cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
659
Views
5
Helpful
5
Replies

Server1 cannot reach Server2 - both connected to the same switch but different VLANs

Blackschwanzer
Level 1
Level 1

Hello.

 

I have a user getting "security error when trying to access the Server2" from Server1.

 

Server1 - IP addr. 10.114.91.40 - Vlan1904 - Gateway 10.114.91.252/24

Server2 - IP addr. 10.115.210.76 - Vlan1877 - Gateway 10.115.210.252/24

 

I logged into Switch and and successfully pinged 10.115.210.76 but could not ping 10.114.91.40:

 

SW1# ping 10.114.91.40
PING 10.114.91.40 (10.114.91.40): 56 data bytes
36 bytes from 10.114.91.252: Destination Host Unreachable
Request 0 timed out
36 bytes from 10.114.91.252: Destination Host Unreachable
Request 1 timed out
36 bytes from 10.114.91.252: Destination Host Unreachable
Request 2 timed out
36 bytes from 10.114.91.252: Destination Host Unreachable
Request 3 timed out
36 bytes from 10.114.91.252: Destination Host Unreachable
Request 4 timed out

 

Here are further details. Any ideas what is going on here? Thank you:

 

SW1# traceroute 10.114.91.40
traceroute to 10.114.91.40 (10.114.91.40), 30 hops max, 40 byte packets
1 10.114.91.252 (10.114.91.252) 1.008 ms !H 0.418 ms !H 0.474 ms !H
SW1# sh ip route 10.114.91.40
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]

10.114.91.0/24, ubest/mbest: 1/0, attached
*via 10.114.91.252, Vlan1904, [0/0], 2y3w, direct

SW1# sh int Vlan1904
Vlan1904 is up, line protocol is up
Hardware is EtherSVI, address is 00aa.980c.3f41
Description: ***Linux_User_Test_2***
Internet Address is 10.114.91.252/24
MTU 9216 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 2/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA
Last clearing of "show interface" counters never
60 seconds input rate 9968116 bits/sec, 2960 packets/sec
60 seconds output rate 7807575 bits/sec, 2650 packets/sec
Load-Interval #2: 5 minute (300 seconds)
input rate 12.25 Mbps, 3.24 Kpps; output rate 11.08 Mbps, 2.97 Kpps
L3 Switched:
input: 61594435293 pkts, 20817831682880 bytes - output: 62930952743 pkts, 19735891643201 bytes
L3 in Switched:
ucast: 61529227443 pkts, 20810125939277 bytes - mcast: 65207850 pkts, 7705743603 bytes
L3 out Switched:
ucast: 62930952743 pkts, 19735891643201 bytes - mcast: 0 pkts, 0 bytes


SW1# sh ip route 10.114.91.40
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]

10.114.91.0/24, ubest/mbest: 1/0, attached
*via 10.114.91.252, Vlan1904, [0/0], 2y3w, direct


__________________


SW1traceroute 10.115.210.76
traceroute to 10.115.210.76 (10.115.210.76), 30 hops max, 40 byte packets
1 10.115.210.76 (10.115.210.76) 0.712 ms 0.554 ms 0.591 ms
SW1# sh ip route 10.115.210.76
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]

10.115.210.76/32, ubest/mbest: 1/0, attached
*via 10.115.210.76, Vlan1877, [250/0], 1d00h, am
SW# sh int Vlan1877
Vlan1877 is up, line protocol is up
Hardware is EtherSVI, address is bbbb.980c.3f41
Description: ***LINUX_BACKUP_TEST***
Internet Address is 10.115.210.252/24
MTU 9216 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA
Last clearing of "show interface" counters never
60 seconds input rate 22116 bits/sec, 4 packets/sec
60 seconds output rate 2976 bits/sec, 3 packets/sec
Load-Interval #2: 5 minute (300 seconds)
input rate 21.92 Kbps, 4 pps; output rate 3.17 Kbps, 3 pps
L3 Switched:
input: 227370630555 pkts, 330619803530696 bytes - output: 209935318021 pkts, 21355307781488 bytes
L3 in Switched:
ucast: 227167894930 pkts, 330596189744029 bytes - mcast: 202735625 pkts, 23613786667 bytes
L3 out Switched:
ucast: 209935318021 pkts, 21355307781488 bytes - mcast: 0 pkts, 0 bytes

5 Replies 5

dannykerr1
Level 1
Level 1
 

Hulk8647
Level 1
Level 1
can you post the whole switch config "show run"

David Miller
Level 1
Level 1

Would you also be able to provide the output from "show ip route" along with either the current running-config or the configuration from the interfaces that the servers connect to?

 

Kind Regards,

 

David

i cannot post the whole sh run cause its really huge and i am afraid to fail to remove some sensitive data.

Here is sh run interface:

SW1# sh run int Vlan1877

!Command: show running-config interface Vlan1877


version 5.2(7)

interface Vlan1877
no ip redirects
ip address 10.115.210.252/24
ip unreachables
ip ospf passive-interface
ip router ospf 1 area 0.0.0.0
hsrp version 2
hsrp 1877
authentication md5 key-chain HSRP
preempt delay minimum 180 reload 240
timers 1 3
ip 10.115.210.254
no shutdown
mtu 9216
description ***LINUX_BACKUP_TEST***

SW1# sh run int Vlan1904

!Command: show running-config interface Vlan1904
!Time: Wed May 9 16:52:42 2018

version 5.2(7)

interface Vlan1904
no ip redirects
ip address 10.114.91.252/24
ip unreachables
ip ospf passive-interface
ip router ospf 1 area 0.0.0.0
hsrp version 2
hsrp 1904
authentication md5 key-chain HSRP
preempt delay minimum 180 reload 240
timers 1 3
ip 10.114.91.254
ip dhcp relay address 10.252.63.132
ip dhcp relay address 10.252.63.4
ip dhcp relay address 10.83.234.2
ip dhcp relay address 10.83.234.34
no shutdown
mtu 9216
description ***Linux_User_Test_2***

This won't be sufficient enough to see whats wrong.

Can you at least ping the gateway?

ping 10.114.91.252
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card