cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3082
Views
0
Helpful
20
Replies

problem in Intervlan routing of catalyst switch 3560??

begad.nashaat
Level 1
Level 1

Dears, 

 

Please check below configuration for my catalyst switch 3560. The hosts in VLAN 30 (10.0.30.5) can't ping hosts in VLAN 50 (10.0.50.5), however the hosts in VLAN 30 can ping interface VLAN 50 (10.0.50.1) and vice verse. please check configuration of the switch and let me know if you have any suggestions for such a problem.

 

CoreSwitch#show running-config 
Building configuration...
 
Current configuration : 5313 bytes
!
! Last configuration change at 20:47:25 UTC Sun Mar 15 2015
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname CoreSwitch
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-vrf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
logging console emergencies
enable secret 5 $1$PoWT$YSJ1mlvXywqPmn8vUac3x/
!
no aaa new-model
switch 1 provision ws-c3650-24ts
ip routing
!
ip device tracking
ip dhcp excluded-address 10.0.30.1
ip dhcp excluded-address 10.0.40.1
ip dhcp excluded-address 10.0.50.1
ip dhcp excluded-address 10.0.30.254
ip dhcp excluded-address 10.0.40.254
ip dhcp excluded-address 10.0.50.254
ip dhcp excluded-address 10.0.40.111
ip dhcp excluded-address 10.0.40.112
ip dhcp excluded-address 10.0.40.201
ip dhcp excluded-address 10.0.40.113
!
ip dhcp pool V30
 network 10.0.30.0 255.255.255.0
 default-router 10.0.30.1
 lease 4
!
ip dhcp pool V40
 network 10.0.40.0 255.255.255.0
 default-router 10.0.40.1
 lease 4
!
ip dhcp pool V50
 network 10.0.50.0 255.255.255.0
 default-router 10.0.50.1
 lease 4
!
ip dhcp pool test
!
!
!
crypto pki trustpoint TP-self-signed-3362881171
 enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3362881171
 revocation-check none
 rsakeypair TP-self-signed-3362881171
!
!
crypto pki certificate chain TP-self-signed-3362881171
 certificate self-signed 01
  30820242 308201AB A0030201 02020101 300D0609 2A864886 F70D0101 04050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 33333632 38383131 3731301E 170D3135 30333132 30363237 
  33305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 33363238 
  38313137 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 
  8100CF9F 8C723BDF 26C4E228 FB01EE50 BD6D2DE1 C7E19BB5 689139EA B40C1D18 
  6181BB33 83376AB3 B38B9C67 D98D56AE 90E55F7B A66669B1 B378A90C 4EAB6039 
  0EDE80A0 F5064CEC 44CCF520 75BAAD19 62DBAE6A 3B0837F7 C39F3BD1 EA81F189 
  9CFB7508 35856779 37E58DFE BCE4F50D 2CA68BAD 7397A413 95F34917 66706D18 
  D0830203 010001A3 6A306830 0F060355 1D130101 FF040530 030101FF 30150603 
  551D1104 0E300C82 0A436F72 65537769 74636830 1F060355 1D230418 30168014 
  A0C13850 B0D3D7CD 4B556F87 9A253E41 64E8C819 301D0603 551D0E04 160414A0 
  C13850B0 D3D7CD4B 556F879A 253E4164 E8C81930 0D06092A 864886F7 0D010104 
  05000381 81005303 86FC8957 E2ED7811 8ECAC1B2 8CDE27E8 8E53A820 98460169 
  0B5DEBB2 EC6A3DC2 3F2C16F0 336D526E B67660A6 466B15A9 14DACDE4 0E12F6E6 
  EFFFB705 8F3877D8 CEB51D37 A8436501 155DE00B 1EB8E157 C88C46E8 E483344A 
  B630BB54 D9F4851B 570A4C8F E8B4234A 478C39B4 A8434D4A 672D7680 AEEEDF35 
  82C284CE 4EF5
  quit
!
!
!
!
!
diagnostic bootup level minimal
spanning-tree mode pvst
spanning-tree extend system-id
!
redundancy
 mode sso
!
!
!
class-map match-any non-client-nrt-class
  match non-client-nrt 
!
policy-map port_child_policy
 class non-client-nrt-class
 bandwidth remaining ratio 10
!
!
!
!
!
!
interface GigabitEthernet0/0
 vrf forwarding Mgmt-vrf
 no ip address
 negotiation auto
!
interface GigabitEthernet1/0/1
 switchport access vlan 30
 switchport mode access
!
interface GigabitEthernet1/0/2
 switchport access vlan 30
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
 switchport access vlan 40
!
interface GigabitEthernet1/0/10
 switchport mode trunk
 speed 100
 duplex full
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
switchport access vlan 50
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
 switchport mode trunk
!
interface GigabitEthernet1/0/24
 switchport mode trunk
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface Vlan1
 ip address 10.0.100.100 255.255.255.0
!
interface Vlan30
 ip address 10.0.30.1 255.255.255.0
!
interface Vlan50
 ip address 10.0.50.1 255.255.255.0
!
interface Vlan100
 ip address 192.168.100.1 255.255.255.0
!
ip http server
ip http authentication local
ip http secure-server
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 password Eventum
 login
line vty 5 15
 password Eventum
 login
!
wsma agent exec
 profile httplistener
 profile httpslistener
wsma agent config
 profile httplistener
 profile httpslistener
wsma agent filesys
 profile httplistener
 profile httpslistener
wsma agent notify
 profile httplistener
 profile httpslistener
!
wsma profile listener httplistener
 transport http
!
wsma profile listener httpslistener
 transport https
ap group default-group
end
 
CoreSwitch#  
20 Replies 20

the host is reachable from the switch.

 

your understanding is correct.

Have you tried pinging a host in vlan 40 from the switch with a source address of vlan 50.

 

ping 10.0.40.5 source 10.0.50.1

 

From switch:

Ping 10.0.40.5 source 10.0.50.1 -> Unreachable

Ping 10.0.40.5 -> reachable 

 

From host Machine (10.0.40.5):

ping 10.0.50.1 -> reachable 

 

it is one of the hosts that are member in VLAN 50

Sounds like. 10.0.50.8 has the wrong default gateway configured on that host.

 If you do a ipconfig on the host what is the gateway?

the gateway is 10.0.50.1 

Review Cisco Networking for a $25 gift card