Unable to ping between VLANS with a Cisco 2811 using a 16 port switch module

[Kyle C Barnes]

Hello! 

Pretty basic setup...

2 VLANS:

10.0.0.0/24 and 10.0.100.0/24

SVI for the first one is 10.0.0.1 and the SVI for the second is 10.0.100.1.

I've configured two DHCP pools as follows:

ip dhcp pool Home_Data

   network 10.0.0.0 255.255.255.0

   dns-server 8.8.8.8 8.8.4.4

   default-router 10.0.0.1

!

ip dhcp pool Home_Wireless

   network 10.0.100.0 255.255.255.0

   dns-server 8.8.8.8 8.8.4.4

   default-router 10.0.100.1

Connected devices pull an IP and can get out to the internet just fine.  I've found that devices on separate VLANs are unable to talk to one another.  I have IP routing enabled and there are no ACLs.

Test...

Barnes_Router#ping 10.0.0.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.0.0.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

Barnes_Router#ping 10.0.100.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.0.100.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

Sending 5, 100-byte ICMP Echos to 10.0.100.2, timeout is 2 seconds:

Packet sent with a source address of 10.0.0.1

.....

Success rate is 0 percent (0/5)

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.0.0.2, timeout is 2 seconds:

Packet sent with a source address of 10.0.100.1

.....

Success rate is 0 percent (0/5)

Routing table for those interested

     10.0.0.0/24 is subnetted, 3 subnets

C       10.0.0.0 is directly connected, Vlan100

C       10.0.50.0 is directly connected, GigabitEthernet1/0

C       10.0.100.0 is directly connected, Vlan200

S*   0.0.0.0/0 [1/0] via 10.0.50.1

Why the hell can't they talk!?

Thanks!

Kyle

[Rejohn Cuares]

Could you please attach your full config.

Please rate replies and mark question as "answered" if applicable.

[Kyle C Barnes]

Sure!

http://pastebin.com/9PNrrV0z

[Jeff Van Houten]

Do you have the Vlans defined. In the vlan database? Defining an svi is not enough.

Sent from Cisco Technical Support iPad App

[Kyle C Barnes]

They are defined in the VLAN database.  Thanks so far!

[cadet alain · Accepted solution]

Hi,

Can you disable windows software firewall  on both machines and try again.

To test inter vlan routing you should ping a SVI address sourcing from other SVI.

Regards

Alain

Don't forget to rate helpful posts.

[Rejohn Cuares]

Host on each vlan can acces the Internet but not inter-vlan?

I suggest enabling debug ip packet detail on this router with a filter so you will get only the interesting traffic. Dont forget to disable IP CEF. Then perform a ping from vlan 100 to Vlan 200. Also post the Output of show vlan-switch.



Sent from Cisco Technical Support iPhone App