cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
332
Views
0
Helpful
5
Replies

switch managment ip address.

Hi all.

configured a new switch 2960s. did not give switch 2960s  a defaut-gateway. but i give swich a managment ip address. from core i can see via cdp nei. but when i try to connect to 2960s switch its not connect me.

is the right it not let me telnet connection because switch itself does not have a default ip gateway.

thank in advance.

please do not forget to rate.
5 Replies 5

Mark Malone
VIP Alumni
VIP Alumni

Hi Yes you need a default gateway so your traffic knows how to get back to you

an ip address on a layer 2 switch is purely for mgmt. purposes it has no handle on how the traffic works

pwwiddicombe
Level 4
Level 4

CDP will allow you to see directly connected neighbors and some information (IP, IOS version, platform, etc.)  Even misconfiguration of the device still allows it to be seen (provided both sides have not disabled CDP).

Connectivity will depend on "sufficiently correct configuration" on both sides - and sometimes you can "get away with" misconfiguration, depending on how complex the network is.

If the connection is purely Layer 2; and the management address AND MASK are correct, the gateway can be omitted.  However, don't expect then to reach the new device from another subnet.

Note I highlighted MASK above - it can cause confusion.  If the destination address "appears to be" in the same subnet based on IP -and- mask, then it won't attempt to look outside it's own subnet.  If it determines it's outside of that, it will only look for it's gateway to resolve connectivity.

PS:  Ping of the IP address probably should be tried first.  If Ping fails, telnet will also; unless there are configured ACL's that could be blocking specific traffic. 

thank you i just have pasted the running config if you dont mind to have a look please.

please do not forget to rate.

Now i define a ip default-gatway but still i am unable to connect to switch. please see the below config. please any input will be high appriciated.

show run
Building configuration...

Current configuration : 11911 bytes
!
! Last configuration change at 15:56:02 UTC Wed Mar 23 2016
! NVRAM config last updated at 14:23:01 UTC Wed Mar 23 2016
!
version 15.2
no service pad
service timestamps debug datetime
service timestamps log datetime
service password-encryption
!
hostname SW-RPH-P21-Hazelhurst-R98-1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$gB5I$L3pGpJG15dKemXSmKVnhs.
!
aaa new-model
!
!
aaa authentication login default group tacacs+ enable
aaa authentication login LXRT group tacacs+ none
aaa authentication enable default group tacacs+ enable
aaa authorization commands 15 default group tacacs+
!
!
!
!
!
!
aaa session-id common
switch 1 provision ws-c2960x-48fpd-l
!
!
no ip domain-lookup
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-1737987072
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1737987072
revocation-check none
rsakeypair TP-self-signed-1737987072
!
!
crypto pki certificate chain TP-self-signed-1737987072
certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 31373337 39383730 3732301E 170D3136 30333232 30393230
  30385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37333739
  38373037 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100DBF3 17887750 5899EACE 1E2DADD1 7B768C8C 08D1944E 722E4CB9 9C062DE0
  EF6979FC 2B5E9A74 CE6FF55A 6D4D8219 22CF75AD 5378C0C5 F36B6901 0AE1B2D2
  B6C2ABF6 C6561A9E F6B87495 F2A87217 58870C7A FD9FF25A F228DD4F 5298B836
  A9F70C50 74E069F1 C1BD7FE7 52A3AC48 03F5D37D 796975B1 226C8715 DE5F365A
  3F430203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
  551D2304 18301680 1462DB19 5ABC368C DF4AFBD2 E521C4E8 1542D50E 65301D06
  03551D0E 04160414 62DB195A BC368CDF 4AFBD2E5 21C4E815 42D50E65 300D0609
  2A864886 F70D0101 05050003 818100A1 64D0CC71 01940EA2 20864B44 CA5096B4
  95C630AC A21238E7 F3E0E126 89F2DB8F 6D90127B CFFF55F1 B2F09DD9 ECC72718
  7CB026C5 3A787AD3 F9835DAB 6F49E77D 6341966F E6A8AD1B 4924E9F6 3A74B69D
  C233A7BD 48B670F6 7E818421 FF1E018B EB94624A 05BCCDBE A49340F4 A6F72600
  22C8C7C9 B54AECCF FB844EB2 A5916C
        quit
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
!
!
vlan internal allocation policy ascending
!
!
class-map match-all EPR-DATA
  description EPR traffic to core
match access-group name EPR-DATA
!
policy-map ACCESS-2960-LAN-EDGE-IN
description Set DSCP PerHopBehaviour Label for EPR Traffic
class EPR-DATA
  set ip dscp af21
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
no ip address
shutdown
!
interface GigabitEthernet1/0/1
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/2
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/3
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/4
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/5
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/6
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/7
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/8
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/9
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/10
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/11
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/12
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/13
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/14
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/15
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/16
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/17
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/18
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/19
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/20
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/21
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/22
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/23
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/24
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/25
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/26
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/27
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/28
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/29
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/30
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/31
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/32
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/33
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/34
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/35
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/36
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/37
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/38
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/39
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/40
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/41
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/42
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/43
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/44
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/45
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/46
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/47
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/48
switchport access vlan 360
switchport mode access
spanning-tree portfast
service-policy input ACCESS-2960-LAN-EDGE-IN
!
interface GigabitEthernet1/0/49
description Link
switchport trunk allowed vlan 2,360
switchport mode trunk
mls qos trust dscp
spanning-tree cost 200
!
interface GigabitEthernet1/0/50
description LH-GH
switchport trunk allowed vlan 2,360
switchport mode trunk
mls qos trust dscp
spanning-tree cost 100
!
interface TenGigabitEthernet1/0/1
!
interface TenGigabitEthernet1/0/2
!
interface Vlan1
description UN-USED_VLAN
no ip address
no ip route-cache
shutdown
!
interface Vlan2
description Preston-Management-VLAN
ip address 10.178.117.4 255.255.255.128
no ip route-cache
!
ip default-gateway 10.178.117.1
ip http server
ip http secure-server
!
!
ip access-list extended EPR-DATA
permit ip any 10.178.6.0 0.0.0.255
remark Match IP address of the EPR subnet
!
snmp-server engineID local 800000090300000A8AF5F181
snmp-server community lthpublic RO
snmp-server enable traps snmp authentication linkdown linkup coldstart
snmp-server enable traps cluster
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps syslog
snmp-server enable traps vtp
snmp-server enable traps mac-notification change move threshold
snmp-server enable traps vlan-membership
tacacs-server host 10.178.1.162
tacacs-server host 10.178.5.80
tacacs-server directed-request
tacacs-server key 7 072335645A3B0D2414330848
!
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
privilege level 15
logging synchronous
login authentication LXRT
line vty 5 15
privilege level 15
logging synchronous
login authentication LXRT
!
ntp server 10.178.1.201
end

please do not forget to rate.

I have resloved the issue.

the reason i was not able to get connect to swtich because there was no ip-default gatway.

but after given the ip default gatway command i was also again unable to get connect remotely.

also there was a managment ip address configured. but the managment ip address was in  wrong vlan.

for Example.

My last setup was as

ip default gateway 10.178.117.1

vlan 2

description Managment address

ip add 10.178.117.4 255.255.255.128

I change into this and it worked

vlan 2

no ip address

vlan 360

descripton managment

ip add 10.178.117.4 255.255.255.128

ip default gateway 10.178.117.1

please do not forget to rate.
Review Cisco Networking for a $25 gift card