09-06-2012 07:42 AM - edited 03-07-2019 08:44 AM
Hi Folks,
I'm cutting my teeth on cisco and am having some issues with intervlan routing. I have followed the vids and manuals but just can seem to get this working. I have the following network lab set up.
Vlan 10 = 10.70.1.9/24
Vlan 20 = 192.168.0.1/24
ME2400 firmware
ROM: Bootstrap program is ME340x boot loader
BOOTLDR: ME340x Boot Loader (ME340x-HBOOT-M) Version 12.2(35r)SE3, RELEASE SOFTWARE (fc1)
Switch uptime is 7 minutes
System returned to ROM by power-on
System image file is "flash:me340x-metroipaccessk9-mz.122-44.SE1.bin"
Running config :-
witch#sh run
Building configuration...
Current configuration : 2562 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
!
!
crypto pki trustpoint TP-self-signed-3933083008
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3933083008
revocation-check none
rsakeypair TP-self-signed-3933083008
!
!
crypto pki certificate chain TP-self-signed-3933083008
certificate self-signed 01
3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33393333 30383330 3038301E 170D3933 30333031 30303030
35365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 39333330
38333030 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D4AE C4AB8FB8 32426775 6D022437 2C5C113E A4D7370A 32EC5C9A B1612289
8A0D1DFA 317B73BF 8744A43F 46ED8A40 EC3D69DB F574A45F B53152BC C3D8A037
53AD79AD F51CC7B2 34C7D771 E3D4E5FD 73F2246C 4B56C50B D57D5B27 9B9584C8
CF733E77 4256956F 5B05E61E 64693414 BE3DBBB4 BC8051BE 7576FA01 910A1CA0
03910203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603
551D1104 0B300982 07537769 7463682E 301F0603 551D2304 18301680 14E6CCBE
104CE6DC DFDC0B1D 6BBF2400 B09C3BCB 1A301D06 03551D0E 04160414 E6CCBE10
4CE6DCDF DC0B1D6B BF2400B0 9C3BCB1A 300D0609 2A864886 F70D0101 04050003
8181009E E78DF428 A9DCA43A 692D95F7 929CA086 D4927A65 EF2CCC6E B50D72D3
20B8F7AF C063179C F80E7B73 23FF6B98 B73E236A 95024023 37294CF2 34FDD024
--More--
!
vlan internal allocation policy ascending
!
vlan 10,20
!
!
!
interface GigabitEthernet0/1
port-type nni
switchport access vlan 10
!
interface GigabitEthernet0/2
port-type nni
switchport access vlan 20
!
interface GigabitEthernet0/3
port-type nni
!
interface GigabitEthernet0/4
port-type nni
!
interface Vlan1
no ip address
!
interface Vlan10
ip address 10.70.1.9 255.255.255.0
!
interface Vlan20
ip address 192.168.0.1 255.255.255.0
!
no ip http server
ip http secure-server
ip classless
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
login
line vty 5 15
login
!
end
Switch#
I can ping from a host on 192.168.0.X to 10.70.1.9 but can ping no further and i can ping from a host on 10.70.1.X to 192.168.0.1 but can ping no further.
witch#
Switch#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
10.0.0.0/24 is subnetted, 1 subnets
C 10.70.1.0 is directly connected, Vlan10
C 192.168.0.0/24 is directly connected, Vlan20
Switch#sh mac address-table
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
All 0100.0ccc.cccc STATIC CPU
All 0100.0ccc.cccd STATIC CPU
All 0180.c200.0000 STATIC CPU
All 0180.c200.0001 STATIC CPU
All 0180.c200.0002 STATIC CPU
All 0180.c200.0003 STATIC CPU
All 0180.c200.0004 STATIC CPU
All 0180.c200.0005 STATIC CPU
All 0180.c200.0006 STATIC CPU
All 0180.c200.0007 STATIC CPU
All 0180.c200.0008 STATIC CPU
All 0180.c200.0009 STATIC CPU
All 0180.c200.000a STATIC CPU
All 0180.c200.000b STATIC CPU
All 0180.c200.000c STATIC CPU
All 0180.c200.000d STATIC CPU
All 0180.c200.000e STATIC CPU
All 0180.c200.000f STATIC CPU
All 0180.c200.0010 STATIC CPU
All ffff.ffff.ffff STATIC CPU
20 00a0.244e.1f26 DYNAMIC Gi0/2 (HOST ON 192.168.0.5)
10 0025.b36e.383a DYNAMIC Gi0/1 (HOST ON 10.70.1.5)
Total Mac Addresses for this criterion: 22
Can anyone help me ?
Thanks in advance.
09-06-2012 08:18 AM
Hello Scott,
you should consider that your hosts may have a SW FW running on them.
the fact that each host can ping the SVI of the other vlan is a proof that inter-vlan routing is working correcty.
Host to host communication involves possible network protection on end user devices.
For example windows running PCs show this kind of behaviour.
Hope to help
Giuseppe
09-06-2012 08:22 AM
Hi Giuseppe,
I can ping both hosts from the switch
Switch>en
Switch#ping 10.70.1.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.70.1.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/9 ms
Switch#ping 192.168.0.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.5, timeout is 2 seconds:
!!!!!
Success
But cannot ping through the switch to each other. No SF FW in the picture...both hosts are vanilla installs with no FW or AV installed totally open machines. Weird ?
Scott
09-06-2012 08:44 AM
Hi Giuseppe,
You were right, out Symantec has the Smart firewall activated and was blocking pings from foreign networks (Was running hidden). I had the windows firewall switched off though.
Thanks for all your help.
Scott
09-06-2012 08:53 AM
Hello Scott,
I'm glad to know that my suggestion was helpful.
Best Regards
Giuseppe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide