must host all the VLANs.

VLAN10, 30 and 70 can communicate with the VLAN60 but not with each other.

VLAN20, 50 and 40 are completely isolated from the other VLANs.

To increase security, you must setup DHCP Snooping and MAC filtering per port.

• Protocols and technologies that must be used:

VTP, EtherChannel, a routing protocol, DHCP, HSRP and MAC FILTERING.

——————————————————

Well he is a System and Network instructor, i don't actually know his qualifications. I probably misinterpreted a lot of the instructions as he's not holding my hand and kinda let me figure it out by myself. Even though i haven't studied Cisco networking for very long... Barely 5 weeks. Probably even less actually...

Isn't HSRP not recommended by Cisco anymore tho ?

[Georg Pauwen]

Hello,

I do not see anything about the router-on-a-stick, that was the big issue that did not make sense. Where is ROAS required ?

[mrorange0705]

Err, nowhere. Yeah as i said, i think i misunderstood a lot of things...Sorry...

[Georg Pauwen]

Hello,

no problem. 

Do you have to use a specific IP addressing scheme, or are you free to use any IP addresses and subnets ? The reason I am asking is that it is usually good practice to have the Vlan and the corresponding subnet be related, e.g. Vlan 10 has subnet 192.168.10.0/24, Vlan 20 192.168.20.0/24, etc. 

It is also a whole lot easier to configure that way...

[mrorange0705]

Ah forgot about that, yes i actually already calculated the ip addressing scheme. But it's fine if you can help me your way. Because i think i'm out of time anyway; i have to hand over the .pkt tomorrow afternoon or friday morning. So it's fine... I think it's really the topology that i can't figure out...

I practically gave up lol, posting here was a last shot in the dark. Thanks a bunch anyway man.

But here in attachment below, the IP addressing if you can still explain to me...