cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1696
Views
0
Helpful
4
Replies

ME3400 Intervlan Routing - NOOB

scottym1139
Level 1
Level 1

Hi Folks,

I'm cutting my teeth on cisco and am having some issues with intervlan routing. I have followed the vids and manuals but just can seem to get this working. I have the following network lab set up.

Vlan 10 = 10.70.1.9/24

Vlan 20 = 192.168.0.1/24

ME2400 firmware

ROM: Bootstrap program is ME340x boot loader

BOOTLDR: ME340x Boot Loader (ME340x-HBOOT-M) Version 12.2(35r)SE3, RELEASE SOFTWARE (fc1)

Switch uptime is 7 minutes

System returned to ROM by power-on

System image file is "flash:me340x-metroipaccessk9-mz.122-44.SE1.bin"

Running config :-

witch#sh run

Building configuration...

Current configuration : 2562 bytes

!

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Switch

!

boot-start-marker

boot-end-marker

!

!

no aaa new-model

system mtu routing 1500

ip subnet-zero

ip routing

!

!

crypto pki trustpoint TP-self-signed-3933083008

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-3933083008

revocation-check none

rsakeypair TP-self-signed-3933083008

!

!

crypto pki certificate chain TP-self-signed-3933083008

certificate self-signed 01

  3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030

  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 33393333 30383330 3038301E 170D3933 30333031 30303030

  35365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 39333330

  38333030 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

  8100D4AE C4AB8FB8 32426775 6D022437 2C5C113E A4D7370A 32EC5C9A B1612289

  8A0D1DFA 317B73BF 8744A43F 46ED8A40 EC3D69DB F574A45F B53152BC C3D8A037

  53AD79AD F51CC7B2 34C7D771 E3D4E5FD 73F2246C 4B56C50B D57D5B27 9B9584C8

  CF733E77 4256956F 5B05E61E 64693414 BE3DBBB4 BC8051BE 7576FA01 910A1CA0

  03910203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603

  551D1104 0B300982 07537769 7463682E 301F0603 551D2304 18301680 14E6CCBE

  104CE6DC DFDC0B1D 6BBF2400 B09C3BCB 1A301D06 03551D0E 04160414 E6CCBE10

  4CE6DCDF DC0B1D6B BF2400B0 9C3BCB1A 300D0609 2A864886 F70D0101 04050003

  8181009E E78DF428 A9DCA43A 692D95F7 929CA086 D4927A65 EF2CCC6E B50D72D3

  20B8F7AF C063179C F80E7B73 23FF6B98 B73E236A 95024023 37294CF2 34FDD024

--More--

!

vlan internal allocation policy ascending

!

vlan 10,20

!

!

!

interface GigabitEthernet0/1

port-type nni

switchport access vlan 10

!

interface GigabitEthernet0/2

port-type nni

switchport access vlan 20

!

interface GigabitEthernet0/3

port-type nni

!

interface GigabitEthernet0/4

port-type nni

!

interface Vlan1

no ip address

!

interface Vlan10

ip address 10.70.1.9 255.255.255.0

!

interface Vlan20

ip address 192.168.0.1 255.255.255.0

!

no ip http server

ip http secure-server

ip classless

!

!

!       

!

control-plane

!

!

line con 0

line vty 0 4

login

line vty 5 15

login

!

end

Switch#

I can ping from a host on 192.168.0.X to 10.70.1.9 but can ping no further and i can ping from a host on 10.70.1.X to 192.168.0.1 but can ping no further.

witch#

Switch#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     10.0.0.0/24 is subnetted, 1 subnets

C       10.70.1.0 is directly connected, Vlan10

C    192.168.0.0/24 is directly connected, Vlan20

Switch#sh mac address-table

          Mac Address Table

-------------------------------------------

Vlan    Mac Address       Type        Ports

----    -----------       --------    -----

All    0100.0ccc.cccc    STATIC      CPU

All    0100.0ccc.cccd    STATIC      CPU

All    0180.c200.0000    STATIC      CPU

All    0180.c200.0001    STATIC      CPU

All    0180.c200.0002    STATIC      CPU

All    0180.c200.0003    STATIC      CPU

All    0180.c200.0004    STATIC      CPU

All    0180.c200.0005    STATIC      CPU

All    0180.c200.0006    STATIC      CPU

All    0180.c200.0007    STATIC      CPU

All    0180.c200.0008    STATIC      CPU

All    0180.c200.0009    STATIC      CPU

All    0180.c200.000a    STATIC      CPU

All    0180.c200.000b    STATIC      CPU

All    0180.c200.000c    STATIC      CPU

All    0180.c200.000d    STATIC      CPU

All    0180.c200.000e    STATIC      CPU

All    0180.c200.000f    STATIC      CPU

All    0180.c200.0010    STATIC      CPU

All    ffff.ffff.ffff    STATIC      CPU

  20    00a0.244e.1f26    DYNAMIC     Gi0/2      (HOST ON 192.168.0.5)

  10    0025.b36e.383a    DYNAMIC     Gi0/1     (HOST ON 10.70.1.5)

Total Mac Addresses for this criterion: 22

Can anyone help me ?

Thanks in advance.

4 Replies 4

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Scott,

you should consider that your hosts may have a SW FW running on them.

the fact that each host can ping the SVI of the other vlan is a proof that inter-vlan routing is working correcty.

Host to host communication involves possible network protection on end user devices.

For example windows running PCs show this kind of behaviour.

Hope to help

Giuseppe

Hi Giuseppe,

I can ping both hosts from the switch

Switch>en

Switch#ping 10.70.1.5

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.70.1.5, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/9 ms

Switch#ping 192.168.0.5

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.0.5, timeout is 2 seconds:

!!!!!

Success

But cannot ping through the switch to each other. No SF FW in the picture...both hosts are vanilla installs with no FW or AV installed totally open machines. Weird ?

Scott

Hi Giuseppe,

You were right, out Symantec has the Smart firewall activated and was blocking pings from foreign networks (Was running hidden). I had the windows firewall switched off though.

Thanks for all your help.

Scott

Hello Scott,

I'm glad to know that my suggestion was helpful.

Best Regards

Giuseppe

Review Cisco Networking products for a $25 gift card