Showing results for 
Search instead for 
Did you mean: 

ME3400 Intervlan Routing - NOOB


Hi Folks,

I'm cutting my teeth on cisco and am having some issues with intervlan routing. I have followed the vids and manuals but just can seem to get this working. I have the following network lab set up.

Vlan 10 =

Vlan 20 =

ME2400 firmware

ROM: Bootstrap program is ME340x boot loader

BOOTLDR: ME340x Boot Loader (ME340x-HBOOT-M) Version 12.2(35r)SE3, RELEASE SOFTWARE (fc1)

Switch uptime is 7 minutes

System returned to ROM by power-on

System image file is "flash:me340x-metroipaccessk9-mz.122-44.SE1.bin"

Running config :-

witch#sh run

Building configuration...

Current configuration : 2562 bytes


version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption


hostname Switch






no aaa new-model

system mtu routing 1500

ip subnet-zero

ip routing



crypto pki trustpoint TP-self-signed-3933083008

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-3933083008

revocation-check none

rsakeypair TP-self-signed-3933083008



crypto pki certificate chain TP-self-signed-3933083008

certificate self-signed 01

  3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030

  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 33393333 30383330 3038301E 170D3933 30333031 30303030

  35365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 39333330

  38333030 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

  8100D4AE C4AB8FB8 32426775 6D022437 2C5C113E A4D7370A 32EC5C9A B1612289

  8A0D1DFA 317B73BF 8744A43F 46ED8A40 EC3D69DB F574A45F B53152BC C3D8A037

  53AD79AD F51CC7B2 34C7D771 E3D4E5FD 73F2246C 4B56C50B D57D5B27 9B9584C8

  CF733E77 4256956F 5B05E61E 64693414 BE3DBBB4 BC8051BE 7576FA01 910A1CA0

  03910203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603

  551D1104 0B300982 07537769 7463682E 301F0603 551D2304 18301680 14E6CCBE

  104CE6DC DFDC0B1D 6BBF2400 B09C3BCB 1A301D06 03551D0E 04160414 E6CCBE10

  4CE6DCDF DC0B1D6B BF2400B0 9C3BCB1A 300D0609 2A864886 F70D0101 04050003

  8181009E E78DF428 A9DCA43A 692D95F7 929CA086 D4927A65 EF2CCC6E B50D72D3

  20B8F7AF C063179C F80E7B73 23FF6B98 B73E236A 95024023 37294CF2 34FDD024



vlan internal allocation policy ascending


vlan 10,20




interface GigabitEthernet0/1

port-type nni

switchport access vlan 10


interface GigabitEthernet0/2

port-type nni

switchport access vlan 20


interface GigabitEthernet0/3

port-type nni


interface GigabitEthernet0/4

port-type nni


interface Vlan1

no ip address


interface Vlan10

ip address


interface Vlan20

ip address


no ip http server

ip http secure-server

ip classless








line con 0

line vty 0 4


line vty 5 15





I can ping from a host on 192.168.0.X to but can ping no further and i can ping from a host on 10.70.1.X to but can ping no further.


Switch#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set is subnetted, 1 subnets

C is directly connected, Vlan10

C is directly connected, Vlan20

Switch#sh mac address-table

          Mac Address Table


Vlan    Mac Address       Type        Ports

----    -----------       --------    -----

All    0100.0ccc.cccc    STATIC      CPU

All    0100.0ccc.cccd    STATIC      CPU

All    0180.c200.0000    STATIC      CPU

All    0180.c200.0001    STATIC      CPU

All    0180.c200.0002    STATIC      CPU

All    0180.c200.0003    STATIC      CPU

All    0180.c200.0004    STATIC      CPU

All    0180.c200.0005    STATIC      CPU

All    0180.c200.0006    STATIC      CPU

All    0180.c200.0007    STATIC      CPU

All    0180.c200.0008    STATIC      CPU

All    0180.c200.0009    STATIC      CPU

All    0180.c200.000a    STATIC      CPU

All    0180.c200.000b    STATIC      CPU

All    0180.c200.000c    STATIC      CPU

All    0180.c200.000d    STATIC      CPU

All    0180.c200.000e    STATIC      CPU

All    0180.c200.000f    STATIC      CPU

All    0180.c200.0010    STATIC      CPU

All    ffff.ffff.ffff    STATIC      CPU

  20    00a0.244e.1f26    DYNAMIC     Gi0/2      (HOST ON

  10    0025.b36e.383a    DYNAMIC     Gi0/1     (HOST ON

Total Mac Addresses for this criterion: 22

Can anyone help me ?

Thanks in advance.

4 Replies 4

Giuseppe Larosa
Hall of Fame Master Hall of Fame Master
Hall of Fame Master

Hello Scott,

you should consider that your hosts may have a SW FW running on them.

the fact that each host can ping the SVI of the other vlan is a proof that inter-vlan routing is working correcty.

Host to host communication involves possible network protection on end user devices.

For example windows running PCs show this kind of behaviour.

Hope to help


Hi Giuseppe,

I can ping both hosts from the switch



Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:


Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/9 ms


Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:



But cannot ping through the switch to each other. No SF FW in the picture...both hosts are vanilla installs with no FW or AV installed totally open machines. Weird ?


Hi Giuseppe,

You were right, out Symantec has the Smart firewall activated and was blocking pings from foreign networks (Was running hidden). I had the windows firewall switched off though.

Thanks for all your help.


Hello Scott,

I'm glad to know that my suggestion was helpful.

Best Regards


Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers