Regarding no internet on the cisco 3650

[ssetele.dcabin]

hi
I was just testing new switch catalyst 3650 for stand by in case of old switch failure, i am facing following the issue

1. I have two back bone L3 switch provided by my ISP that is of juniper connected in VRRP mode.
2. I presently two L3 extreme switch connected to port 20 of both switch juniper in VRRP mode.
3. port 20 of the juniper is access port.
4. i want to configure Cisco 3650 an stand by switch in case of exterem switch failure.
5. for testing purpose i have connected to Cisco 3650 G1/0/24 to Juniper 0/0/20, i defined G1/0/24 as no switch port.
and giving ip of 10.36.254.5/255.255.255.240 and directed route towards 10.0.0.0 255.0.0.0 to 10.36.254.4.
6. switch can ping 8.8.8.8 but no internet on the defined VLAN in side switch.
i am sharing juniper switch programming pl suggest suitable configuration.

[Georg Pauwen]

Hello,

post a diagram of your topology, showing how everything is connected to each other, and where the 3650 switch is supposed to be.

[Flavio Miranda]

You may post again. Cant read. 

[balaji.bandi]

Can you post show run Cisco switch.

what IP address behind Switch you using to reach to internet.

on Juniper you also need Route back towards your switch 10.36.254.5 (what ever IP you using behind Cisco switch)

This is just high level, once we get config from switch we can suggest better.

[paul driver]

Hello

---

@ssetele.dcabin wrote:

hi
I was just testing new switch catalyst 3650 for stand by in case of old switch failure, i am facing following the issue

1. I have two back bone L3 switch provided by my ISP that is of juniper connected in VRRP mode.
2. I presently two L3 extreme switch connected to port 20 of both switch juniper in VRRP mode.
3. port 20 of the juniper is access port.
4. i want to configure Cisco 3650 an stand by switch in case of exterem switch failure.
5. for testing purpose i have connected to Cisco 3650 G1/0/24 to Juniper 0/0/20, i defined G1/0/24 as no switch port.
and giving ip of 10.36.254.5/255.255.255.240 and directed route towards 10.0.0.0 255.0.0.0 to 10.36.254.4.
6. switch can ping 8.8.8.8 but no internet on the defined VLAN in side switch.
i am sharing juniper switch programming pl suggest suitable configuration.

---

Having a exstreme and cisco switch connected via VRRP should be viable, but they would need to be running the same spanning-tree modes for any L2 access connectivity.
As for not able to reach the internet from the cisco switch on that subnet 10.36.254.0/29 I would say whatever device is performing your Network Address translation (NAT)  needs to be updated to accommodate that address range..

[ssetele.dcabin]

Hi paul driver

I dont want to connect Cisco with exterem in VRRP. but if it is possible to configure stand alone switch of Cisco in case of needed. pl suggest any configuration from scratch. ISP router defined NAT and it gives 10.36.0.0/16 for subnetting.

[ssetele.dcabin]

today i will share configuration of cisco 3650 from my end which is not working

[paul driver]

Hello

At present the Cisco switch wont be able to reach the internet even when it attached to the Juniper switch, and the reason for that is the juniper port connecting to the cisco is an access port in vlan 101 (10.10.10.0/25) and the cisco has an ip address of 10.36.254.5/28 vlan 20.

You need to do either of two things:
1) change the juniper & cisco interconnected ports to be a trunk, allow all vlans to traverse it, 

or

2) change the cisco port to be a routed port with an ip address within vlan 101 range

[ssetele.dcabin]

No i have rechecked the configuration of juniper vlan 20 defined as "User-Vlan-Default" and it is dropped as, on the 0/0/20 of the "juniper set interfaces ge-1/0/20 unit 0 family ethernet-switching vlan members User-Vlan-Default"

[balaji.bandi]

that will be helpful for us to understand the problem.

[ssetele.dcabin]

configuration of cisco L3

[paul driver]

Hello

---

@ssetele.dcabin wrote:

No i have rechecked the configuration of juniper vlan 20 defined as "User-Vlan-Default" and it is dropped as, on the 0/0/20 of the "juniper set interfaces ge-1/0/20 unit 0 family ethernet-switching vlan members User-Vlan-Default"

---

Yes correct my mistake misread the txt file,

Anyhow I have just read the cisco config and the way it is configured at present can be quite damaging to you existing network, I would suggest no to apply this to any production switches at present.

You have multiple L3 SVi enabled which could duplicate you exiting active l3 plus you have opsf enabled and also multiple static default routes which are not applicable.

Suggest on cisco switch
disable all L3 svis 
remove ospf
remove static default routes with next hops of 10.36.254.1 & 10.36.254.14

default interface gig1/0/24
int gig1/0/24
switchport trunk encapsulation dot1q
switchport mode truck

int vlan 20
ip address 10.36.254.5 255.255.255.240

Juniper
set interfaces ge-0/0/20 unit 0 family ethernet-switching port-mode trunk
set interfaces ge-0/0/20 unit 0 family ethernet-switching vlan members all