02-05-2013 09:31 PM - edited 03-07-2019 11:32 AM
Dear All thanks in Advance ,
i configured the VLAN810, with DHCP services, while i try to ping the host which is connected to gi 1/0/2 from my gi 1/0/1 , i can't ping the same vlan host , while i try to debug ip icmp its showing ,
(
C3750XB11#sh running-config
Building configuration...
Current configuration : 12053 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname C3750XB11
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$ovSU$S.FcD9PmV0L.R1GNYtcVm1
!
username test privilege 15 password 7 120D000406
!
!
aaa new-model
!
!
aaa authentication login ssh local
!
!
!
aaa session-id common
clock timezone MSK 3
switch 1 provision ws-c3750x-24
system mtu routing 1500
ip routing
ip dhcp excluded-address 10.86.103.1 10.86.103.100
ip dhcp excluded-address 10.86.100.1 10.86.103.100
ip dhcp excluded-address 10.86.101.1 10.86.101.100
ip dhcp excluded-address 10.86.102.1 10.86.102.100
ip dhcp excluded-address 10.86.104.1 10.86.104.100
ip dhcp excluded-address 10.86.105.1 10.86.105.100
ip dhcp excluded-address 10.86.106.1 10.86.106.100
ip dhcp excluded-address 10.86.107.1 10.86.107.100
ip dhcp excluded-address 10.86.108.1 10.86.108.100
ip dhcp excluded-address 10.86.109.1 10.86.109.100
ip dhcp excluded-address 10.86.200.1 10.86.200.100
ip dhcp excluded-address 10.86.210.1 10.86.210.100
ip dhcp excluded-address 10.86.220.1 10.86.220.100
ip dhcp excluded-address 10.86.230.1 10.86.230.100
ip dhcp excluded-address 10.86.240.1 10.86.240.100
ip dhcp excluded-address 10.86.11.1 10.86.11.100
ip dhcp excluded-address 10.86.10.1 10.86.10.100
!
ip dhcp pool vlan811
network 10.86.11.0 255.255.255.0
default-router 10.86.11.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan100
network 10.86.100.0 255.255.255.0
default-router 10.86.100.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan101
network 10.86.101.0 255.255.255.0
default-router 10.86.101.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan102
network 10.86.102.0 255.255.255.0
default-router 10.86.102.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan103
network 10.86.103.0 255.255.255.0
default-router 10.86.103.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan104
network 10.86.104.0 255.255.255.0
default-router 10.86.104.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan105
network 10.86.105.0 255.255.255.0
default-router 10.86.105.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan106
network 10.86.106.0 255.255.255.0
default-router 10.86.106.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan107
network 10.86.107.0 255.255.255.0
default-router 10.86.107.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan108
network 10.86.108.0 255.255.255.0
default-router 10.86.108.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan109
network 10.86.109.0 255.255.255.0
default-router 10.86.109.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan200
network 10.86.200.0 255.255.255.0
default-router 10.86.200.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan220
network 10.86.220.0 255.255.255.0
default-router 10.86.220.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan230
network 10.86.230.0 255.255.255.0
default-router 10.86.230.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan210
network 10.86.210.0 255.255.255.0
default-router 10.86.200.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
ip dhcp pool vlan810
network 10.86.10.0 255.255.255.0
default-router 10.86.10.1
dns-server 94.77.215.126 8.8.8.8
lease 168
!
!
no ip domain-lookup
!
!
crypto pki trustpoint TP-self-signed-4045461376
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4045461376
revocation-check none
rsakeypair TP-self-signed-4045461376
!
!
crypto pki certificate chain TP-self-signed-4045461376
certificate self-signed 01
30820242 308201AB A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34303435 34363133 3736301E 170D3933 30333036 31353432
34335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30343534
36313337 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100F3CE 26827A55 F44BA041 D5DEAD66 942D0E3D 1C096D55 2079CBA7 6F0F3443
624FBF79 2195A679 5CB71372 A9CF2E46 7827792E 33012546 80C4E847 6AA02D22
E7D82328 04EB45D8 F91E7581 ABC11B00 0B6D328C 348C27E1 E1009A43 41721F52
023F6073 367D9433 1374A36B FCFB2E32 6B61386F 45CBED1D EE1411B0 375DEDF9
74690203 010001A3 6A306830 0F060355 1D130101 FF040530 030101FF 30150603
551D1104 0E300C82 0A433337 35305842 31312E30 1F060355 1D230418 30168014
9F1A3F73 D93A2370 32BC8F90 F2ACDC06 7A2FED34 301D0603 551D0E04 1604149F
1A3F73D9 3A237032 BC8F90F2 ACDC067A 2FED3430 0D06092A 864886F7 0D010104
05000381 8100621F 71AEB6EE 000231F4 E964D7EB 00F22044 3748E6F4 51200E12
1F8DCDDB 08768B6F E099F4D2 FC29C9E0 ED5B9442 1F4B4AF9 B8026DC8 91BD5213
44BF5490 F60B63BB 00CCFA51 84B85037 13DBE666 D07CFFCE F00A5BD9 16490577
B890421F F564F552 E0AC349C AE8F43D7 F11E2057 31C73A79 6BFC849D 81A87124
04E0D985 7265
quit
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 12-13,100-109,200,210,220,230,240,250,510,810-811 priority 0
spanning-tree vlan 886 priority 0
!
!
!
!
vlan internal allocation policy ascending
!
!
!
interface FastEthernet0
no ip address
no ip route-cache cef
no ip route-cache
no ip mroute-cache
!
interface GigabitEthernet1/0/1
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/2
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/3
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/4
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/5
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/6
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/7
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/8
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/9
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/10
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/11
switchport access vlan 12
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/12
switchport access vlan 12
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/13
switchport access vlan 13
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/14
switchport access vlan 13
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/15
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/16
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/17
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/18
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/19
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/20
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/21
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/22
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/23
switchport access vlan 101
switchport mode access
shutdown
spanning-tree portfast
!
interface GigabitEthernet1/0/24
switchport access vlan 510
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/1/1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
speed nonegotiate
!
interface GigabitEthernet1/1/2
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
speed nonegotiate
!
interface GigabitEthernet1/1/3
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
speed nonegotiate
!
interface GigabitEthernet1/1/4
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
speed nonegotiate
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan12
description DMZVLAN
ip address 10.31.10.2 255.255.255.0
!
interface Vlan13
description connect to Firewall
ip address 10.41.10.2 255.255.255.0
!
interface Vlan100
description Host@IT
ip address 10.86.100.1 255.255.255.0
!
interface Vlan101
description Host@DEB
ip address 10.86.101.1 255.255.255.0
!
interface Vlan102
description Host@DED
ip address 10.86.102.1 255.255.255.0
!
interface Vlan103
description Host@DEF
ip address 10.86.103.1 255.255.255.0
!
interface Vlan104
description Host@DEG
ip address 10.86.104.1 255.255.255.0
!
interface Vlan105
description Host@DEL
ip address 10.86.105.1 255.255.255.0
!
interface Vlan106
description Host@DEP
ip address 10.86.106.1 255.255.255.0
!
interface Vlan107
description Host@DER
ip address 10.86.107.1 255.255.255.0
!
interface Vlan108
description Reserve1
ip address 10.86.108.1 255.255.255.0
!
interface Vlan109
description Reserve2
ip address 10.86.109.1 255.255.255.0
!
interface Vlan200
description Secure
ip address 10.86.200.1 255.255.255.0
!
interface Vlan210
description VoIP
ip address 10.86.210.1 255.255.255.0
!
interface Vlan220
description VideoSurv
ip address 10.86.220.1 255.255.255.0
!
interface Vlan230
description Reserve3
ip address 10.86.230.1 255.255.255.0
!
interface Vlan240
description Reserve4
ip address 10.86.240.1 255.255.255.0
!
interface Vlan250
description GO TELE
no ip address
!
interface Vlan510
description For Access poit connected to core Switch
ip address 10.51.10.2 255.255.255.0
!
interface Vlan810
description Serve Farm
ip address 10.86.10.1 255.255.255.0
!
interface Vlan811
description Research
ip address 10.86.11.1 255.255.255.0
!
interface Vlan886
description Management
ip address 10.86.86.1 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.41.10.1
ip route 172.20.22.0 255.255.255.0 10.41.10.1
ip http server
ip http authentication local
ip http secure-server
!
snmp-server community public RO
!
banner exec ^CCC
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$ $$
$$ For Un-Authorized Users Legal Action Can Be Taken $$
$$ $$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
^C
banner login ^CCC
*************************************************************
*************************************************************
**** Access for Authorized personal only ****
*************************************************************
Note:C3750XB11
.............................................................
^C
!
line con 0
logging synchronous
line vty 0 2
exec-timeout 20 0
logging synchronous
login authentication ssh
transport preferred ssh
transport input ssh
transport output telnet ssh
line vty 3 4
logging synchronous
login authentication ssh
transport preferred ssh
transport input ssh
line vty 5 15
!
ntp authentication-key 1 md5 03105E1812 7
ntp trusted-key 1
ntp clock-period 36026658
ntp server 94.77.195.33 key 1
end
)
C3750XB11
ip dhcp pool vlan810
network 10.86.10.0 255.255.255.0
default-router 10.86.10.1
dns-server 94.77.215.126 8.8.8.8
lease 168
interface Vlan810
description Serve Farm
ip address 10.86.10.1 255.255.255.0
end
interface GigabitEthernet1/0/1
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/2
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/3
switchport access vlan 810
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/4
switchport access vlan 810
switchport mode access
spanning-tree portfast
C3750XB11#ping 10.86.101.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.86.101.3, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
C3750XB11#
*Mar 8 00:47:15.981: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:47:16.988: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:47:17.986: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:47:18.993: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:47:41.750: ICMP: time exceeded rcvd from 94.77.192.230
C3750XB11#
*Mar 8 00:48:45.784: ICMP: time exceeded rcvd from 94.77.192.230
*Mar 8 00:48:45.935: ICMP: echo reply sent, src 10.86.101.1, dst 172.20.22.3
C3750XB11#
*Mar 8 00:48:46.925: ICMP: echo reply sent, src 10.86.101.1, dst 172.20.22.3
*Mar 8 00:48:47.932: ICMP: echo reply sent, src 10.86.101.1, dst 172.20.22.3
C3750XB11#
*Mar 8 00:48:49.207: ICMP: echo reply sent, src 10.86.101.1, dst 172.20.22.3
C3750XB11#
*Mar 8 00:49:12.492: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:13.499: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:14.505: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:15.503: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:16.510: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:17.508: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:18.515: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:19.513: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:20.520: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:21.518: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:22.524: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:23.522: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:24.529: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:25.527: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:26.534: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:27.540: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:28.539: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:29.537: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:49:49.760: ICMP: time exceeded rcvd from 94.77.192.230
*Mar 8 00:50:53.762: ICMP: time exceeded rcvd from 94.77.192.230
C3750XB11#
*Mar 8 00:51:03.031: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:51:04.029: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:51:05.035: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:51:06.034: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
C3750XB11#
*Mar 8 00:51:57.729: ICMP: time exceeded rcvd from 94.77.192.230
C3750XB11#
*Mar 8 00:52:11.805: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:12.811: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:52:13.809: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:14.808: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:52:15.823: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:16.821: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:52:17.819: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:18.817: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:52:19.815: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:20.814: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:52:21.829: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:22.827: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:52:23.842: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:52:24.857: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:25.855: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:52:26.853: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:27.851: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
C3750XB11#
*Mar 8 00:53:01.739: ICMP: time exceeded rcvd from 94.77.192.230
C3750XB11#
*Mar 8 00:54:05.724: ICMP: time exceeded rcvd from 94.77.192.230
C3750XB11#
*Mar 8 00:55:09.733: ICMP: time exceeded rcvd from 94.77.192.230
C3750XB11#
*Mar 8 00:56:13.726: ICMP: time exceeded rcvd from 94.77.192.230
C3750XB11#
*Mar 8 00:56:36.869: ICMP: dst (10.86.101.1) port unreachable sent to 10.86.101.3
C3750XB11#
*Mar 8 00:57:17.727: ICMP: time exceeded rcvd from 94.77.192.230
-------
icmp echo request is not coming
*Mar 8 00:47:17.986: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:47:18.993: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:27.540: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
*Mar 8 00:49:28.539: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.101.3
time exceeded rcvd from 94.77.192.230
*Mar 8 00:52:15.823: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
*Mar 8 00:52:16.821: ICMP: echo reply sent, src 10.86.10.1, dst 10.86.10.200
02-05-2013 10:12 PM
Hi Aman,
The debug shows src 10.86.10.1, dst 10.86.101.3...Are they on the same VLAN????From your configuration i dont think so...
Are you able to ping the gateway from the host? Verify if any antivirus or firewall is enabled on the host. If so trun off them and try pinging.
Regards
Najaf
Please rate when applicable or helpful !!!
02-06-2013 12:11 AM
Hi Aman,
As Najaf suggested couple of things you need to check here:
1- Vlan 810 has the network 10.86.10.X also the DHCO pool is within the same network.
2- Check the ip address of the client which is on Vlan 810?( The client should have recieved the ip address 10.86.10.X network if he is getting something else then we have some problem here.
3- Provide us the ipconfig/all output from the client machine.
4- How did you got to know the ip address 10.86.101.3 ?
Regards
Inayath
02-06-2013 01:10 AM
i can ping the gatway from both the clintes , and ip config/all is the same as as DHCP , the problem here is can't ping the host wich is in same vlan , in debug ip icmp , its only showing ICMP reply , not showing ICMP echo request
02-06-2013 01:32 AM
Could you please paste the ipconfig /all output here ?
Regards
Inayath
02-06-2013 01:49 AM
This host,
Does it have a software fw enabled on it? - if so make sure it allows incoming icmp traffic
res
Paul
Please don't forget to rate this post if it has been helpful.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide