Static Routing 3750x

[Tulipomwene Haukongo]

Hi all,

I have a Cisco 3750x connecting to a CE on a point to point link. The 3750 is also acting as a DHCP server for my LAN clients I have a default route pointing to 10.125.127.1 as next hope and I can reach HQ LAN

I have a challenge as my LAN clients can not see HQ even though my static route seem to be fine, or could it be that I have left out something. See attached drawing and below are my 3750 configs.

no aaa new-model
switch 1 provision ws-c3750x-12s
system mtu routing 1500
ip routing
ip dhcp remember
ip dhcp conflict resolution
ip dhcp excluded-address 172.25.168.1 172.25.168.15
ip dhcp excluded-address 172.25.168.129 172.25.168.138
ip dhcp excluded-address 172.25.168.65 172.25.168.75
!
ip dhcp pool AA
 network 172.25.168.0 255.255.255.192
 default-router 172.25.168.1
 dns-server 172.24.48.4 172.24.48.10
!
ip dhcp pool NN
 network 172.25.168.128 255.255.255.128
 default-router 172.25.168.129
 dns-server 172.24.48.4 172.24.48.10
!
ip dhcp pool CC
 network 172.25.168.64 255.255.255.192
 default-router 172.25.168.65
 dns-server 172.24.48.4 172.24.48.10
!

interface FastEthernet0
 ip address 10.125.127.2 255.255.255.252

 description WAN_CE
 no ip route-cache
!
interface GigabitEthernet1/0/1
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/2
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/3
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/4
 description OPW-ADMIN-SW01
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/5
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/6
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/7
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/8
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/9
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/10
 switchport access vlan 315
 switchport mode access
!
interface GigabitEthernet1/0/11
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/12
 description OPW-RECP-SW01
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 300,315,330,345
 switchport mode trunk
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan300
 ip address 172.25.168.1 255.255.255.192
!
interface Vlan315
 ip address 172.24.63.1 255.255.255.0
!
interface Vlan330
 ip address 172.25.168.129 255.255.255.128
!
interface Vlan345
 ip address 172.25.168.65 255.255.255.192
!
ip http server
ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0 10.125.127.1
!

 

[Jon Marshall]

Few points -

a) all your ports are configured as trunks. Where are clients connected to ?

b) are you advertising the client subnets across the MPLS cloud to HQ ?

c) not really important but why are you referencing the outgoing interface as well as the next hop IP in your default route ?

Jon

[Tulipomwene Haukongo]

Hi Jon,

All subnets are advertised across the MPLS, the trunks are going to the Access switches. My LAN clients are sitting behind the LAN switches and when I do traceroute to HQ LAN I only end up at default gateways, I can't even see 10.125.127.1

regards,

Tulee

[Jon Marshall]

Tulee

Does the CE device have routes for your LAN subnets  ?

Jon

[Tulipomwene Haukongo]

Yes it does, the problem seem to be more on the LAN. DHCP works, I can ping the gateways from the from the clients and I can't ping clients from the DHCP server. I can also not go beyond 10.125.127.2 from the LAN

Tulee

[Jon Marshall]

If you can't ping clients from DHCP server check for firewalls on the clients ie. can the clients ping the DHCP server.

Can you post "sh ip route" from

a) the 3750

and

b) the CE device

Jon

[mlund · Accepted solution]

Hi

Not shure, but isn't the fastethernet0 port just an out-of-band port for management, that shouldn't be used as a routed port?

Try to connect to a gigport instead.

/Mikael