Switch ME 3400 E configured but cannot access to internet

[weihaianni]

Hi guys!

This is my first question

I have my switch() configured as below, but I cannot access the internet through it. The run config is listed below.

version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yafei
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
system mtu routing 1998
no ip subnet-zero
!
!
!
!
!
!
!
!
spanning-tree mode rapid-pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
!
vlan internal allocation policy ascending
!
vlan 2
!
!
!
interface FastEthernet0
no ip address
no ip route-cache
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface GigabitEthernet0/3
port-type nni
!
interface GigabitEthernet0/4
port-type nni
!
interface Vlan1
ip address 192.168.3.160 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.3.1
ip http server
ip http secure-server
ip sla enable reaction-alerts
!
line con 0
password Hammer7jiojio
login
line vty 0 4
login
line vty 5 15
login
!
end

[Ramblin Tech]

What do you mean when you say "I cannot access the internet through it"? You cannot access an Internet site from the console or an exec prompt? A client device attached to one of the ports cannot pass traffic to the Internet?

[weihaianni]

I have a pc connected to the switch and the switch itself connected to my home router 

[balaji.bandi]

This is switch not a router - so you need give more information in front of switch is there any router connected (which is doing NAT ?)

if the Router Infront of that switch, make sure you have route back for the subnet and subnet have NAT configured.

Default-gateway configured if the Switch or device acting as layer 2, if you need routing you need to change to ip route x.x.x

[weihaianni]

I do have my home router connected to it. I also have two end pc connect to it and I failed to ping each other. 

[weihaianni · Accepted solution]

Hi guys, I found the issue:

From here https://www.cisco.com/c/en/us/products/collateral/switches/me-3400e-series-ethernet-access-switches/data_sheet_c78-495220.html the product data sheet, it said no local-switching for security issue. And there are 3 port types for this switch: nni uni eni, and uni cannot talk to uni. So I changed one of the uni to nni then connected the nni to another switch. As a result, I can reach the internet by connecting to the uni(for user).

[weihaianni]

http://wiki.kemot-net.com/switching-me-interface-characteristics this document showed how to change port type. This is only can be done on an access switch.

[Ramblin Tech]

The ME3400 was designed to support SPs offering a Metro-Ethernet service (the "ME" of ME3400). It was envisioned that it might be installed at a site with multiple, unrelated tenants subscribing to the service and that it would be inappropriate to allow local switching between the ports of unrelated subscribers, hence the concept of UNI ports (connected to subscribers) and NNI ports (uplinks to metro-e core). If the ME3400 is being deployed entirely for internal use within your own organization, no need for UNI ports.

[weihaianni]

good to know, very useful information