Solved: Router and Switch cannot ping each other

Yashas Sridat · ‎03-20-2016

Hello,

I have just build a home lab.

In my current lab I have 2 SW and 3 router.

I have an issue, I don't know what I am missing in my config. My router cannot ping my SW.

and I also want to change my LAN interface connection from VLAN 1 to VLAN 30...but when I configure VLAN 30 it show me line is UP but Protocol is DOWN.

Another question, if ever I want to create VLANS with different address how should I proceed?

eg

vlan 10 > 10.10.10.1

vlan 20 > 20.20.20.1
etc...

interface Vlan1
 description LAN
 ip address 10.10.10.1 255.255.255.0 secondary
 ip address 30.30.30.1 255.255.255.0 secondary
 ip address 40.40.40.1 255.255.255.0 secondary
 ip address 20.20.20.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 dot1q tunneling ethertype 0x9100
 hold-queue 100 out
!

Here is the conf for my RT.

ROUTER > 877
SW > WS 2950 24

CISCO_877#sh run
Building configuration...

Current configuration : 3468 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname CISCO_877
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$.ISW$71jzJ0Or0nenXZd/8D8.x/
!
no aaa new-model
!
!
dot11 syslog
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 20.20.20.0 20.20.20.30
!
ip dhcp pool LAN
 network 20.20.20.0 255.255.255.0
 domain-name SYS.local
 default-router 20.20.20.1 
 dns-server 202.123.2.6 202.123.2.11 
 lease 0 4
!
!
!
!
!
username admin privilege 15 secret 5 $1$A1V4$GR9sPtPVXDRoOiDKRtC1M1
! 
! 
archive
 log config
 hidekeys
!
!
!
!
!
interface ATM0
 description (OUTSIDE)ADSL_WAN
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no atm ilmi-keepalive
 pvc 8/35 
 encapsulation aal5mux ppp dialer
 dialer pool-member 1
 !
 dsl operating-mode auto 
!
interface FastEthernet0
!
interface FastEthernet1
 dot1q tunneling ethertype 0x9100
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
 description LAN
 ip address 20.20.20.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 dot1q tunneling ethertype 0x9100
 hold-queue 100 out
!
interface Vlan30
 description LAN
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 shutdown
 hold-queue 100 out
!
interface Dialer0
 description WAN_OUTSIDE
 ip address negotiated
 ip mtu 1498
 ip nat outside
 ip virtual-reassembly max-reassemblies 1024
 encapsulation ppp
 ip tcp adjust-mss 1400
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname sheshir627@tplus
 ppp chap password 7 071C385F5C001D0403
 ppp pap sent-username sheshir627@tplus password 7 120A1C04000208053E
 ppp ipcp mask request
 ppp ipcp route default
 ppp ipcp address accept
!
ip default-gateway 20.20.20.1
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 10.10.10.0 255.255.255.0 Vlan1
!
no ip http server
no ip http secure-server
ip nat inside source list 110 interface Dialer0 overload
!
access-list 110 permit ip 20.20.20.0 0.0.0.255 any
access-list 110 permit ip 10.10.10.0 0.0.0.255 any
access-list 110 permit ip 30.30.30.0 0.0.0.255 any
access-list 110 permit ip 40.40.40.0 0.0.0.255 any
access-list 110 permit ip 50.50.50.0 0.0.0.255 any
access-list 110 permit ip 60.60.60.0 0.0.0.255 any
!
!
!
control-plane
!
banner motd ^C

:'######::'##::::'##:'########::'######::'##::::'##:
'##... ##: ##:::: ##: ##.....::'##... ##: ##:::: ##:
 ##:::..:: ##:::: ##: ##::::::: ##:::..:: ##:::: ##:
. ######:: #########: ######:::. ######:: #########:
:..... ##: ##.... ##: ##...:::::..... ##: ##.... ##:
'##::: ##: ##:::: ##: ##:::::::'##::: ##: ##:::: ##:
. ######:: ##:::: ##: ########:. ######:: ##:::: ##:
:......:::..:::::..::........:::......:::..:::::..::

^C
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 password 7 xxxx
 login
!
scheduler max-task-time 5000
end

CISCO_877#

And here is for my SW

CATALYST_2960_01#sh run
Building configuration...

Current configuration : 5166 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname CATALYST_2960_01
!
enable secret 5 $1$MGrN$PtHgL3KfH0vy7Mr1Fo0hF.
!
ip subnet-zero
!
ip ssh time-out 120
ip ssh authentication-retries 3
vtp mode transparent
!
!
spanning-tree mode rapid-pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
spanning-tree vlan 1-4093 priority 16384
!
!
!
!
vlan 10
 name ADSL
!
vlan 20
 name GUEST
!
vlan 30
 name MANAGEMENT
!
interface Port-channel1
 switchport trunk allowed vlan 1,10,20,30
 switchport mode trunk
 switchport nonegotiate
 spanning-tree cost 1
!
interface FastEthernet0/1
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/2
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/3
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/4
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/5
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/6
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/7
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/8
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/9
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/10
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/11
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/12
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/13
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/14
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/15
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/16
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/17
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/18
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/19
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/20
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/21
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/22
 description SPARE
 switchport mode access
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree cost 1000
!
interface FastEthernet0/23
 switchport trunk allowed vlan 1,10,20,30
 switchport mode trunk
 switchport nonegotiate
 channel-group 1 mode active
!
interface FastEthernet0/24
 switchport trunk allowed vlan 1,10,20,30
 switchport mode trunk
 switchport nonegotiate
 channel-group 1 mode active
!
interface Vlan1
 ip address 20.20.20.2 255.255.255.0
 no ip route-cache
!
interface Vlan10
 no ip address
 no ip route-cache
 shutdown
!
interface Vlan30
 no ip address
 no ip route-cache
 shutdown
!
ip default-gateway 20.20.20.1
ip http server
!
line con 0
line vty 0 4
 password 7 xxxx
 login
line vty 5 15
 login
!
!
end

Thanks in advance.

Shaunak · ‎03-21-2016

Yashas,

Please remove the etherchannel config from port f0/24 from the switch and keep it as trunk.

interface FastEthernet0/24
 switchport trunk allowed vlan 1,10,20,30
 switchport mode trunk
 switchport nonegotiate
 channel-group 1 mode active  <<< Remove this

Configure f0 on the router as trunk I reckon the 877 has a switchport of which the fe interfaces are a part of.

To bring up the corresponding SVIs on the router you'll have to configure the corresponding VLANs on the router as well, only then the SVIs will be in an up/up state otherwise it will be in an up/down state.

See if this helps.

Thanks,

Shaunak

View solution in original post

Shaunak · ‎03-20-2016

Hi Yashas,

Can you point out the interfaces you're using to connect the router and the SW?

Also, your problem description is not clear. The SW and router can ping each other, why would this be a problem?

Can you re-iterate your post?

Thanks,

Shaunak

Yashas Sridat · ‎03-21-2016

Hello Shaunak,

The interconnection from the router to the switch is done from the router F0 and connected to the switch f0/24.

And the natting from inside is done by vlan1.

1. Cannot ping each other.
2. Cannot change LAN virtual interface from vlan 1 to vlan 30 ( if its changed line is up and protocol is down from vlan30).
3. If I want to create different vlan, is the ok?

interface Vlan1
 description LAN
 ip address 10.10.10.1 255.255.255.0 secondary
 ip address 30.30.30.1 255.255.255.0 secondary
 ip address 40.40.40.1 255.255.255.0 secondary
 ip address 20.20.20.1 255.255.255.0

Thanks

Shaunak · ‎03-21-2016

Yashas,

Please remove the etherchannel config from port f0/24 from the switch and keep it as trunk.

interface FastEthernet0/24
 switchport trunk allowed vlan 1,10,20,30
 switchport mode trunk
 switchport nonegotiate
 channel-group 1 mode active  <<< Remove this

Configure f0 on the router as trunk I reckon the 877 has a switchport of which the fe interfaces are a part of.

To bring up the corresponding SVIs on the router you'll have to configure the corresponding VLANs on the router as well, only then the SVIs will be in an up/up state otherwise it will be in an up/down state.

See if this helps.

Thanks,

Shaunak

Yashas Sridat · ‎03-26-2016

Hello Shaunak,

Thanks for your support its working now.

:)

Shaunak · ‎03-27-2016

You're welcome Yashas.

Thanks,

Shaunak