02-09-2015 01:57 AM - edited 03-07-2019 10:33 PM
Hi there,
I've got a problem with VLAN routing.
First said, I'm new to VLAN's.
I've set up a Debian DHCP Server with following VLANS:
eth0 Link encap:Ethernet HWaddr b8:27:eb:69:d0:18 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:360 errors:0 dropped:0 overruns:0 frame:0 TX packets:139 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:28838 (28.1 KiB) TX bytes:16833 (16.4 KiB) eth0.1 Link encap:Ethernet HWaddr b8:27:eb:69:d0:18 inet addr:10.1.0.1 Bcast:10.1.15.255 Mask:255.255.240.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) eth0.5 Link encap:Ethernet HWaddr b8:27:eb:69:d0:18 inet addr:10.105.100.1 Bcast:10.105.103.255 Mask:255.255.252.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) eth0.10 Link encap:Ethernet HWaddr b8:27:eb:69:d0:18 inet addr:10.110.100.1 Bcast:10.110.103.255 Mask:255.255.252.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:347 errors:0 dropped:0 overruns:0 frame:0 TX packets:139 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:26816 (26.1 KiB) TX bytes:15165 (14.8 KiB) eth0.15 Link encap:Ethernet HWaddr b8:27:eb:69:d0:18 inet addr:10.115.100.1 Bcast:10.115.103.255 Mask:255.255.252.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) eth0.20 Link encap:Ethernet HWaddr b8:27:eb:69:d0:18 inet addr:10.120.100.1 Bcast:10.120.103.255 Mask:255.255.252.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:5 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:230 (230.0 B) TX bytes:0 (0.0 B) eth0.30 Link encap:Ethernet HWaddr b8:27:eb:69:d0:18 inet addr:10.130.100.1 Bcast:10.130.103.255 Mask:255.255.252.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:4 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:184 (184.0 B) TX bytes:0 (0.0 B) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
and the switch configuration is the following: (shortened for the problems purpose)
switchcfd817#show running-config config-file-header switchcfd817 v1.3.0.62 / R750_NIK_1_3_647_260 CLI v1.0 set system queues-mode 4 file SSD indicator encrypted @ ssd-control-start ssd config ssd file passphrase control unrestricted no ssd file integrity control ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0 ! vlan database vlan 2,5,10,15,20,30 exit voice vlan id 15 voice vlan state disabled voice vlan oui-table add 0001e3 Siemens_AG_phone________ voice vlan oui-table add 00036b Cisco_phone_____________ voice vlan oui-table add 00096e Avaya___________________ voice vlan oui-table add 000fe2 H3C_Aolynk______________ voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone voice vlan oui-table add 00d01e Pingtel_phone___________ voice vlan oui-table add 00e075 Polycom/Veritel_phone___ voice vlan oui-table add 00e0bb 3Com_phone______________ ip dhcp relay address 10.110.100.1 ip dhcp relay enable bonjour interface range vlan 1 hostname switchcfd817 re: <space>, Quit: q or CTRL+Z, One line: <return> ip ssh password-auth : <return> clock timezone " " 1 clock summer-time web recurring eu ip domain polling-interval 18 ip address 10.1.0.10 255.255.240.0 no ip address dhcp ip dhcp relay enable ! interface vlan 2 name Admin ip address 10.102.100.10 255.255.252.0 ! interface vlan 5 name Guests ip address 10.105.100.10 255.255.252.0 ip dhcp relay enable ! interface vlan 10 name Server ip address 10.110.100.10 255.255.252.0 ! interface vlan 15 name Voice ip address 10.115.100.10 255.255.252.0 ip dhcp relay enable ! interface vlan 20 name Printer ip address 10.120.100.10 255.255.252.0 ip dhcp relay enable ! interface vlan 30 name "Mechanical Engineers" ip address 10.130.100.10 255.255.252.0 ip dhcp relay enable ! interface gigabitethernet1/1/19 switchport trunk allowed vlan add 10,20,30 ! interface gigabitethernet1/1/20 switchport trunk native vlan 10 ! interface gigabitethernet1/1/25 switchport mode access switchport access vlan 5 ! interface Port-channel1 description data-syn-1 ! exit macro auto built-in parameters printer $native_vlan 20 macro auto built-in parameters host $max_hosts 10 $native_vlan 1
With a client connected to a VLAN 30 or VLAN 10 port I get an IP from the DHCP, so DHCP relaying works.
Now the Problem:
I want to ping the DHCP Server on it's VLAN 10 IP 10.110.100.1 from VLAN 5 (static IP: 10.105.100.50 GW: 10.105.100.10)
this shows the routes automatically setup by the switch:
switchcfd817#show ip route Maximum Parallel Paths: 1 (1 after reset) IP Forwarding: enabled Codes: > - best, C - connected, S - static, R - RIP C 10.1.0.0/20 is directly connected, vlan 1 C 10.105.100.0/22 is directly connected, vlan 5 C 10.110.100.0/22 is directly connected, vlan 10 C 10.120.100.0/22 is directly connected, vlan 20 C 10.130.100.0/22 is directly connected, vlan 30
and the ARP list from the switch:
switchcfd817#show arp Total number of entries: 2 VLAN Interface IP address HW address status --------------------- --------------- ------------------- --------------- vlan 5 gi1/1/25 10.105.100.50 00:80:80:8a:61:14 dynamic vlan 10 gi1/1/19 10.110.100.1 b8:27:eb:69:d0:18 dynamic
I'm able to ping 10.110.100.10 (Switch on VLAN10) from VLAN 5 but not the DHCP Server.
What am I missing there?
best regards
Sundypha
02-09-2015 05:15 AM
After mirroring port GE19 (DHCP Server) I see that the Switch is sending the ping packet to the DHCP Server. But without a VLAN Tag. So what do I have to do, to let the DHCP Server accept VLan10 as it's native? or better, to let the swtich tag the native vlan on a trunk interface to prevent double-tagged packets? And the Switch also does an ARP Request who has 10.110.100.1 despite it should know it in it's ARP Table.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide