routing problem... Core Dan Access setup.

[garcia.mike1]

have a routing issue..

the setup is core, distribution, access

I have a wireless ip phone that is connected to my AP and authenticated... it shows up using cdp.

I can ping from the core to the IP Phone fine

I CANNOT ping the IP phone directly from the DAN switch or the access switch that the access point is plugged into or even from the ap... i get the unreachable msg

U.U.U

all routes are there and are directly connected links.

when i ping the phone from a workstation i get destination network unreachable.

when i ping from the core it works

not sure what else to check

mini diagram is

Core---Dan---Access(MDF)--Accesspoint

when i ping it from the core it has to go through the dan and access to hit the ap and that works fine... but the phone isnt making it back to checkin with the call manager...

all switches are 6500's with dual sup 720's

HSRP running at the core.

[amit-singh]

Hi,

What is the ip address of the work station and the vlan it is conncted to. What is the vlan where Ap/phone is connected. What is the gateway for work statation. Is that the 6500 vlan interface or some other ip ?

Please paste the config of all the switches. Mainly the full config from core and the trunk interface config from the DAN and access switch.

HTH,

-amit singh

[garcia.mike1]

They workstation is in the 10.2 vlan

the phone in the 10.85

the ap and the switch are in the 10.2 vlan as well...

the switch configs as HUGE btw... let me try and get them though...

the gateways for each vlan are 10.x.0.1

so 10.2.0.1 for the 10.2

10.85.0.1 for the phone

the gatways do reply when pinged from any switch... it is the phone that only replies from the core.

they are all /16 btw

trunking is enabled on the ap interface as well as the switch interface that it is connected to... native is set for vlan 2 and trunking is dot1q

[Wilson Samuel]

Hi Mike,

Can you please do the following and come back with the results:-

1. Ping the AP from the Core

2. Ping the AP from the Desktop

3. Ping the Access Switch from the Core

4. Ping the Access Switch from the DAN

Also, if you could run a trace, it would be of great help.

Regards,

Wilson Samuel

[garcia.mike1]

what you requested got a reply from them all...

but if i try and hit the PHONE via ip it wont go through... unless i am at the core.

if i ping from workstation it comes back with

Pinging 10.85.1.119 with 32 bytes of data:

Reply from 10.2.0.1: Destination net unreachable.

Request timed out.

Reply from 10.2.0.1: Destination net unreachable.

Reply from 10.2.0.1: Destination net unreachable.

10.2.0.1 is my gateway for my vlan

so i telnet to 10.2.0.1 HSRP virtual ip

if i ping from core to phone i get...

ESOC_Core_SW1#ping 10.85.1.119

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.85.1.119, timeout is 2 seconds:

!!!!!

then next step is to ping phone from dan

ESOC_DAN_SW1#ping 10.85.1.119

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.85.1.119, timeout is 2 seconds:

U.U.U

Success rate is 0 percent (0/5)

now i ping phone from access MDF switch...

EA-MDF-SW1#ping 10.85.1.119

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.85.1.119, timeout is 2 seconds:

U.U.U

Success rate is 0 percent (0/5)

[sebastian.wiegand]

hi,

did u assign an default gateway to the phone?

[garcia.mike1]

yes... 10.85.0.1

which i can ping from

workstation, core, dan, access... anywhere...

10.85.0.1 is up and functional...

10.85 is the wireless vlan for wireless phones only..

btw this happened after a major network outage... trying to backtrack what could have caused this...